Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer
File: KdlQvBhFV79QTPK3yUp9zsCHbWY.cer (raw, json)
Hash identifier: XVo0gCBTyRbMKw9dBlGEKGwc0xzSkqTJjxzHPt8y6bQ=
Subject key identifier: 29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F8433C44EB15248E4A8CFDC3385279B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:22:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 15907
IP: 185.114.188.0/22
IP: 2a06:7140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:33:c4:4e:b1:52:48:e4:a8:cf:dc:33:85:27:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:22:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29d950bc184557bf504cf2b7c94a7dcec0876d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fb:da:a1:38:52:6e:86:3c:80:a5:ca:d9:ed:
7e:49:93:28:9c:32:c5:c4:9c:c2:84:e4:29:4c:d4:
14:58:60:9b:62:f3:9e:b1:64:40:d6:31:78:57:69:
4a:2d:7f:a6:02:6c:dc:94:6a:a3:df:01:7b:ca:33:
57:52:8c:62:bd:7e:36:51:0d:bb:06:54:4e:f8:ac:
81:55:90:1d:94:0b:23:3a:0d:b8:db:76:37:1e:88:
fc:38:e6:d3:58:db:2c:d7:02:f1:5f:6d:8f:8b:1a:
e6:78:0d:2b:49:e1:d2:93:d8:ce:75:27:eb:7f:44:
d6:7e:a2:46:1d:96:c3:f2:28:dc:26:0e:f4:ba:c7:
21:09:07:ba:26:40:82:16:23:9c:85:72:ee:dc:53:
8d:48:96:3a:6c:7e:b5:c0:d8:03:b8:b0:c1:e4:d0:
3e:de:c8:04:4a:6d:8b:9a:11:68:10:56:3d:82:5b:
0a:af:8d:90:83:0d:60:84:45:7b:33:7b:06:de:3a:
7e:43:13:a4:c3:39:2a:0b:e4:e0:02:13:c6:7e:da:
d9:1a:e9:ca:89:79:e9:a3:75:54:cb:38:f2:d0:4a:
a6:2a:ec:c4:b0:df:3d:00:fa:8e:ab:e8:d0:a2:8d:
2e:86:a7:3b:1c:b1:f8:67:da:fc:f8:05:19:b5:7e:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.188.0/22
IPv6:
2a06:7140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15907
Signature Algorithm: sha256WithRSAEncryption
0e:8c:5a:06:7a:4f:fc:de:2d:98:28:c2:c6:d8:ed:5f:e2:a1:
41:50:b3:1a:3b:0d:5c:1c:98:97:7b:c6:f5:d0:37:3c:b5:99:
2f:d6:9d:b5:bf:e6:81:a2:ce:ed:56:9d:cd:58:f3:5d:b3:98:
ac:23:85:81:17:35:76:ef:b1:14:4d:bd:e9:c2:79:96:27:42:
9f:0a:35:09:d3:6a:be:49:53:3d:62:b1:4c:ba:38:45:e0:75:
c8:4b:65:ce:1e:b1:f0:f9:0f:76:8d:38:10:ca:7e:6c:51:5f:
c6:87:5e:2a:38:67:d3:a4:5a:6b:a2:26:b0:4e:2b:83:74:42:
d8:8c:19:f9:4f:e4:45:2d:b0:53:b8:17:19:f4:87:23:0b:9e:
63:d2:6b:f0:1d:e3:cb:29:2a:30:d9:f3:ef:76:e8:cf:23:6e:
46:ab:4d:06:88:1c:d1:67:5e:f9:fd:fd:39:d0:30:9c:ee:c7:
31:48:6e:22:7d:87:71:03:96:7d:c9:1c:d7:9a:fc:94:46:00:
2c:c0:b8:64:71:e5:83:95:27:50:0d:5e:9c:0e:59:2a:c9:c3:
2b:aa:4e:7a:f8:eb:98:bb:ca:8d:71:8a:a8:68:b7:50:d1:c3:
dd:23:bc:cf:f1:e2:2e:5b:f2:1d:24:45:57:99:ed:6c:91:0d:
ff:c9:e5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:03:33 2026 by rpki-client