Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer
File: DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer (raw, json)
Hash identifier: ajIJCcqtEvQqk4zS9hUOBUbRPG/CqLiMKRhDsJk+6iI=
Subject key identifier: 0D:4B:0F:87:73:0A:55:04:4F:88:27:6B:EB:06:4E:3C:7B:AD:D1:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9EAF3DC3ED14B09CFDFE9D814A1E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 5.56.32.0/21
IP: 185.60.100.0/22
IP: 2a01:47c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:ea:f3:dc:3e:d1:4b:09:cf:df:e9:d8:14:a1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d4b0f87730a55044f88276beb064e3c7badd1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:cc:b2:78:f0:32:76:d4:77:02:d8:5c:f8:
58:d8:23:48:68:e4:76:35:c0:de:fd:69:b5:e9:5e:
bd:a2:7e:a6:36:69:6c:a1:0d:50:d2:57:9e:9a:cb:
2f:28:47:0c:ce:e0:97:5d:60:85:82:03:e2:a5:1d:
ee:90:0d:0c:ed:2b:ce:4b:08:aa:e4:d1:eb:62:a9:
04:24:f9:6e:75:37:62:02:bb:e5:59:1d:bf:7e:ac:
d4:36:63:b1:13:d7:26:13:ac:e8:19:fd:dc:33:85:
56:ab:dd:8a:63:21:32:f4:7f:3e:9d:1f:ef:fc:7b:
18:db:3a:01:c9:55:78:57:96:d4:b1:06:cc:25:a5:
57:5f:2c:77:0b:8d:91:b2:8a:11:d9:20:09:94:d5:
e5:c0:d4:46:84:70:e7:35:91:ad:65:87:2b:a8:99:
ab:97:0a:30:44:20:5d:42:ae:6a:8b:b7:be:c1:21:
2e:f8:10:5d:f6:d4:b2:a2:86:ce:77:46:ed:6d:c8:
e0:17:cb:f2:9c:87:22:90:7e:60:43:23:da:a1:2e:
98:79:f9:85:cc:7a:97:a2:71:13:fe:7c:71:09:01:
50:8c:af:bf:13:63:72:15:45:c7:c8:2d:f9:9e:35:
a8:ee:6f:33:fc:8b:81:18:30:6c:34:28:90:3b:58:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4B:0F:87:73:0A:55:04:4F:88:27:6B:EB:06:4E:3C:7B:AD:D1:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.32.0/21
185.60.100.0/22
IPv6:
2a01:47c0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:f3:b0:92:fd:c5:62:cd:da:99:e8:b5:6a:6a:d4:d9:b1:c4:
e8:38:ab:0f:62:40:d4:40:4b:f5:af:6e:50:c3:aa:26:f2:0f:
cc:25:bc:cc:41:1f:fe:79:92:b0:d3:62:0c:e6:18:30:7b:dc:
71:0c:75:45:a2:4d:5a:0f:2f:e2:3b:01:8f:99:7e:3c:46:98:
f4:79:cb:53:44:fd:65:bc:5e:59:88:2e:7b:6c:32:89:d6:46:
d8:91:fe:4e:6c:ae:55:c2:1a:88:84:5d:f3:7c:1d:a7:8e:90:
d7:a2:91:ae:86:7a:62:52:3f:d9:c6:88:cf:2d:e6:a5:c3:b0:
ae:9c:09:d1:e1:b1:a1:6b:30:8c:72:8c:5f:ec:92:00:74:c3:
ac:4e:09:01:fb:8c:00:d0:8d:32:c7:3f:39:6a:30:44:3f:46:
5b:f3:40:24:42:60:c2:28:c3:6b:db:f1:f7:df:3b:c4:4b:07:
61:98:3a:fc:6a:72:21:73:df:12:8e:10:5b:5e:45:f7:72:c7:
ee:8f:8b:76:64:94:aa:0e:e3:25:35:2f:94:83:c6:09:3d:dd:
ce:bf:84:bd:de:d9:f9:4e:e5:82:b3:91:54:0a:46:ad:ae:b0:
41:29:5f:7c:3e:5f:fa:b4:d8:81:d8:5e:fc:26:3b:60:38:3d:
b9:23:fa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:20:30 2026 by rpki-client