Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/D-82fFyflKoZ4jakdq40Iby-8sg.cer
File: D-82fFyflKoZ4jakdq40Iby-8sg.cer (raw, json)
Hash identifier: rBFh+I8Cae+n0L6grHewHcfExED+nVfqDpDpPYoKAs8=
Subject key identifier: 0F:EF:36:7C:5C:9F:94:AA:19:E2:36:A4:76:AE:34:21:BC:BE:F2:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0B0017BB6B83B9309084609A766BE4047
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/D-82fFyflKoZ4jakdq40Iby-8sg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Sep 2026 15:34:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 61413
IP: 2001:67c:14d8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:01:7b:b6:b8:3b:93:09:08:46:09:a7:66:be:40:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 17 15:34:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fef367c5c9f94aa19e236a476ae3421bcbef2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:33:9f:04:2c:6c:0c:db:e0:0e:bb:b6:ef:
3a:38:f4:97:73:5d:9f:52:f4:76:31:92:39:51:ee:
16:a0:6c:45:b3:9c:7f:77:13:06:89:99:f1:40:77:
9d:98:f9:8d:43:6e:af:96:31:09:f9:ac:b0:92:dc:
06:b3:0c:4a:fc:8d:f8:88:21:00:85:2c:47:87:96:
f1:6c:87:f2:ea:2c:6a:9d:e2:b7:12:2e:cb:40:71:
00:13:08:dd:73:b8:38:5a:f0:56:82:48:08:c0:63:
5a:b8:17:b8:22:c9:46:3c:34:51:5e:45:6c:60:6b:
39:b2:21:b7:3c:7c:9f:da:af:28:8b:38:eb:cb:67:
7a:32:2b:77:de:1d:22:52:b7:d6:e4:dc:05:89:29:
b7:25:42:94:84:da:69:50:8c:01:7e:88:01:b9:38:
56:70:89:7a:4e:2d:6c:04:f5:93:5b:67:39:7d:1e:
c9:3b:79:e9:ba:38:04:42:f3:40:44:95:f4:37:bf:
db:2b:b1:67:ab:cc:a9:f0:e3:b0:42:d2:a4:8a:38:
ae:f8:80:26:bf:5c:eb:3a:b9:0b:dc:7f:c0:f6:b0:
3b:0d:a1:51:a0:84:a3:46:8d:de:67:5f:fd:39:09:
5c:8c:1d:de:8c:18:95:4b:b8:03:4f:9b:7f:dd:8b:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EF:36:7C:5C:9F:94:AA:19:E2:36:A4:76:AE:34:21:BC:BE:F2:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/D-82fFyflKoZ4jakdq40Iby-8sg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:14d8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61413
Signature Algorithm: sha256WithRSAEncryption
90:e5:a7:99:fa:6a:b5:94:6c:ae:47:8e:e0:ff:a7:4b:b8:a3:
a9:72:a0:94:a4:f4:23:e7:09:b7:97:a2:8b:f4:08:50:f9:15:
9c:e9:d6:0c:87:71:42:ce:a0:41:0a:0b:7c:50:66:f9:7c:73:
bd:41:30:05:69:9b:2b:de:0d:d1:8f:af:e4:6e:ca:e0:bb:98:
4f:5f:47:31:f8:af:8a:c7:a4:68:96:57:b3:20:be:b9:a0:0f:
4a:20:83:64:81:54:1c:75:f0:09:6d:86:cd:b8:c3:f4:27:fe:
2c:4d:ef:0d:d7:73:81:f6:46:eb:89:0c:0a:8a:62:da:54:d8:
2b:90:05:d8:75:56:f7:52:81:33:9d:26:f5:6e:33:1b:34:6e:
28:ab:90:53:d4:3f:87:e1:ec:11:ad:d3:4a:15:c1:73:03:7f:
f8:d0:7f:78:f0:10:ec:d3:ce:bc:ac:32:2e:22:4d:66:71:34:
a8:a9:93:27:29:f4:95:44:89:a5:7b:99:4a:67:29:88:11:a7:
a0:53:f9:e1:61:cd:3f:67:49:0a:da:b9:39:30:1d:93:5a:03:
78:5a:55:94:2a:49:7a:79:ba:db:49:a2:5b:15:4f:5b:fc:70:
6b:57:0e:c1:de:af:98:47:3a:7d:48:be:e6:df:c2:32:e5:d7:
a6:4b:aa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:09:48 2026 by rpki-client