Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
File: DNLKvrHXJOekjdYemn4MUKTpv1A.cer (raw, json)
Hash identifier: LoE3oLcJCBBvzjVfIJ/HEeOPg0ntsKrWCeFJaXJsqHE=
Subject key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DCABF0199B395D92CC0BF32C5C46A29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:19:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209772
IP: 91.210.124.0/24
IP: 185.68.128.0/22
IP: 185.207.160.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:bf:01:99:b3:95:d9:2c:c0:bf:32:c5:c4:6a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:19:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:18:6e:6a:22:83:6e:6c:fe:eb:5a:75:c0:
63:ff:64:7b:11:ac:45:24:2b:86:db:03:62:ef:f5:
0c:43:95:8d:ba:bf:69:30:cf:82:25:66:ce:d1:bb:
ab:c8:0a:79:bb:00:00:bb:12:d8:59:e1:df:87:68:
c2:eb:b3:0c:ee:5f:49:bb:87:15:e3:36:28:30:a0:
18:8e:d6:0a:dd:83:42:7c:33:b9:f9:5c:56:51:6a:
be:fb:aa:bf:9e:29:a7:e5:1a:2a:7a:9c:39:f4:ef:
30:4c:e7:b7:67:ae:ca:fb:3d:5e:0c:bb:d8:78:f9:
f2:94:52:2d:74:df:5f:73:bc:b7:23:10:04:95:9f:
45:18:6b:72:87:88:86:07:e2:ed:c2:f3:f4:9b:c4:
e4:ac:9b:56:79:b7:e9:f6:4b:1b:1a:01:46:29:1a:
be:ca:95:1c:d0:24:a9:e1:bb:73:4d:0f:93:e4:92:
38:74:47:e2:5d:60:07:1e:56:b7:6f:be:99:72:9d:
bb:5f:1f:dc:73:66:74:d0:eb:de:eb:96:60:ce:e2:
a9:15:a3:9a:fb:b6:06:64:4a:83:7f:a7:4f:38:fb:
51:de:4c:1f:5d:a3:99:dc:c2:2d:01:72:44:4f:1a:
84:3f:5e:56:37:0d:4f:62:10:86:8b:00:c6:d0:c3:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.124.0/24
185.68.128.0/22
185.207.160.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209772
Signature Algorithm: sha256WithRSAEncryption
12:30:f3:9d:da:c4:cb:58:c3:df:e7:da:9d:3c:26:18:65:92:
63:50:63:fc:ff:96:f2:8b:bc:52:61:76:d8:a0:12:16:a1:32:
75:b2:0e:fd:15:97:c3:91:a7:20:3d:17:f9:83:71:d5:03:4f:
88:98:8f:c2:76:b6:6f:36:12:ce:9d:21:52:d9:e3:75:0c:a0:
82:1e:6c:e4:ed:fe:81:f3:a1:1e:38:1d:4b:db:66:3f:27:f8:
78:49:98:56:d2:92:65:b2:63:76:d9:27:db:22:e2:88:4b:0a:
24:4a:0f:be:50:e4:8e:3a:24:8e:4a:48:1a:2b:49:2b:6b:90:
6d:9a:3e:a9:8b:22:4e:da:ff:fd:a5:c2:c0:7b:55:5c:e6:35:
70:cb:cd:0a:05:db:0b:91:42:e4:d0:cf:83:97:06:d2:11:7e:
cf:3f:ba:7c:49:d1:3c:58:ca:c9:47:92:a2:0b:fa:a9:8f:04:
e4:ad:84:36:1d:2a:c3:5f:4a:27:f5:e8:32:22:bf:0c:aa:92:
dc:9e:55:2a:2e:45:52:18:b1:4d:4e:ff:a7:4b:6a:50:de:70:
57:5b:02:0c:56:bd:6f:d3:d5:74:94:c4:0d:5d:64:33:4f:b9:
b6:36:4e:ea:ff:1e:4a:1a:a2:29:ae:b9:64:1a:32:61:fd:ed:
38:3b:5b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:20:46 2026 by rpki-client