Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/DXPUvXkdXM6A4CbErX1CfRV1k0c.cer
File: DXPUvXkdXM6A4CbErX1CfRV1k0c.cer (raw, json)
Hash identifier: DG0inRUDbIpdqQ+YFYKxwO+59wLzeSalzoBxEoycThk=
Subject key identifier: 0D:73:D4:BD:79:1D:5C:CE:80:E0:26:C4:AD:7D:42:7D:15:75:93:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0A15D62C425AEF3CF1CF62E96B6B2B83A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 14 Sep 2026 19:20:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.69.156.0/22
IP: 2a05:2300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:5d:62:c4:25:ae:f3:cf:1c:f6:2e:96:b6:b2:b8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 14 19:20:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d73d4bd791d5cce80e026c4ad7d427d15759347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:5b:1f:d6:f5:dd:d5:a4:81:7b:63:e2:ce:
40:9d:5d:0b:97:97:b1:de:d3:92:05:90:8c:72:b1:
fa:29:e2:57:91:d6:4a:53:df:fc:25:c0:87:0d:9f:
bd:cb:c9:65:f3:db:2c:95:76:26:9d:1a:d1:d2:4f:
af:7e:05:6b:45:f7:2e:90:a4:64:76:a6:41:bd:3b:
c0:55:9b:29:f2:98:08:00:ac:a8:1d:e5:b6:f1:86:
da:86:17:b7:56:eb:b1:73:4d:59:ab:f3:19:f8:93:
09:97:42:9d:a8:0d:3c:35:e5:75:ea:62:74:4d:2c:
71:2c:87:05:e3:a6:d5:09:b9:93:d7:3e:e3:48:00:
3c:8a:3b:49:6a:8d:42:a7:4b:d2:ee:f2:0c:1a:b8:
9d:ed:90:e5:2d:8c:af:ad:06:cd:30:f4:4d:0b:7e:
1d:2f:38:d1:9e:40:d9:99:ff:0c:cc:7b:66:f8:06:
42:5a:01:06:64:5a:bb:e7:b6:dc:f8:9b:77:8d:02:
62:fc:6f:70:8a:7d:c6:27:93:5b:f6:37:b5:8a:a4:
31:17:58:56:fe:4e:c2:4e:e4:f8:81:70:5c:05:bb:
70:16:a4:47:8b:6b:fb:ee:e5:1e:4a:29:6f:ca:de:
c8:71:c0:59:bf:f8:92:71:95:39:64:4c:ae:10:70:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:73:D4:BD:79:1D:5C:CE:80:E0:26:C4:AD:7D:42:7D:15:75:93:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.156.0/22
IPv6:
2a05:2300::/29
Signature Algorithm: sha256WithRSAEncryption
5e:82:33:f6:9e:25:39:b8:84:bd:58:fd:21:15:32:cb:ec:27:
96:38:08:37:07:4b:8d:0a:b7:4c:ce:8e:2c:f1:c0:a5:cc:59:
37:4c:72:74:9f:66:a9:8c:ea:8b:34:a8:82:ef:87:74:56:e4:
31:96:09:46:d6:af:42:8b:d0:29:32:01:57:8e:bf:09:43:a0:
36:5e:4a:42:66:f5:f5:fa:be:26:49:6b:44:62:38:95:1e:5b:
b4:7a:a4:d2:07:a3:ed:2e:6f:f4:b7:d5:4e:2e:36:be:63:d3:
c3:ba:d2:04:6f:99:9d:45:c7:63:85:d5:06:62:85:82:b3:5a:
03:31:75:03:77:8d:c0:47:15:29:ca:c2:0a:f5:db:e1:6c:e2:
36:03:9f:43:03:31:c4:0f:56:7e:44:1b:d0:06:e4:12:f4:10:
49:2f:60:4c:b3:24:44:9f:8b:53:cc:ac:3a:fe:87:b3:1c:74:
75:b0:96:54:58:c8:36:8e:ef:b7:29:73:c9:90:c9:95:4f:03:
2a:99:ae:82:ba:35:c2:fa:cb:b7:41:85:ab:69:96:e5:37:01:
71:f8:26:74:fe:23:26:d9:2c:3a:a5:bc:30:45:52:b3:cc:17:
6a:42:c5:32:a0:3d:50:41:78:d3:c6:dc:9d:e4:ab:7d:ec:e4:
14:5f:ae:c5
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAaChXWLEJa7zzxz2Lpa2srg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTE0MTkyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDczZDRiZDc5MWQ1Y2NlODBlMDI2YzRhZDdkNDI3ZDE1NzU5MzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ9bH9b13dWkgXtj4s5AnV0Ll5ex
3tOSBZCMcrH6KeJXkdZKU9/8JcCHDZ+9y8ll89sslXYmnRrR0k+vfgVrRfcukKRk
dqZBvTvAVZsp8pgIAKyoHeW28Ybahhe3Vuuxc01Zq/MZ+JMJl0KdqA08NeV16mJ0
TSxxLIcF46bVCbmT1z7jSAA8ijtJao1Cp0vS7vIMGrid7ZDlLYyvrQbNMPRNC34d
LzjRnkDZmf8MzHtm+AZCWgEGZFq757bc+Jt3jQJi/G9win3GJ5Nb9je1iqQxF1hW
/k7CTuT4gXBcBbtwFqRHi2v77uUeSilvyt7IccBZv/iScZU5ZEyuEHAFgwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFA1z1L15HVzOgOAmxK19Qn0VdZNHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0L2Q4NmVi
Ni05ZmIyLTRkN2UtODdhMy0wZjk5YTM5YjBjZmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvZDg2ZWI2
LTlmYjItNGQ3ZS04N2EzLTBmOTlhMzliMGNmYi8xL0RYUFV2WGtkWE02QTRDYkVy
WDFDZlJWMWswYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuUWcMA0EAgACMAcDBQMqBSMAMA0GCSqGSIb3
DQEBCwUAA4IBAQBegjP2niU5uIS9WP0hFTLL7CeWOAg3B0uNCrdMzo4s8cClzFk3
THJ0n2apjOqLNKiC74d0VuQxlglG1q9Ci9ApMgFXjr8JQ6A2XkpCZvX1+r4mSWtE
YjiVHlu0eqTSB6PtLm/0t9VOLja+Y9PDutIEb5mdRcdjhdUGYoWCs1oDMXUDd43A
RxUpysIK9dvhbOI2A59DAzHED1Z+RBvQBuQS9BBJL2BMsyREn4tTzKw6/oezHHR1
sJZUWMg2ju+3KXPJkMmVTwMqma6CujXC+su3QYWraZblNwFx+CZ0/iMm2Sw6pbww
RVKzzBdqQsUyoD1QQXjTxtyd5Kt97OQUX67F
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:18:22 2026 by rpki-client