Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
File: 2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer (raw, json)
Hash identifier: uS8ekTLHX9ME3CRW8em8+HyqMKqdxjCRiGWzrXpLapA=
Subject key identifier: DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9D1274F73474CB4AD16CE9C6D7FC9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.112.79.0/24
IP: 185.247.124.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:d1:27:4f:73:47:4c:b4:ad:16:ce:9c:6d:7f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=daf3570c75849768d6e0cdd2b77527142d715554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4e:a8:02:18:89:d9:89:5f:1f:02:6e:68:58:
81:e6:00:73:30:51:31:3b:9e:8a:58:a2:07:ad:b8:
bc:6f:ed:cf:5d:77:ab:d7:8e:75:47:d3:bc:af:0b:
15:e2:82:0d:5a:23:7b:c6:7c:d4:1f:af:44:ee:5d:
b2:69:35:39:33:9b:28:1b:20:38:ce:49:76:23:48:
42:7b:c2:01:c9:7e:53:d9:4f:81:5a:d8:20:38:5f:
cd:08:93:52:fb:ae:db:23:80:58:e5:e0:05:84:9c:
29:c0:aa:7b:53:e1:a3:bd:68:53:6c:9a:f5:d0:7f:
6d:bf:f3:e5:59:9e:36:6a:5c:ae:a9:22:fc:57:a7:
e7:be:22:4f:31:f5:48:83:02:25:1f:73:ac:81:7d:
aa:1b:37:dc:bb:f2:00:6a:be:81:63:ff:d3:94:d4:
37:75:da:bb:68:96:b7:3c:42:42:bb:3d:06:48:22:
6e:57:cc:d6:ab:96:e8:17:bc:f8:a1:1c:33:9f:11:
c0:4a:a3:c6:c6:48:05:5d:a1:2b:0f:c5:53:7a:c4:
1f:98:4d:63:ad:0c:d1:b9:f3:6a:64:4f:95:93:1e:
26:37:52:61:be:cc:18:6a:6e:e9:28:b0:f2:09:b6:
18:70:d5:23:b2:80:eb:8f:be:be:f9:00:b5:7b:e5:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.79.0/24
185.247.124.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a3:c9:8a:d7:e9:a2:ed:cf:07:85:96:6f:e6:12:6a:b8:41:
f5:80:96:7a:13:8a:98:d4:4c:64:75:dd:93:f2:85:0a:83:56:
07:e8:dc:67:19:83:24:63:18:3b:29:14:76:01:9c:86:47:4b:
3b:5e:cb:78:dd:53:9e:04:fa:88:90:6c:59:9a:99:31:a2:0c:
8e:c5:da:81:72:14:74:66:87:36:0d:1c:ca:cc:54:34:11:25:
5e:e6:1b:9d:6b:96:69:10:97:32:50:bd:13:df:86:3a:f7:f0:
71:56:d8:43:3d:d1:22:bf:6c:03:07:34:e6:c6:67:12:55:ca:
4d:7e:63:54:aa:f1:c1:75:91:ce:75:9c:34:a8:51:d7:86:91:
52:c4:01:1c:71:6d:77:a2:78:48:36:c9:e9:39:9d:5a:87:67:
4e:a6:ff:c1:db:b0:d6:94:36:b1:00:4f:4d:84:88:fd:ab:34:
88:eb:2d:79:3f:17:69:d5:83:a3:05:f4:34:56:9f:81:a8:91:
99:89:6b:cc:fe:ff:ac:c8:66:8a:a1:c4:61:94:dd:3d:de:40:
1b:eb:80:3d:7c:54:d1:f6:10:c4:7d:fc:1d:32:b3:2a:e9:1a:
74:8a:b9:e8:36:52:87:3a:38:3e:74:a2:eb:8f:1c:45:5a:c6:
f1:12:81:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:16:58 2026 by rpki-client