Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
File: D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer (raw, json)
Hash identifier: jczPh2v9qLkwYaOimGVmtYnT2+mRNQNT54zfREs26Ho=
Subject key identifier: 0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA32D9A1FE84306CF6567E7F4DB9812
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:17:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 37.9.176.0/21
IP: 185.20.212.0/22
IP: 2a00:4b60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:2d:9a:1f:e8:43:06:cf:65:67:e7:f4:db:98:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:4f:44:a2:8b:f1:1a:9c:a7:f9:28:5f:02:
2a:ab:28:42:71:2f:ef:e2:3c:2b:a8:d7:3e:5f:2c:
50:19:a6:b1:0c:94:51:82:2f:5a:58:f6:ce:97:2e:
84:84:86:44:00:57:8e:96:d1:a5:89:a4:c0:51:b2:
dc:5c:56:f4:78:57:fb:e6:4e:5a:0c:bd:28:9e:cf:
d4:23:b0:87:32:62:f6:7e:fb:51:b3:6c:50:31:59:
ac:b2:e2:63:49:57:6c:9c:8f:24:67:f4:5c:2d:49:
1d:1b:7c:c9:61:0a:5f:48:01:bf:23:64:c1:99:0a:
a4:a0:31:e2:8e:f5:16:35:03:61:17:ac:a3:31:d8:
11:58:51:ee:3a:4a:a6:19:b5:57:8d:5d:9e:0e:b2:
0d:a9:30:26:3e:ef:37:84:67:06:80:16:7c:cd:03:
88:61:a2:fa:11:14:6b:75:e5:d4:e7:90:50:ce:96:
44:df:42:34:ab:40:07:ab:ff:63:cd:14:61:9c:fa:
1a:dd:d5:6c:14:0e:1f:2b:93:4a:f6:68:7b:85:37:
fb:e6:e7:f1:74:ec:5b:04:b5:64:82:fe:47:1d:db:
11:3d:8e:0c:b0:f2:2e:fa:63:18:99:4c:1b:12:05:
7d:91:e8:a2:1d:78:3e:f9:00:7d:fa:28:0e:c6:39:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.176.0/21
185.20.212.0/22
IPv6:
2a00:4b60::/32
Signature Algorithm: sha256WithRSAEncryption
28:54:f6:1b:69:96:74:3c:b6:cf:e6:53:b0:8a:09:10:0a:3c:
c7:e8:ac:a9:b2:1a:92:c4:e4:96:82:eb:d9:35:8e:3e:c7:63:
00:42:56:ae:51:a8:59:bc:e9:9b:e3:5d:41:f4:6f:1b:88:d7:
d1:47:79:d5:2b:fc:a6:81:06:90:fa:86:c7:bf:5e:88:28:77:
81:3f:5f:cc:90:0e:f0:d3:8e:e2:fd:10:a4:51:e8:8c:a1:e3:
dd:6f:1d:1f:f9:3c:33:e3:cf:f3:89:cf:c6:c5:3f:d2:99:4c:
58:85:43:40:80:b6:f2:04:ab:6a:80:64:43:49:3b:a8:3e:68:
c6:5c:ea:8a:de:e0:96:0f:5d:24:86:88:21:60:da:94:c1:5e:
24:40:80:0b:2b:32:0e:fb:5f:ce:e3:c7:f3:c0:3b:92:d8:72:
56:75:58:db:d3:4f:1a:6e:02:eb:df:cf:8e:64:80:c4:96:4e:
37:51:e2:41:8c:74:62:3a:3b:e2:49:3a:ad:05:b8:e2:1f:c8:
8e:96:86:a2:dd:5c:a1:e1:6d:55:40:9e:6f:3c:cc:5a:cc:d0:
04:5d:54:d2:ad:16:37:54:02:bc:3c:31:0a:9b:3d:0e:04:db:
e1:3a:9c:f7:8d:1b:f1:67:4f:f5:1a:09:14:25:67:e2:3b:3d:
e1:4b:c4:9b
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZt7oy2aH+hDBs9lZ+f025gSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMjIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjY3MWZlYzM4ZjAwYzQwMmYzMDY2ZjEzYzc5MmUxYTBlZDE2ZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI5PRKKL8Rqcp/koXwIqqyhCcS/v
4jwrqNc+XyxQGaaxDJRRgi9aWPbOly6EhIZEAFeOltGliaTAUbLcXFb0eFf75k5a
DL0ons/UI7CHMmL2fvtRs2xQMVmssuJjSVdsnI8kZ/RcLUkdG3zJYQpfSAG/I2TB
mQqkoDHijvUWNQNhF6yjMdgRWFHuOkqmGbVXjV2eDrINqTAmPu83hGcGgBZ8zQOI
YaL6ERRrdeXU55BQzpZE30I0q0AHq/9jzRRhnPoa3dVsFA4fK5NK9mh7hTf75ufx
dOxbBLVkgv5HHdsRPY4MsPIu+mMYmUwbEgV9keiiHXg++QB9+igOxjm4cQIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFA9nH+w48AxALzBm8Tx5LhoO0W2zMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5LzQ5YmI2
OS1kZmY5LTQ0OGUtYThhMi05NzczMDVjNzAwNTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvNDliYjY5
LWRmZjktNDQ4ZS1hOGEyLTk3NzMwNWM3MDA1MS8xL0QyY2Y3RGp3REVBdk1HYnhQ
SGt1R2c3UmJiTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDJQmwAwQCuRTUMA0EAgACMAcDBQAqAEtgMA0G
CSqGSIb3DQEBCwUAA4IBAQAoVPYbaZZ0PLbP5lOwigkQCjzH6KypshqSxOSWguvZ
NY4+x2MAQlauUahZvOmb411B9G8biNfRR3nVK/ymgQaQ+obHv16IKHeBP1/MkA7w
047i/RCkUeiMoePdbx0f+Twz48/zic/GxT/SmUxYhUNAgLbyBKtqgGRDSTuoPmjG
XOqK3uCWD10khoghYNqUwV4kQIALKzIO+1/O48fzwDuS2HJWdVjb008abgLr38+O
ZIDElk43UeJBjHRiOjviSTqtBbjiH8iOloai3Vyh4W1VQJ5vPMxazNAEXVTSrRY3
VAK8PDEKmz0OBNvhOpz3jRvxZ0/1GgkUJWfiOz3hS8Sb
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:05:26 2026 by rpki-client