Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DlF73Wltm7EfqnjCFqFeFg10Xmk.cer
File: DlF73Wltm7EfqnjCFqFeFg10Xmk.cer (raw, json)
Hash identifier: Zn6PkRgjaykGE/h3k9mtWxcllg+hN59v9iBp+rggGB0=
Subject key identifier: 0E:51:7B:DD:69:6D:9B:B1:1F:AA:78:C2:16:A1:5E:16:0D:74:5E:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9B6CE5607B4F587491044D49E93C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 1902
IP: 185.156.128.0/22
IP: 2a07:9e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:b6:ce:56:07:b4:f5:87:49:10:44:d4:9e:93:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e517bdd696d9bb11faa78c216a15e160d745e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:4f:2c:86:77:58:b5:2a:56:82:b0:69:be:
65:83:5e:96:c1:29:04:fa:74:1d:50:8e:91:62:f8:
59:05:35:aa:ad:25:12:14:d6:63:f5:e7:85:76:d3:
50:6e:c0:74:de:7c:ce:c1:be:60:3e:e2:51:9e:65:
df:57:0e:b6:b6:8f:f5:b7:4a:3a:e1:ad:71:40:7e:
7b:b5:ca:7d:a0:0c:3e:7f:1c:3f:92:45:d3:30:bd:
c8:6c:d8:b0:39:11:16:f1:20:4d:a8:82:a1:9e:8b:
53:dc:75:3b:10:49:07:f5:c2:6a:41:26:05:6a:f3:
02:e9:91:51:56:d1:34:eb:0b:01:df:74:37:fb:73:
72:29:99:64:7b:3f:80:ce:5b:ab:16:84:fd:8d:85:
cd:46:f2:2c:e8:93:1a:cd:bc:fe:49:81:7e:cb:f6:
3a:6f:5c:5a:86:06:17:f6:13:75:be:a8:47:46:0f:
5b:0c:5c:c0:01:8e:56:c5:66:de:6b:73:d7:b2:1c:
2b:a4:c3:3e:17:da:6c:ec:90:22:db:fc:dc:66:5b:
d7:9e:ef:ab:46:5b:81:26:68:96:79:44:b0:81:1f:
df:5d:b4:c9:7b:ca:11:f4:7c:be:e8:71:c1:dd:1f:
4b:83:a5:ea:3d:85:65:52:65:8e:09:c3:81:b7:fb:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:51:7B:DD:69:6D:9B:B1:1F:AA:78:C2:16:A1:5E:16:0D:74:5E:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.128.0/22
IPv6:
2a07:9e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1902
Signature Algorithm: sha256WithRSAEncryption
0a:7b:ff:d5:8d:f7:51:dd:61:51:98:bd:f9:ec:98:3f:79:76:
c5:82:b5:fc:7f:47:36:41:75:41:36:73:f0:12:76:49:51:ca:
76:59:b1:c8:a9:4d:56:bc:02:96:09:de:dc:e8:08:f7:83:b7:
65:b1:0a:67:f0:d3:31:72:04:aa:8b:1f:52:96:44:01:66:ca:
85:34:57:9b:1c:09:a4:50:71:05:06:da:d3:b2:44:37:43:62:
42:ce:ee:a9:c2:b1:86:47:f5:42:f7:0b:c8:1d:1c:52:99:c1:
ef:ff:b9:27:d7:71:c5:37:8e:d1:7f:ab:9b:42:52:ca:ad:51:
fa:40:c4:a2:c6:a5:76:07:5e:6a:b7:4a:de:9a:cc:ea:fc:42:
35:07:e0:c0:93:fd:07:31:84:e1:8e:4e:d4:ca:40:3a:79:64:
dd:b6:2a:c7:3f:e4:47:e2:0a:fe:92:7a:22:5b:e3:8c:97:0e:
6a:f7:7c:26:41:32:4f:b6:66:eb:bd:d9:46:10:77:56:a7:63:
f4:cd:c3:12:7e:c8:2d:e0:59:b0:c0:5b:95:40:0b:73:83:f2:
57:78:84:b8:db:fe:39:83:65:cc:41:0e:89:bb:e8:ad:8a:fa:
04:4a:0a:80:3b:67:11:61:80:a8:b0:ff:ca:fe:6f:38:28:06:
0b:39:20:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:08 2026 by rpki-client