Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
File: sM7BwXmc5hUD-QithJCSD7iYlCo.cer (raw, json)
Hash identifier: nWPlh00KQTlUmciQIYzqsL/5Ud2PRrQ7hUZwh3kQ2CQ=
Subject key identifier: B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D6C448CFE83E86BCB0B35711F3E082268
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 Apr 2026 08:45:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211161
IP: 45.91.195.0/24
IP: 2a13:5fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:44:8c:fe:83:e8:6b:cb:0b:35:71:1f:3e:08:22:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 08:45:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0cec1c1799ce61503f908ad8490920fb898942a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:75:24:1c:60:5f:31:ba:93:c4:95:31:be:a5:
67:69:98:88:43:02:29:38:9c:df:50:d8:4e:04:24:
fd:4f:f5:e5:78:4d:b1:58:6e:cd:0f:63:d4:0a:8b:
bd:a4:8d:e2:71:e1:c0:9f:6e:16:40:7a:4f:98:d0:
17:28:f6:5b:80:27:45:b0:64:38:56:61:f0:38:78:
91:a6:17:6b:2d:e5:0a:76:8b:a1:56:19:e9:a1:8e:
77:b8:9a:58:3d:dd:65:c7:a8:ee:e2:f8:0e:c9:07:
70:c5:99:fa:b4:5c:7e:56:7e:ed:fb:69:79:0d:ef:
f9:be:0a:77:c3:26:85:6a:7d:02:37:63:ae:d8:fe:
bd:c1:f9:70:ce:94:57:ed:cf:fa:d7:e4:f4:1a:76:
3b:37:f5:04:fc:a9:1e:58:b4:1b:d2:a5:f2:c3:fc:
b7:6b:34:98:83:b5:54:b6:26:70:cf:9f:aa:d8:08:
06:86:38:46:a8:21:48:e9:99:3b:b4:79:a4:f9:61:
6a:43:07:31:b3:76:3c:ed:66:83:53:ac:9e:78:5a:
04:cc:2f:75:e9:f0:8b:8f:79:23:63:cd:fe:f5:e4:
da:06:55:5c:eb:e4:6b:a3:a4:3e:79:39:1f:8e:cf:
8f:98:29:5b:0a:82:e2:ba:81:f7:c3:b1:e8:f6:68:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.195.0/24
IPv6:
2a13:5fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211161
Signature Algorithm: sha256WithRSAEncryption
0b:03:e6:79:73:76:1e:a1:c7:db:47:3f:1c:54:c2:a9:d8:69:
5a:d5:07:69:36:f2:af:12:c1:98:aa:fa:e9:a7:e5:db:88:0a:
9a:eb:da:2e:6b:42:83:73:67:24:b7:cc:b9:d9:1a:a3:a5:e0:
c2:97:7c:89:0c:8a:c5:7a:d1:c5:39:f6:1b:50:bc:c1:32:29:
38:5f:38:de:46:16:60:9c:50:5b:a7:04:0c:42:f6:78:7f:57:
ed:96:24:9e:b9:47:c4:65:29:f3:4c:9a:b4:44:d9:85:d6:1d:
91:af:0f:96:d3:ba:ff:e5:ae:73:87:b8:99:ea:1a:ab:f2:94:
55:63:09:39:6a:52:25:60:0f:f3:13:23:bc:94:51:73:d3:d9:
7c:13:c9:0f:70:3c:e2:5a:8a:9a:c0:2e:e7:d4:20:83:f3:36:
2f:4a:48:e6:fb:c4:93:37:d7:f6:25:50:34:af:86:08:5f:46:
67:3e:44:b8:5f:32:d6:37:b4:fa:14:84:cd:fe:0e:c2:16:30:
44:29:8c:9b:69:ee:73:aa:f1:98:8b:c9:74:59:76:c2:2e:4d:
f5:3e:71:5d:37:a6:95:8f:fb:6e:fd:26:ea:f2:00:a3:13:44:
d9:51:11:0a:b9:95:70:12:e2:1b:20:62:d6:7c:5e:75:09:f7:
93:d9:63:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:03:25 2026 by rpki-client