Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer (raw, json)
Hash identifier: /VQf9LuCpbk2QUvs4tAeHIyGhBNrXIg5SuOWV35zMy4=
Subject key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C6CC5B8D3D7F3270C7C060ACF0CDF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:17:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 30887
IP: 2001:67c:4d4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:cc:5b:8d:3d:7f:32:70:c7:c0:60:ac:f0:cd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9b:0c:19:a5:de:5c:ee:f2:20:14:90:a9:78:
53:cb:fd:fb:28:d2:e8:1b:6e:40:de:3d:d1:dd:bc:
67:1a:50:c9:f7:be:10:17:23:09:2b:b4:88:6a:70:
2f:b7:04:95:f0:00:0e:af:31:71:6c:b7:fa:51:40:
97:56:56:18:90:1a:b3:90:6e:85:47:e8:84:56:7e:
3e:c8:c4:65:ad:7b:ca:eb:bf:b4:c9:ac:4a:10:f6:
a5:40:79:ea:82:10:83:9a:e6:2f:e8:4e:f4:23:c3:
80:84:d3:86:23:1b:28:87:47:e3:56:43:c8:c7:eb:
c2:e2:83:11:65:cd:94:54:50:36:34:bd:58:0d:98:
17:95:9f:68:f3:0c:77:5b:3f:dd:30:ba:be:b5:b2:
58:b6:90:54:bd:44:58:43:60:b6:ea:04:f2:b5:7e:
59:77:41:a3:19:96:df:65:b9:e1:af:ef:54:6c:cc:
3b:31:c3:ee:13:3f:22:e5:1f:6d:05:7d:6d:5b:d5:
79:05:2f:c0:48:e0:2e:80:06:5a:56:8d:4e:1c:89:
17:e0:93:65:fb:7f:a2:a7:89:0e:4a:b5:bd:69:ff:
15:3d:4f:50:ac:55:18:67:e5:80:14:c7:c7:35:da:
dd:c0:09:a7:93:32:79:e0:05:f6:ea:a9:2a:cb:36:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:4d4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30887
Signature Algorithm: sha256WithRSAEncryption
33:8f:dc:b8:10:8c:4e:39:4e:33:0f:58:b7:64:9a:14:2d:ab:
bd:ec:7d:b5:32:c5:f1:c9:bf:a9:0b:f9:c9:d4:5d:46:6d:44:
7f:2c:17:ce:23:f3:30:c2:70:96:78:c7:fe:8c:79:24:ae:b5:
e9:47:10:66:47:7a:b1:4c:92:96:78:c8:fe:cf:07:53:d8:ab:
bc:d5:73:d1:db:57:44:b9:69:fb:7d:18:16:f3:32:88:8e:25:
af:9a:90:fb:9a:3e:c5:76:bd:af:bb:8b:04:7c:41:db:d0:66:
91:37:00:f2:7b:a6:cc:ff:8f:84:dc:df:18:85:bd:36:4d:eb:
43:29:b4:a7:3b:c5:fd:4a:3e:bf:cb:0e:a9:a2:3a:98:ca:70:
ef:22:da:dc:c8:b5:e2:e7:d3:ae:80:85:19:ec:b2:83:be:69:
e5:d1:b7:36:98:bd:cd:38:cc:ea:b2:f6:8f:52:08:71:5b:98:
ea:10:9b:48:60:f9:f0:7c:20:2b:85:f3:43:39:d7:0b:c9:e1:
0d:96:0c:ce:48:b2:6e:24:7c:f7:f6:71:c8:83:8f:61:14:d2:
4b:ab:ac:5c:c2:8d:c5:3a:9d:0c:7c:67:3b:02:0d:b9:19:40:
0a:3d:01:9a:bd:82:33:3f:e3:07:40:f7:0f:75:71:c2:ce:65:
88:4f:45:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:56:30 2026 by rpki-client