Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
File: DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer (raw, json)
Hash identifier: L6A0/ZbhaLkC4qbs+7fW1p1jXzMnMcoNTgrz26Hn+1c=
Subject key identifier: 0C:56:23:4B:C7:3D:0C:AC:81:96:11:CA:DE:29:87:48:22:FF:5D:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE300B1F1276FBD71529D6FFA1880B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 47204
IP: 194.88.199.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:30:0b:1f:12:76:fb:d7:15:29:d6:ff:a1:88:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c56234bc73d0cac819611cade29874822ff5d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:87:e8:c6:3a:6f:db:b8:42:51:e1:57:62:50:
52:95:48:fc:62:87:b8:38:19:03:72:57:62:d6:cf:
3d:e5:8c:12:1c:1c:0f:e9:e8:9a:dc:38:f7:58:1c:
15:93:8c:2f:db:b5:f4:6b:5d:99:23:18:3d:76:7d:
b4:72:cf:4b:16:8e:c7:7d:bb:7c:f6:a0:db:91:a3:
c1:1b:c9:1e:e3:59:63:a7:5a:bd:fa:10:5d:36:83:
28:03:4c:8f:b6:11:50:24:57:1a:18:e7:4b:38:a0:
25:76:8d:9d:8e:78:ae:ff:a0:da:05:62:30:20:3e:
3a:8b:84:e4:1d:05:ee:5e:88:c1:3b:91:d7:31:92:
08:b5:db:01:38:47:cc:0e:cd:d9:ed:4d:17:92:02:
bf:3a:7d:c5:32:78:37:7a:2a:10:9f:05:31:4b:5e:
cd:7b:1e:04:97:2a:e5:ca:59:05:b2:45:44:a3:71:
f2:3e:27:8d:f6:45:16:03:44:08:cb:fb:b7:da:15:
47:35:3a:6a:0a:20:fd:b6:20:43:e4:53:f4:38:dd:
23:a5:01:b1:db:a2:b0:1d:fc:5d:ba:48:21:97:f7:
f6:43:f1:56:8f:ef:4c:79:92:47:73:d7:13:77:cd:
ae:8a:69:2e:d3:58:02:0a:85:65:f6:ce:fa:79:c9:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:56:23:4B:C7:3D:0C:AC:81:96:11:CA:DE:29:87:48:22:FF:5D:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.199.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47204
Signature Algorithm: sha256WithRSAEncryption
37:d8:ab:84:18:9c:d4:ad:13:50:54:c8:17:a4:71:af:4f:fc:
b7:3d:01:aa:5a:fc:9e:97:35:a1:cc:f5:08:86:c1:cd:24:98:
46:4a:36:7e:ce:54:08:9e:08:8a:e3:3e:5b:68:8d:c5:84:db:
c2:5d:3c:fe:b2:89:61:dd:7f:08:72:6c:7f:50:90:64:a1:48:
60:20:9c:f9:90:26:dd:d4:00:0d:a3:ce:52:59:e5:c3:fb:a4:
02:2f:b4:b6:e7:75:86:83:7f:47:a1:1f:eb:05:91:68:71:e1:
4c:f2:dc:d1:b2:2b:44:95:83:73:0f:4a:6a:e3:fe:07:30:3c:
d4:15:ff:51:f1:ee:16:56:9a:0a:0b:ca:e7:58:19:12:48:1b:
6c:52:c0:84:eb:5a:e0:95:66:19:d5:35:05:07:0d:31:5a:9e:
16:d3:86:bd:10:5f:f1:a1:8f:ce:64:d0:9a:c9:3d:59:4c:53:
26:cb:2a:36:e3:15:ba:3d:c0:fe:ac:be:a2:75:8d:46:58:b1:
64:10:e5:8b:c1:6e:5d:64:94:61:61:f2:c4:79:78:52:d2:84:
a5:c3:33:06:e6:44:5e:63:0c:9e:12:7c:97:e3:82:c2:c3:6f:
f9:cd:8d:70:47:c4:b2:4e:1d:7f:6d:11:d0:56:ac:f3:70:93:
c1:8a:78:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:01 2026 by rpki-client