Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
File: m-CmEeBni40ynuVQMSskbg3PRpg.cer (raw, json)
Hash identifier: CL/Hq2r+6y6sDoKfTyxnYkVqdwy1RGMoBqmce+sRqWY=
Subject key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC928702F9D192E5C587126676B44A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:19:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 6744
IP: 150.140.0.0/17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:28:70:2f:9d:19:2e:5c:58:71:26:67:6b:44:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:19:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:0f:87:97:96:9e:b7:a3:48:10:64:b7:e4:
a3:1e:0b:8d:e1:b9:ee:48:6d:81:45:19:e1:8a:e5:
9c:98:2a:64:c9:e7:cc:41:96:33:0d:e6:c7:67:51:
94:dd:33:09:37:a8:09:ac:35:0c:95:13:21:c9:33:
a1:db:bf:88:51:6d:d1:a1:ce:bd:bd:c7:46:b7:58:
29:0d:29:d2:6b:c3:a6:cb:ee:ff:4f:e6:3f:ed:4d:
a4:fd:21:d8:f8:e7:55:28:a3:fa:7e:30:1a:23:06:
a9:f8:aa:98:b2:a0:62:ab:0e:6b:94:23:41:ff:ba:
c9:a5:6d:49:62:05:92:02:50:ca:38:1e:95:7c:1b:
da:89:f6:13:8c:88:92:66:81:5e:ec:e1:b1:d8:72:
97:6d:b0:4e:dd:81:24:e7:d1:0f:a8:30:b9:52:54:
0b:12:9e:94:3e:f8:3c:83:04:a3:90:28:86:df:75:
f2:85:54:46:8b:6e:14:9c:43:ee:1a:17:d4:e7:9d:
d1:b4:2b:c6:d7:7f:2e:85:72:f7:37:39:09:97:9b:
3d:06:b2:ba:20:14:a9:7a:11:0f:d7:0f:c6:d2:d5:
20:03:8a:40:b9:d2:69:a1:ef:c6:fc:17:9d:e3:45:
c7:d4:60:ef:fe:4a:8c:42:3e:af:43:61:ec:b6:a4:
09:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.140.0.0/17
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6744
Signature Algorithm: sha256WithRSAEncryption
1d:cf:3e:e2:84:0b:6b:1d:2f:f2:a7:02:cb:1b:7c:1e:af:2c:
8e:28:1a:c6:6c:38:56:7a:ce:4b:0d:dc:0d:93:ca:fa:34:b7:
34:a9:4c:80:2c:eb:2b:32:3d:ec:88:37:41:d0:d6:e7:af:ba:
70:73:dc:ce:7b:78:36:58:c2:05:9f:60:08:31:86:cf:29:fe:
0c:f9:1a:2c:80:9e:15:ef:5b:b4:43:f1:f3:eb:7e:94:59:05:
ef:33:50:e1:87:ca:c3:6f:c8:46:bb:f0:a9:7a:8d:43:57:14:
38:40:bd:cf:79:e3:82:d0:c5:40:dc:e5:96:85:a7:fa:cb:40:
d3:40:e1:91:ad:97:ba:ba:14:18:cf:34:73:da:50:13:01:17:
2f:90:a9:71:6d:00:41:f8:ba:4e:33:5b:29:a6:01:ca:8a:e2:
de:37:78:c5:15:48:73:e9:0e:6d:31:64:a1:c8:80:03:74:33:
01:ad:65:e3:6f:3b:7a:8e:f0:00:fb:74:17:d5:56:0c:59:ea:
a3:3b:6f:18:d0:eb:b3:43:40:21:dd:38:76:31:e4:65:21:b3:
2d:9d:ec:b8:28:33:f8:99:64:64:53:d4:14:70:3c:50:b2:d1:
0a:0a:15:cb:df:c2:8e:7c:1e:ab:0c:ad:d0:da:0b:b8:90:e0:
c0:96:54:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:20:13 2026 by rpki-client