Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kcmMNQ8lxNaLMN4igMqqEDUdTAg.cer
File: kcmMNQ8lxNaLMN4igMqqEDUdTAg.cer (raw, json)
Hash identifier: Mgs3orRRuimq741Ax9xm7wANA10NlUXQdI0sD/g/7hs=
Subject key identifier: 91:C9:8C:35:0F:25:C4:D6:8B:30:DE:22:80:CA:AA:10:35:1D:4C:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA84C63366D449A5AD447B6B3D54B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 56967
IP: 91.212.111.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:84:c6:33:66:d4:49:a5:ad:44:7b:6b:3d:54:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91c98c350f25c4d68b30de2280caaa10351d4c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:9b:46:6e:04:6f:3b:ec:cd:34:4f:eb:88:
1f:e8:a4:3d:75:2a:1f:f5:5a:bf:6d:c7:96:80:a1:
54:00:70:bb:59:4f:ed:fc:95:91:4f:a4:51:2c:98:
ba:36:2e:3d:74:bb:85:3f:61:bc:f1:70:1d:63:cf:
9c:98:1f:26:87:98:0c:61:6d:0e:e8:5a:b1:bc:6d:
8e:2e:67:7b:d5:ed:53:19:80:98:84:5a:b3:6b:12:
32:65:dc:cb:53:90:90:aa:da:89:99:cc:42:cb:ef:
c1:46:a2:0a:b3:32:55:cc:03:1b:b3:1d:3c:2a:4b:
c7:f6:5e:84:b2:61:d3:e1:77:b2:53:32:8d:b9:ba:
37:f1:d5:f0:df:2b:88:73:47:64:3c:d2:e8:a9:69:
69:a4:3e:c9:bd:d0:d4:b8:03:de:48:0a:fe:3b:fb:
79:8c:5d:5b:f3:f7:be:57:f6:b2:25:f7:4a:28:7b:
a8:2b:89:8c:a1:8c:e5:b5:9a:d0:df:40:99:86:51:
6a:7c:aa:13:e3:63:2a:e1:5e:bc:79:1b:f3:c1:67:
03:1d:db:28:91:12:89:fd:29:2f:29:6b:a6:43:3a:
61:e0:38:fc:39:2f:33:15:ef:b5:1d:b6:0e:41:fb:
68:65:72:76:72:2d:61:84:06:a0:16:57:44:a6:fd:
28:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C9:8C:35:0F:25:C4:D6:8B:30:DE:22:80:CA:AA:10:35:1D:4C:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.111.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56967
Signature Algorithm: sha256WithRSAEncryption
4c:9d:96:b2:7f:a1:1c:52:4b:a2:2e:dc:54:d6:eb:d0:d7:14:
43:2c:8a:c9:82:22:b5:e2:c0:2a:b6:89:44:a9:68:07:bb:4c:
0c:dc:f6:f9:7c:5e:c6:0b:e1:68:a0:1d:1a:eb:0d:fa:bf:66:
08:c4:68:a4:fc:c8:38:71:22:80:bb:79:01:97:f1:3a:8d:85:
e8:b0:d7:29:c9:cd:0a:26:7d:15:0f:35:52:d5:60:c6:22:6d:
0c:52:e0:47:4e:e4:f5:f7:59:3c:1f:e5:e5:7b:74:98:a3:c8:
b7:84:11:c1:ec:e8:21:f2:1c:83:3a:29:b6:d7:47:82:3f:e9:
b4:f5:96:46:e7:35:31:a4:fc:f1:fd:cc:2c:20:23:5b:4e:70:
39:50:1f:3d:f5:28:3a:8f:9b:78:6c:db:98:b5:3b:45:5b:52:
45:ba:ea:be:a6:35:26:98:43:ca:72:57:82:20:0d:86:bb:f6:
6c:59:cc:66:d1:e4:da:f1:dd:05:95:92:a9:fd:cc:4d:e1:21:
e0:36:cb:9e:64:3b:b2:78:8a:02:d1:a6:be:59:07:fe:80:ab:
31:ac:27:b8:8d:ba:6e:82:11:71:6d:bb:9c:cb:78:2b:ce:02:
9e:ec:37:9f:48:bc:2a:b0:6c:de:7c:ad:c6:80:b3:87:c5:b2:
61:e0:9f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:10 2026 by rpki-client