Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
File: 1KfKDW2_IW-UsFm4kZdgmFjcclc.cer (raw, json)
Hash identifier: BocdtvS7oC0ys1zBREfkPEPM1iPNxO97Ne2cTB0ybjw=
Subject key identifier: D4:A7:CA:0D:6D:BF:21:6F:94:B0:59:B8:91:97:60:98:58:DC:72:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB1B6B6BFE692998490A67B12F8B3A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57166
IP: 2001:678:918::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:1b:6b:6b:fe:69:29:98:49:0a:67:b1:2f:8b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4a7ca0d6dbf216f94b059b89197609858dc7257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:71:42:fc:3d:c5:05:a2:ae:b0:7f:72:6e:
72:e0:8d:a6:a4:59:50:b6:c4:ac:b0:73:6f:23:cb:
b4:53:2d:38:38:18:a9:d2:96:56:73:75:6b:40:d0:
5e:13:3e:e6:79:18:87:1b:8b:11:b1:e3:bd:4f:40:
ba:0e:93:0d:d2:1c:7f:af:c3:c8:50:6b:19:40:dd:
f5:f8:56:1a:c7:02:55:9f:17:52:45:45:93:64:8f:
f1:75:78:5f:a4:44:10:39:7f:0c:11:ec:ea:be:9f:
9b:0d:b4:cb:94:5d:9f:50:5d:1d:87:cc:08:ee:33:
93:ef:2a:d0:23:20:f4:41:8d:2c:7d:15:3b:0f:68:
1b:bc:7d:e4:c1:33:75:f8:66:ea:e1:ca:2a:34:cd:
9c:de:63:e1:7a:ce:23:ce:62:51:05:7b:9d:76:15:
d5:44:e1:16:b2:60:93:dc:02:c1:db:5e:4a:e3:d4:
f5:f4:05:37:1d:2a:a9:76:20:81:fe:44:e5:32:0c:
71:98:01:45:44:37:28:6b:df:00:99:87:23:ab:e8:
4b:1e:08:fd:2d:65:86:98:48:90:22:31:fd:af:5e:
8a:f7:20:9b:73:96:ab:81:ab:6c:a5:c3:5f:e7:bf:
a5:b5:f7:e4:ff:be:f1:30:95:e6:26:53:66:bb:eb:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A7:CA:0D:6D:BF:21:6F:94:B0:59:B8:91:97:60:98:58:DC:72:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:918::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57166
Signature Algorithm: sha256WithRSAEncryption
73:b7:5e:65:4c:c0:4d:c1:98:b7:1a:bf:da:13:36:39:ad:01:
15:96:a6:13:09:10:8c:44:f9:71:b4:c4:b4:ba:29:08:db:4d:
b8:d8:70:11:80:8a:67:93:6d:6c:22:10:16:c5:b0:22:89:a7:
22:a0:04:b7:f2:36:1b:e3:f7:12:24:86:87:0e:93:5a:5f:3b:
21:77:af:00:09:3f:da:c1:c2:bb:e1:b0:b5:46:df:25:c1:a1:
0f:a4:6a:7f:92:98:91:e2:01:d1:89:4f:d6:07:46:9c:84:c8:
f8:74:6f:14:14:04:9e:83:f1:f1:b1:57:41:83:68:26:37:55:
c2:a3:38:41:01:c6:75:71:e2:de:01:e1:e7:a8:4b:8b:37:48:
40:36:bf:20:9f:66:26:fd:19:21:34:bf:8c:6d:92:d6:93:97:
35:51:82:d9:b1:15:3a:30:f1:90:8f:2b:12:4d:2f:18:fb:1b:
bc:50:71:80:62:29:bf:94:c7:2f:e7:d8:ec:d0:ea:9f:67:0c:
86:a5:54:3b:2d:42:ef:80:a1:06:68:4a:45:a2:a0:30:aa:02:
d5:d3:0f:21:ee:9d:f7:e0:20:d9:95:cf:ce:57:65:3d:43:a4:
92:52:19:4f:2a:26:44:4f:0d:e8:87:35:c5:56:18:03:38:37:
85:68:1a:79
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZ8Y+xtra/5pKZhJCmexL4s6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGE3Y2EwZDZkYmYyMTZmOTRiMDU5Yjg5MTk3NjA5ODU4ZGM3MjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQdxQvw9xQWirrB/cm5y4I2mpFlQ
tsSssHNvI8u0Uy04OBip0pZWc3VrQNBeEz7meRiHG4sRseO9T0C6DpMN0hx/r8PI
UGsZQN31+FYaxwJVnxdSRUWTZI/xdXhfpEQQOX8MEezqvp+bDbTLlF2fUF0dh8wI
7jOT7yrQIyD0QY0sfRU7D2gbvH3kwTN1+Gbq4coqNM2c3mPhes4jzmJRBXuddhXV
ROEWsmCT3ALB215K49T19AU3HSqpdiCB/kTlMgxxmAFFRDcoa98AmYcjq+hLHgj9
LWWGmEiQIjH9r16K9yCbc5argatspcNf57+ltffk/77xMJXmJlNmu+sqoQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFNSnyg1tvyFvlLBZuJGXYJhY3HJXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzAxYzdj
MC1lNzAwLTQxOGUtOTIwNy05MTE2MGJiNGM2NTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMDFjN2Mw
LWU3MDAtNDE4ZS05MjA3LTkxMTYwYmI0YzY1OS8xLzFLZktEVzJfSVctVXNGbTRr
WmRnbUZqY2NsYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAkYMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwDfTjANBgkqhkiG9w0BAQsFAAOCAQEAc7deZUzATcGYtxq/2hM2Oa0BFZam
EwkQjET5cbTEtLopCNtNuNhwEYCKZ5NtbCIQFsWwIomnIqAEt/I2G+P3EiSGhw6T
Wl87IXevAAk/2sHCu+GwtUbfJcGhD6Rqf5KYkeIB0YlP1gdGnITI+HRvFBQEnoPx
8bFXQYNoJjdVwqM4QQHGdXHi3gHh56hLizdIQDa/IJ9mJv0ZITS/jG2S1pOXNVGC
2bEVOjDxkI8rEk0vGPsbvFBxgGIpv5THL+fY7NDqn2cMhqVUOy1C74ChBmhKRaKg
MKoC1dMPIe6d9+Ag2ZXPzldlPUOkklIZTyomRE8N6Ic1xVYYAzg3hWgaeQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:00 2026 by rpki-client