Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
File: D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer (raw, json)
Hash identifier: OWFijE7EkQIX0YRNXpFKncu0DlydokcV9sXJrMqgyI8=
Subject key identifier: 0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA68EF78FBFB5DCB315CE8BD54B5EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 143.167.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:68:ef:78:fb:fb:5d:cb:31:5c:e8:bd:54:b5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f97e2ed1e927dbfd8de0d5e94a77d54c2dd0042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:da:01:61:1a:93:15:51:54:35:9a:c0:7d:6f:
04:3b:ea:4f:0e:b0:3a:39:46:48:e9:82:da:e2:16:
76:bf:78:11:e9:46:c4:1e:81:95:5a:59:ed:56:44:
a2:79:01:14:84:09:0f:7f:36:cc:f8:39:83:f3:76:
9d:d6:1c:21:e5:9b:cf:01:c1:b7:53:99:b2:1c:e0:
af:68:c9:53:65:b4:f3:49:82:94:e1:95:8c:6f:bd:
47:68:41:49:77:f7:e7:a1:18:79:2f:3a:a9:a3:c9:
f1:cf:65:aa:ca:23:7a:83:12:a1:38:c9:37:0e:eb:
79:18:8f:f9:47:04:f0:9a:5b:53:ab:e4:66:fb:2b:
3f:5c:88:30:a9:b5:27:19:d2:04:a0:92:f1:88:91:
8b:5c:e1:6e:90:fb:0b:f7:c1:c1:a0:d4:c8:26:be:
82:eb:0f:3f:ce:c5:78:be:17:f4:9c:17:c3:1f:bd:
e3:eb:3e:f5:f5:c4:38:93:df:a9:98:00:56:ae:70:
c7:5c:ff:7c:a9:a9:92:a4:58:a7:8d:5f:29:76:d8:
bb:59:52:b9:89:43:98:7a:60:4b:b4:01:dd:bb:1c:
be:3f:3e:1e:4b:ba:07:c4:1e:f2:d3:8a:39:24:9e:
66:3f:87:08:bd:2a:a7:ee:de:cc:6f:0d:83:86:63:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:08:05:f7:20:5d:b4:a4:a3:dd:d9:02:93:3e:dc:63:fb:01:
a3:98:55:ab:4d:1b:a8:d1:96:25:b5:e3:78:a8:39:45:6b:bd:
b1:bf:14:7f:8e:ba:cc:c2:b1:83:e4:3d:80:00:87:f0:4a:b0:
64:53:4e:74:30:9f:7d:7c:86:73:4a:37:58:b6:c5:1d:b2:96:
9e:75:df:ba:db:a8:a8:3d:42:cb:7b:6c:08:da:85:ec:84:2c:
18:81:36:61:2a:7b:0e:7f:3d:52:f5:8c:b3:b4:7e:4a:b0:f9:
67:40:83:26:6c:bc:8c:85:00:8e:ba:18:bf:6c:cc:6b:c0:d9:
a5:7f:a5:fa:2b:a5:55:28:20:17:29:11:3c:69:e7:d5:ef:30:
32:3c:fd:81:74:ee:6a:14:d6:f5:e6:1d:e0:bc:74:63:0d:b8:
7f:3a:74:06:1e:14:72:4e:0f:03:f4:73:48:b2:ef:b4:2f:36:
eb:82:00:95:3d:14:18:09:5b:a8:bf:ad:22:d8:ae:b6:c9:3c:
37:a2:9a:d3:88:4c:bc:d3:07:ba:3c:5c:2b:79:24:8d:df:71:
be:5a:cb:64:fa:9d:b3:70:e2:8e:76:06:cd:34:ec:0b:0a:c9:
78:68:32:56:d6:3d:cb:ff:05:cb:97:38:15:da:15:c4:b3:86:
0e:8e:11:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:03 2026 by rpki-client