Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer (raw, json)
Hash identifier: XPGLgUd0C2rUxwa4NbR4rgLu3PByaG9CbpfoWcAU5Xw=
Subject key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C471567F8FBF0F69235300E7E5802C977
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Feb 2026 10:25:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201316
IP: 185.170.152.0/24
IP: 185.170.155.0/24
IP: 185.207.132.0/24
IP: 185.207.134.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:15:67:f8:fb:f0:f6:92:35:30:0e:7e:58:02:c9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 10 10:25:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:f3:46:98:8d:a0:78:34:4a:e0:e9:8d:fc:
7f:dc:0e:42:04:59:d0:9d:39:a7:e0:9c:04:14:f9:
ba:cd:68:df:62:2d:df:fe:80:dd:a8:d3:28:6d:17:
b2:cf:b2:9a:80:8b:ad:24:92:53:23:cf:76:2c:dd:
f5:f0:ec:10:a9:4e:3d:58:89:dd:b4:86:1e:c7:b7:
5e:b8:e7:d0:49:c9:a9:13:67:98:28:29:46:db:16:
9a:e4:e6:7c:c0:d0:47:16:de:f6:6e:11:8d:ff:dd:
96:1c:ad:33:7f:a4:ea:4a:97:25:0b:57:6f:54:b0:
8a:37:c2:e0:b9:b6:c0:50:1d:9a:b6:dd:b7:6a:f8:
ed:c0:8e:e8:1f:44:59:cc:13:9d:d0:96:9e:fd:a9:
bc:88:80:69:5d:90:fe:6c:f2:c8:34:88:c2:d2:f3:
68:05:92:c8:cb:9f:26:1e:22:06:33:6e:b1:01:85:
bd:75:6e:4d:46:4c:75:e2:55:e5:5f:f0:2e:48:d1:
59:78:f2:e2:38:b4:87:d7:f8:6c:89:e1:fe:31:7f:
17:65:10:56:5a:23:4f:28:53:0d:98:67:4b:14:36:
7e:bd:74:2c:8e:72:7c:0d:3e:d1:9a:9c:ac:66:86:
1e:5a:08:02:76:fe:c9:99:55:42:98:03:a1:0d:e9:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.152.0/24
185.170.155.0/24
185.207.132.0/24
185.207.134.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201316
Signature Algorithm: sha256WithRSAEncryption
0c:ee:d6:f7:c0:d2:95:3e:5c:1e:3f:3c:5b:ee:f5:09:8e:91:
42:9b:2e:1a:dd:40:00:1b:8a:eb:1f:0b:78:7e:97:3d:85:69:
ff:cf:5c:9b:ae:bb:da:f5:9c:07:0d:ff:d3:ca:fa:bf:2c:74:
aa:89:94:89:6b:f8:3b:0b:55:a6:dc:09:cb:c1:e2:0b:5d:6e:
5d:1b:4b:1a:84:f6:18:e4:3d:dc:a3:b8:6f:f2:0d:24:89:ee:
7a:c6:1f:d4:25:19:a4:79:c4:c4:28:4c:39:f3:2e:bf:69:bd:
cb:8a:2c:91:79:45:cd:65:01:fc:f5:20:84:c0:75:42:33:fe:
b4:92:78:53:84:37:41:2f:dd:d0:bf:36:2c:3d:e2:82:c1:ee:
56:99:f0:95:30:43:2f:38:9f:91:5c:94:35:10:d7:a0:dc:5f:
3f:09:ae:a0:9f:68:f0:05:5f:ca:e0:3d:97:3a:97:95:82:75:
0e:4a:89:29:02:00:e2:c9:9d:1b:00:09:11:48:09:4b:98:cf:
87:b7:2a:90:ff:e3:25:da:0a:44:7d:01:b5:38:f4:c6:e5:25:
57:7a:f8:ac:45:cc:bd:da:c7:5f:a8:0b:36:16:66:c9:2d:71:
81:2f:78:aa:37:23:ed:16:ac:c5:37:23:4e:39:8f:4d:d4:25:
22:64:61:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:53:14 2026 by rpki-client