Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
File: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer (raw, json)
Hash identifier: FFL4ki2wOQ8DtROFcuhoNi0mGOGXLDHYTAwuE3eX17M=
Subject key identifier: 0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA3D55E6C084EEBDB508FCC704C0C13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:18:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:67c:118c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:d5:5e:6c:08:4e:eb:db:50:8f:cc:70:4c:0c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:9f:fc:f5:63:47:2a:6c:e9:ba:74:9e:00:
11:d8:eb:0e:ea:cf:f2:21:b9:81:74:81:a9:f1:5c:
c9:fe:8b:e2:c9:ad:fe:19:9e:82:89:d0:96:d3:a8:
7d:4f:50:a4:d1:6c:ae:ad:00:ce:c6:78:04:96:51:
6c:e4:8e:04:88:0f:f4:f3:f1:9b:30:a5:8f:6a:11:
f6:03:1e:42:34:1a:13:48:01:a8:82:1b:6d:16:15:
9e:6e:06:99:15:18:99:d7:61:2c:2a:2c:ad:7f:69:
3d:34:eb:8c:08:68:e1:b4:83:10:f7:c1:f6:7d:7e:
77:ad:6e:05:bf:53:77:8a:32:42:f1:49:bf:b3:02:
81:9e:9f:16:af:7b:94:b9:a0:c4:ff:98:09:e6:28:
29:e8:81:45:5e:7a:ca:30:09:0c:92:74:e8:9e:c3:
2d:9b:37:05:e2:d5:c2:3a:8f:08:30:de:1e:5b:fe:
c6:f6:cd:3d:6e:6d:a5:84:78:10:8c:76:f2:b3:04:
79:6b:9e:5e:0d:7b:69:e0:62:39:e5:06:ed:6f:11:
73:f7:28:37:3a:e5:96:ea:db:e3:ca:72:5f:91:cd:
8f:83:76:2c:7b:6d:9a:ad:ba:39:f3:d3:92:1c:97:
8e:f6:d7:14:1d:d7:46:a7:28:4d:86:37:28:ee:36:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:118c::/48
Signature Algorithm: sha256WithRSAEncryption
3d:25:42:9f:78:77:dd:1d:5f:4c:5c:d8:6b:6f:5a:68:3c:e3:
36:11:45:53:82:4b:f4:0e:65:82:8f:9d:13:ff:ad:59:f3:6c:
d1:72:a2:b2:5b:58:56:5b:bd:9b:8d:54:9b:74:34:1e:00:7b:
01:3c:a1:89:82:ea:5c:7c:34:c8:9a:3a:fd:12:4f:82:90:45:
4c:78:3f:60:a8:69:00:49:07:97:04:19:28:78:1d:ce:f9:a1:
e9:b6:6d:b2:1b:36:9c:c8:71:17:3d:b4:4c:6f:2e:2e:39:ee:
39:0d:98:4e:ff:aa:ff:35:68:69:77:d4:14:e3:f0:88:9a:41:
e5:d7:a4:7f:b0:ad:1a:c1:f7:df:88:84:32:74:51:e8:7b:37:
3b:4c:29:32:0b:80:34:2d:03:46:4b:3f:a8:77:6f:fc:e0:33:
87:63:73:6f:53:df:6f:38:e0:d0:03:ba:d4:19:31:33:1e:4f:
d8:4f:e3:4a:20:31:2e:d5:30:f4:b6:56:ab:73:1d:6c:d8:80:
d6:51:db:51:ff:32:27:ce:0f:5a:21:c2:66:ff:34:50:65:ce:
0f:09:88:75:b0:2d:42:db:d0:96:6e:97:e0:f9:5b:3f:17:01:
80:20:0c:f4:cb:f7:86:0c:4c:a4:a9:3e:4f:b5:34:bf:bb:5c:
57:96:91:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:48:58 2026 by rpki-client