Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
File: kd3H2eAtRMa_jGNcHQcV9uicEBI.cer (raw, json)
Hash identifier: 4Gup8+kQPANIKIMZSM9sxQZx0q+7Y5yBBuBtbXVLwmI=
Subject key identifier: 91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A06C3A89CB0C4EE3F7AD64955262F4F8AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 04 Sep 2026 11:42:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198352
IP: 88.151.120.0/21
IP: 151.237.160.0/21
IP: 185.132.252.0/22
IP: 2a0c:b4c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:3a:89:cb:0c:4e:e3:f7:ad:64:95:52:62:f4:f8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 4 11:42:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:b3:19:73:68:8e:a9:fd:3c:0c:16:6c:4f:
f1:31:c9:26:ca:10:de:e1:13:8b:2d:c6:11:45:84:
57:5e:7c:91:db:68:f6:04:c5:70:a0:c2:74:0f:71:
60:c9:58:aa:88:0e:be:8e:54:55:84:d5:80:4a:87:
f9:31:e5:d7:b2:56:5c:0a:e5:c6:54:ad:99:53:bb:
32:ca:17:46:22:a0:40:f3:80:49:2c:be:b1:92:36:
1f:74:3f:9b:49:24:b6:8f:12:89:df:36:90:c8:5b:
b0:0e:72:15:1a:aa:47:12:f8:f3:cb:48:ba:80:19:
3c:b0:c4:d3:f1:5c:6c:30:7f:6d:79:8c:4f:c4:e4:
f2:43:62:4a:a8:02:04:ec:2a:37:87:1d:b7:ff:f1:
96:16:92:64:4b:ff:70:f6:5f:b3:c0:94:ef:7f:a1:
26:3e:0f:1e:5f:c0:b5:97:ec:21:4f:1b:43:db:91:
91:27:6c:79:0d:93:59:f9:75:bf:5e:8b:63:5f:3c:
cc:ab:8e:92:98:59:c5:0e:2f:65:d4:1c:67:d5:dc:
14:47:38:69:25:14:17:7c:9d:85:0c:34:45:bd:4e:
74:9e:b9:ae:d5:f2:09:5f:e8:b8:a2:dd:de:63:79:
63:34:0a:ae:5c:e1:7c:13:ce:c2:38:d3:53:68:4d:
30:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.120.0/21
151.237.160.0/21
185.132.252.0/22
IPv6:
2a0c:b4c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198352
Signature Algorithm: sha256WithRSAEncryption
51:f3:61:18:14:f4:44:84:bb:38:43:a1:9a:10:64:8b:e5:a8:
f7:42:72:67:cf:47:1e:f2:af:f3:ea:6f:28:9f:f6:01:1c:1b:
bf:fa:65:cb:c5:1f:be:7b:89:35:0b:73:b5:c8:8e:13:da:2d:
29:41:57:c5:8c:38:c4:67:b7:ba:02:77:2a:21:b7:95:16:67:
f4:4c:82:2c:f8:36:7c:69:a2:c3:5d:e4:54:be:f2:27:c0:b3:
11:eb:a6:2a:b4:74:2b:2c:a6:5f:81:77:eb:c5:50:5c:ac:f2:
eb:c3:42:84:69:c5:c8:6d:c4:46:1d:ee:e6:da:0f:7c:74:2f:
dd:e2:77:6c:50:fb:d2:1e:f5:a4:fd:22:21:ea:d0:bf:a7:e6:
aa:f1:4e:c1:80:4a:cb:f7:24:b1:5d:83:ff:d9:a1:5d:2d:93:
ac:b1:5b:33:2e:97:fa:6e:61:9a:70:5b:9b:f9:c3:6e:cb:01:
6a:e3:d0:ea:7b:5b:63:94:1c:5a:85:3d:c0:78:71:aa:24:56:
7f:73:96:c6:9c:35:93:42:31:ea:32:b1:3f:cb:82:e8:b0:89:
69:7d:97:f9:a2:f5:d0:e2:f9:72:d9:29:02:e8:2d:bd:50:0e:
ff:1b:6c:b9:5b:33:4e:ee:8c:5b:e1:a9:2a:4c:7d:36:39:df:
6b:5c:28:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:32:06 2026 by rpki-client