Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
File: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer (raw, json)
Hash identifier: xCePNKPLi64m5nasokD2Y4BGHb2hlejove9KmbiTYDs=
Subject key identifier: 0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5D2A3EB7894159958EDD4854CCAB8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:20:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 25076
IP: 185.148.60.0/22
IP: 2a07:5d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:2a:3e:b7:89:41:59:95:8e:dd:48:54:cc:ab:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:20:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ccc36028d005810caba24614bd60731dd495033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:aa:5e:e9:49:28:fa:e7:21:8a:9e:f7:6d:
54:e6:7d:90:54:91:a5:ba:4b:54:12:b2:88:6b:20:
0e:c3:39:33:ee:97:56:bf:50:b2:4f:5e:30:b8:28:
46:d1:94:d7:0a:8b:e1:37:e9:c5:25:a7:34:bf:73:
b4:40:a1:36:87:10:d4:07:ef:4e:19:7e:22:55:e3:
3d:b9:8d:cd:db:fa:d4:cb:d0:8f:a6:02:53:d3:de:
30:b0:79:cc:cb:c7:de:5f:ab:2c:1d:d1:75:06:37:
e6:e9:ab:27:31:aa:0b:6d:68:e6:78:14:20:c8:ab:
f8:6a:13:82:70:c8:b4:2f:60:79:a5:ab:08:c9:d7:
4f:8c:d7:17:28:3d:ca:31:db:38:4e:04:a0:96:11:
a6:13:e3:b2:c5:bc:a3:04:d2:da:fb:f3:1d:6f:d8:
54:69:63:86:2e:6a:a2:c9:3a:f8:6c:f3:a4:d9:80:
f2:c9:e5:ac:93:88:d6:7f:00:43:2a:5d:ca:99:fa:
b1:bc:04:6f:80:7e:f3:de:2f:51:82:96:ca:ed:ad:
bf:1b:8d:74:5a:c7:8e:8d:8b:16:67:96:f8:38:e2:
3f:c2:ff:9f:f3:3d:5a:b1:b5:81:f0:5f:f4:16:d3:
28:f2:55:f6:66:61:12:9f:bb:f2:57:c5:48:17:6d:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.60.0/22
IPv6:
2a07:5d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25076
Signature Algorithm: sha256WithRSAEncryption
6e:e4:79:df:ca:6b:ec:5b:69:d0:a1:89:17:ce:be:5e:12:a2:
fa:6c:54:87:5f:5e:71:1b:83:81:95:97:04:e9:0b:96:4b:0c:
88:2b:08:90:0a:da:ee:e0:1d:a8:27:6f:d4:95:56:4a:28:a9:
aa:b0:99:20:a1:19:d2:af:0a:6f:81:1e:af:04:19:10:60:80:
0c:88:9d:9d:ff:82:65:ff:9e:cd:2a:e9:c4:78:59:1c:5c:7b:
2e:ae:fb:dc:6f:52:84:20:cd:dc:93:8f:16:45:de:56:96:9b:
5b:6a:4d:7a:8c:63:ce:82:99:bd:69:d0:e6:de:48:aa:a0:86:
53:6f:1f:72:8f:a3:c0:f4:95:ff:0d:0f:c2:e9:03:2e:d6:43:
96:b0:d3:1e:ae:de:ba:9d:e2:af:4e:98:40:5a:6f:85:80:14:
a4:20:cf:45:bf:19:65:37:65:2e:d7:03:99:32:d8:66:80:fa:
2d:82:21:c0:2c:d0:38:f7:e3:8a:44:af:e8:22:db:40:b9:1f:
01:c5:d2:21:6a:4a:0b:81:cb:f3:13:16:21:d4:92:24:28:79:
12:8a:13:37:97:d6:76:8f:a2:6b:b9:a5:42:29:87:6f:89:60:
30:a7:5b:02:0b:e7:fd:9c:b3:02:ea:96:ba:76:62:d5:6a:18:
21:78:ec:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:49 2026 by rpki-client