Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
File: m4Me6Uw3ubEVnH13MpNhgatUHYA.cer (raw, json)
Hash identifier: +THaZ7nLOUx8XgdoBmf3HvqJZ3SD+55Lhdq7WNaoal0=
Subject key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019BFA9FCEB6A982BAA3E62D67F55027C16B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 26 Jan 2026 14:05:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204704
IP: 45.84.64.0/22
IP: 45.139.112.0/22
IP: 45.154.48.0/22
IP: 185.206.88.0/22
IP: 2a0e:9880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:9f:ce:b6:a9:82:ba:a3:e6:2d:67:f5:50:27:c1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 26 14:05:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:b1:c4:03:65:1c:bf:49:c2:9d:dd:c7:3f:
c4:2b:3a:29:80:29:95:8d:d1:33:93:6b:98:ea:ad:
e1:72:a0:89:d5:ed:92:57:e9:75:ff:7b:f6:1f:9e:
f2:6a:18:a2:9d:7b:df:6c:35:fb:f8:30:61:8d:c3:
d9:99:ec:8c:5b:12:31:cb:30:6b:92:b5:6c:cd:a2:
83:2e:94:79:07:30:bd:cb:d1:2b:9e:84:05:78:c2:
75:af:e4:d2:40:4d:18:5b:ce:80:de:c0:38:cc:63:
3f:11:52:cc:48:ed:dc:d1:f6:f8:37:8c:af:1f:8e:
12:e0:9d:ab:94:8e:1f:bb:26:34:8d:af:7e:d2:50:
4d:86:71:af:5c:8f:23:44:4f:ce:38:e7:41:dc:de:
76:13:cd:82:af:24:a8:49:4e:67:d1:49:12:1c:c2:
4b:36:30:20:2e:97:86:4c:16:ef:44:88:a0:a5:73:
11:9b:1b:47:5f:30:61:ef:9b:be:33:2b:c2:e9:b3:
3c:2a:83:24:0e:a8:1f:f7:26:12:5a:8d:d3:38:c7:
1a:44:e1:f7:5d:8c:e2:60:07:e9:be:07:96:37:82:
eb:19:c5:90:a6:5f:9d:f9:63:06:b2:b1:fc:e7:ae:
66:e1:ea:38:43:64:9e:ea:eb:e6:f7:f7:9d:a9:bf:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.64.0/22
45.139.112.0/22
45.154.48.0/22
185.206.88.0/22
IPv6:
2a0e:9880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204704
Signature Algorithm: sha256WithRSAEncryption
05:82:e2:31:ca:f5:45:0a:69:dc:19:8b:e0:00:e7:66:9f:bf:
9a:3c:b1:e6:40:ad:87:4b:9a:71:f0:28:a7:3c:cd:6a:b9:df:
9d:72:5d:17:0a:2c:7d:6f:2d:18:83:e2:fe:91:5b:8f:3e:fc:
4a:27:d8:b2:19:19:70:32:27:f7:21:08:2b:46:bb:a3:72:fa:
bf:91:b5:ca:ff:28:5c:fe:85:9c:0d:ad:fc:ae:2f:0e:51:94:
8d:b3:d3:fb:c8:78:f3:66:07:65:8c:3e:76:db:3d:50:d6:28:
98:a6:ed:28:44:80:07:a1:e9:19:cf:e8:4b:e3:5f:e7:31:19:
d2:3d:24:1b:6f:70:30:74:b0:90:40:7a:da:db:90:84:c5:25:
d3:b1:87:fd:e5:0c:f3:8f:46:92:70:43:fd:4a:ef:51:d5:94:
c6:b3:0b:0e:c8:38:61:1c:47:0c:5c:3a:67:e1:c2:79:88:fa:
f6:9d:ed:93:5a:1b:90:d8:ff:86:48:a8:fe:ab:a9:4d:a0:c8:
0e:a9:f2:6e:7f:84:31:bf:25:88:fb:7d:89:3a:b2:8f:68:6f:
97:1c:5a:7b:bd:ab:2f:42:5c:3e:bc:0a:1b:00:5b:d0:1a:3e:
27:aa:44:bf:6f:79:7b:f9:8e:61:07:99:f4:aa:29:e9:69:d3:
61:61:ba:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:58 2026 by rpki-client