Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
File: D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer (raw, json)
Hash identifier: nHiXyjDoAO2Djl5ptS59EtgcUx0khhEuKXwGDDDHnJY=
Subject key identifier: 0F:A7:C7:D8:61:72:67:5F:78:E9:55:4A:D6:73:54:CE:BF:18:D2:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB3D01189C88722E03EC5DCF641858
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48781
IP: 91.107.0.0/18
IP: 95.128.240.0/21
IP: 185.33.244.0 -- 185.33.246.255
IP: 2a01:a9c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:3d:01:18:9c:88:72:2e:03:ec:5d:cf:64:18:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fa7c7d86172675f78e9554ad67354cebf18d290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:41:ae:f3:f7:bf:15:c4:17:8b:fc:bb:83:
f2:ff:b2:d6:0e:e7:09:3b:1b:0e:da:09:9c:b0:91:
50:2c:dd:52:35:ff:dd:bb:8c:de:95:10:4d:00:4d:
87:e7:a4:db:1e:f0:f8:ec:70:bb:bb:b1:2b:cd:53:
a5:6f:b7:d8:78:68:8c:4a:7d:cc:9a:9d:f4:07:13:
27:5d:9a:00:fa:97:e4:13:e7:fa:48:e6:15:00:96:
ed:2f:d2:6b:9e:00:33:b4:1e:a0:e3:4a:6d:80:e6:
f9:6d:28:6d:f2:48:8f:50:64:a4:ce:86:35:da:75:
12:5c:31:c2:76:08:02:1c:5d:ec:4d:96:0c:d7:35:
38:27:18:29:27:61:f3:49:50:1d:fa:8e:55:64:ab:
95:53:e8:a5:ce:dc:84:78:55:fa:09:9a:b7:ff:01:
8a:21:e8:f9:f8:10:f0:5f:8d:ba:bf:5a:07:44:20:
85:36:85:b5:68:76:f5:d1:ab:5c:0b:b0:de:e2:3e:
29:a7:a1:1d:a5:9d:f7:aa:6a:34:a8:3f:22:5a:e9:
c9:bd:f8:3b:19:7b:d5:bc:fb:43:0d:e8:66:85:84:
a1:d0:4e:d7:80:44:5c:05:3b:b1:dd:e4:39:7b:9a:
42:ee:4f:8e:12:11:47:ab:f1:24:a8:92:69:1d:3d:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A7:C7:D8:61:72:67:5F:78:E9:55:4A:D6:73:54:CE:BF:18:D2:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.0.0/18
95.128.240.0/21
185.33.244.0-185.33.246.255
IPv6:
2a01:a9c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48781
Signature Algorithm: sha256WithRSAEncryption
ad:94:f4:2e:5d:47:2b:72:17:9c:b7:d9:9d:4c:d9:78:ae:87:
a8:8c:09:a3:26:e2:ae:6e:f0:93:46:ff:ed:31:10:76:17:7a:
7d:1c:58:ac:8f:19:d2:51:fc:f9:b3:9d:3f:0b:91:29:55:0f:
f1:bb:5c:14:9f:fd:39:00:2a:44:d0:36:e3:e4:56:87:40:30:
83:88:ce:77:08:9b:66:6c:df:7b:99:06:4d:dc:8c:85:7a:06:
6a:a8:f1:c4:1f:eb:7d:88:14:aa:c1:ed:70:6a:a7:a9:d8:c0:
0d:d7:c1:55:b2:49:6a:1b:12:4b:0a:45:00:a2:44:ec:7e:38:
60:da:f2:6f:5f:86:8d:03:55:8e:b4:4c:e8:84:82:ed:3c:92:
0e:5c:88:f2:74:39:88:c3:1d:5a:e1:04:53:c4:03:9d:ba:aa:
3d:a8:cd:58:0d:f9:62:9f:ff:ba:4d:28:45:dd:95:ef:7c:f4:
1f:cd:c4:9c:96:6b:99:67:8a:c2:f7:a0:d6:28:94:27:84:91:
5e:86:4a:3b:cc:34:0c:93:ea:d1:2e:2f:f9:e8:3d:03:6a:dd:
62:d3:c9:2d:c7:29:b5:56:11:30:1d:e3:27:81:33:5c:97:30:
18:e1:b1:45:c2:01:db:85:0e:e4:c8:0c:24:92:4c:3e:9b:ad:
47:87:5e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:00 2026 by rpki-client