Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
File: GVc7IITN9G7hzNKC36O49rfqcmw.cer (raw, json)
Hash identifier: 5CTPJPTEgyOOV51afi7Zunh5cRL3gIuG45vVvwOgp+A=
Subject key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C7FD7F881ED2E38512AC9883FD67187
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:18:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205786
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:d7:f8:81:ed:2e:38:51:2a:c9:88:3f:d6:71:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:86:88:e4:1b:12:06:a7:9e:9f:00:ca:9a:
0a:8e:5d:f4:32:75:9f:ed:a0:80:c0:a7:1d:3c:7d:
be:be:2c:a3:2f:9a:d3:22:1c:ba:64:a4:fa:ae:18:
54:e9:83:5a:4a:06:35:84:52:ad:ed:ad:17:1a:b4:
e7:cb:6c:9a:07:4e:37:db:75:65:57:e0:a1:89:15:
c6:89:44:af:b1:2d:b2:b1:31:57:1d:c6:84:cc:2f:
4d:0e:89:3c:34:02:de:9d:a6:df:c7:77:65:2f:06:
41:58:38:4d:b9:a4:1c:6e:72:13:dd:a6:29:3d:a0:
9a:7f:72:4e:d8:5c:f8:9a:5e:fc:1e:93:6d:3b:43:
1a:c1:ea:07:41:1a:8c:64:c7:8a:fa:e3:86:1e:bf:
8a:b2:0f:3f:92:30:b7:b3:33:47:67:3e:21:d4:1c:
6d:c8:ea:35:97:28:a6:dd:6a:ca:9f:bf:51:d3:b6:
6e:24:04:f3:bf:fc:ca:17:4f:a9:46:90:4d:5e:14:
17:6e:bf:b9:67:39:22:a8:3f:bc:38:3c:ac:b6:08:
cb:b5:08:8a:53:0b:f3:ec:77:7e:31:cd:66:e7:2f:
dd:53:39:5a:1a:ac:2b:6b:ec:59:5a:a3:5e:39:06:
2c:19:83:2e:00:93:72:7f:4c:58:f7:a8:1c:bb:cb:
3a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205786
Signature Algorithm: sha256WithRSAEncryption
0a:19:22:2d:00:50:46:ce:50:69:ab:91:79:67:8f:b3:29:83:
89:06:2e:47:c4:06:81:4e:56:03:12:b0:77:8b:7b:03:f4:03:
b7:fd:c2:76:57:ae:81:5b:a9:ac:3f:d5:58:a9:2b:08:ca:98:
e0:82:5e:30:7d:25:14:56:43:b4:a6:f9:43:70:18:25:d9:f0:
dc:25:d4:af:dd:4a:37:83:d8:40:59:2a:d8:8d:cd:8e:b8:97:
6e:52:7f:b1:d5:0d:f5:0c:bc:7c:eb:e6:63:a6:fd:07:94:05:
27:94:f1:6f:45:60:95:1a:84:85:2b:52:04:0c:84:c3:85:f8:
7f:9a:49:a7:fd:68:b2:16:9f:23:9e:d9:cf:6c:85:ac:0f:12:
09:93:ad:4d:2e:6e:af:1e:04:a0:f4:7e:77:0c:03:65:73:f3:
bd:c7:b0:87:19:5c:0a:d5:f5:1b:30:14:bf:27:2d:e2:10:8e:
c7:8f:0f:77:7a:5c:97:e0:92:15:74:79:62:92:96:ba:a7:a2:
b6:e1:94:7d:27:c7:f0:f4:13:4e:16:a9:c0:72:40:c9:96:5c:
d9:b5:25:e7:62:96:16:35:46:60:91:e7:f1:e1:d9:55:7c:c5:
2a:73:c1:cb:29:e4:3b:7d:b1:1d:8a:9b:e3:a6:4e:da:f0:b4:
0d:9e:95:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:45 2026 by rpki-client