Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D57Y1txc8s3y4BOfJw7RJLRpFPU.cer
File: D57Y1txc8s3y4BOfJw7RJLRpFPU.cer (raw, json)
Hash identifier: T/97Dh4Ht4zA+f9BObt3D5pNkVVYJrBaHHi4/REMtx4=
Subject key identifier: 0F:9E:D8:D6:DC:5C:F2:CD:F2:E0:13:9F:27:0E:D1:24:B4:69:14:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE2793A361AF90907FCDE0D21442FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 59499
IP: 5.159.8.0/21
IP: 185.141.16.0/22
IP: 2a01:9340::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:27:93:a3:61:af:90:90:7f:cd:e0:d2:14:42:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f9ed8d6dc5cf2cdf2e0139f270ed124b46914f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:e9:d5:9c:93:2a:5e:40:d5:7b:10:76:4f:
b2:71:f9:e0:10:ba:3e:80:a4:1d:4f:4b:a8:ac:33:
25:a3:75:9a:46:83:de:6a:42:70:ab:a4:61:80:c1:
72:fb:60:35:9f:b4:46:3f:86:ef:ec:59:dd:c8:6f:
80:a2:68:f4:78:ff:89:85:ae:f9:bd:fb:44:cb:41:
69:b8:72:e2:61:f4:f2:34:f8:d6:c5:9f:77:be:d5:
8e:fd:0f:d1:82:99:a9:bb:64:6f:fe:f6:42:00:7b:
85:5c:e4:a4:57:08:da:b2:04:15:b5:2e:65:61:52:
c0:00:57:d5:23:04:62:34:8d:72:d3:56:49:1d:80:
16:1b:12:d1:4c:00:9d:92:9d:38:5e:bf:c5:76:9f:
c4:18:06:f5:6a:87:48:7e:af:49:fd:38:af:fd:3b:
0f:03:94:07:5e:cf:b9:d9:eb:3d:7c:c2:47:5e:45:
22:a5:6c:d3:5b:a8:d9:26:16:e0:8f:99:c2:66:83:
fc:e0:78:bf:99:e1:13:db:32:98:0b:67:b0:42:3d:
e2:64:a4:ae:62:e6:d1:3a:33:c8:72:19:8b:1c:44:
c0:b8:64:d3:ab:48:9f:b1:94:cc:d0:93:86:a6:af:
a8:7f:a1:77:93:e1:ab:65:1b:e0:4c:f6:65:f5:a0:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9E:D8:D6:DC:5C:F2:CD:F2:E0:13:9F:27:0E:D1:24:B4:69:14:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.8.0/21
185.141.16.0/22
IPv6:
2a01:9340::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59499
Signature Algorithm: sha256WithRSAEncryption
aa:9d:1e:35:ed:47:4c:55:8b:f4:d5:65:68:4e:46:42:54:49:
74:11:e6:5b:3d:31:e3:ae:85:20:46:0e:54:df:43:ac:fc:8b:
ad:d3:22:e9:48:94:45:9b:28:5d:65:e1:c3:35:44:fd:aa:39:
8d:0a:ed:51:8f:66:0b:e5:42:07:c6:e5:e5:ad:4b:8a:b1:e3:
9a:90:ea:82:17:31:80:04:56:61:b9:43:14:c8:36:96:c3:26:
6b:28:60:5e:04:c1:1e:fd:9f:ab:62:93:df:a2:aa:0a:e4:08:
9f:be:ed:58:2a:91:a5:71:2a:b8:84:67:c3:30:ce:c4:57:01:
d8:72:cf:58:66:36:72:8f:7b:e2:09:f9:9c:20:3c:3e:94:fe:
aa:25:d4:34:ff:40:ce:a7:37:4e:ac:c3:11:77:91:0b:05:4b:
c9:12:fe:9c:26:09:ba:af:d6:a6:bd:61:73:36:57:68:7c:a3:
08:7d:67:b0:3c:6b:8a:95:c6:c3:3c:f5:81:01:44:33:f5:20:
d2:32:36:67:ee:e1:7d:84:c2:ef:8d:70:57:e4:74:e4:2b:d1:
74:bd:93:85:41:54:7c:3c:9d:1c:d9:24:93:15:ea:d4:41:9b:
33:24:1b:ad:d6:d9:01:2f:8e:93:0b:53:f7:3f:44:43:8c:1c:
ad:0c:61:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:21 2026 by rpki-client