Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer (raw, json)
Hash identifier: ajDO/Fvc0nE2uxd7EPcO/PnhywLKMOQ5Z/4Cwb/Y3+M=
Subject key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ED1253C4B3C88D6E9224F655AD372E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48945
IP: 93.186.144.0/20
IP: 185.11.36.0/22
IP: 2a03:7e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:12:53:c4:b3:c8:8d:6e:92:24:f6:55:ad:37:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:79:3b:87:f3:10:ae:b4:e9:fd:df:ab:bb:
ac:30:6f:60:80:71:0b:f2:50:af:a5:fd:19:50:46:
b7:39:c3:33:e4:dd:92:4c:3c:e4:c4:89:59:e3:1e:
fb:ff:95:5e:71:49:05:45:7a:0c:d4:44:b7:34:70:
54:38:c0:70:0a:a3:e7:df:95:9e:b4:ce:dc:88:4c:
67:7c:f8:ee:66:de:f7:cf:fa:7c:58:54:97:d8:29:
6f:1c:7a:2a:62:50:92:72:66:fd:51:ca:f4:67:03:
c7:50:b6:f4:ea:7d:4f:fe:a8:91:21:a0:50:24:88:
4d:22:8b:3f:d9:53:62:3f:b0:2b:24:ed:ed:49:1a:
08:e7:39:a0:61:f9:ba:e1:e3:42:bd:4a:9b:79:6b:
81:4e:77:e5:91:df:77:04:86:75:1e:1e:0a:1a:7a:
06:a1:5e:d2:38:10:ef:be:67:c5:5a:86:da:8a:ca:
87:ec:7b:ce:38:10:9f:d8:66:e2:7f:04:1a:eb:8e:
45:21:ef:c9:c2:60:da:cc:94:28:78:65:02:c1:fc:
45:2e:95:9e:7f:2c:76:ce:56:73:89:75:d3:68:ff:
10:14:84:4c:03:2f:60:eb:bd:e3:69:f7:89:3c:80:
4c:e7:36:fe:5d:b2:5b:14:e7:c2:f2:18:b1:d5:b6:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.144.0/20
185.11.36.0/22
IPv6:
2a03:7e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48945
Signature Algorithm: sha256WithRSAEncryption
1b:66:ba:20:31:87:7a:d6:1b:f8:08:73:40:be:fc:4c:87:b3:
15:cd:c4:88:98:eb:eb:aa:e7:8b:0c:4a:82:47:ca:77:b8:06:
5e:a3:31:52:7b:dc:0d:fe:0e:0d:fa:d6:b7:c7:55:1a:85:7c:
b7:9f:99:75:65:0a:9a:ce:da:4f:bb:82:c7:1b:a8:8d:ab:c6:
61:fa:58:3e:a2:04:c7:95:f0:75:1f:f1:54:4d:68:47:9f:ad:
dc:1f:98:fd:92:7c:5e:7c:cf:13:30:ff:5a:02:f7:68:9f:f9:
a5:cd:92:ef:59:63:8f:d2:18:64:2f:0b:c8:18:88:82:05:69:
4f:78:4c:a0:b9:ef:0d:6b:a5:27:fe:3e:5e:d7:7e:d1:c3:d0:
68:43:09:7d:40:d6:d2:82:9c:90:f8:04:7f:c7:3e:bb:bf:f2:
b5:9e:8f:a9:f9:4f:4a:a0:74:e1:35:ce:b8:0f:0e:a3:5a:65:
3d:4f:6b:cf:34:6e:31:af:b3:8b:13:c0:b3:f6:05:c7:c7:66:
6a:72:ae:71:7d:df:b3:46:44:ca:e6:43:ab:d2:12:d7:0b:34:
65:95:66:da:30:35:98:6a:dc:6e:98:37:5f:74:ed:2c:56:8b:
7e:e4:33:fe:8c:53:72:ea:f4:90:a7:69:94:f4:9f:79:6b:25:
9c:43:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:38 2026 by rpki-client