Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
File: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer (raw, json)
Hash identifier: /PlXoGWTdYzVXmUyy/MO/g8DIPmOV0mX2nNBo3mjw0A=
Subject key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E390ED9D98A04C6FC8A28A63DA22451
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:20:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 51379
IP: 178.212.112.0/21
IP: 2001:67c:2f10::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:39:0e:d9:d9:8a:04:c6:fc:8a:28:a6:3d:a2:24:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5797245d78078985c147dccbe0ec6d168dd9982d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:f3:33:11:16:fe:53:97:66:a8:ce:c6:dc:
7e:5c:54:23:e9:47:4c:67:32:23:ef:ec:e4:07:cc:
68:87:d7:28:c2:d4:52:9a:10:be:83:ef:1b:96:78:
b2:90:c5:97:70:db:1f:94:af:ed:ca:fc:2d:a9:20:
9a:35:e3:af:8c:ed:1e:ff:fe:fb:d7:9e:e7:cd:15:
87:bf:cf:d2:a7:19:46:ce:8f:55:a3:63:dc:78:71:
76:96:10:59:fe:0c:92:68:82:86:68:64:96:6c:3e:
5e:51:06:47:f5:9d:bf:84:93:48:20:b5:b3:19:32:
ec:90:90:44:cd:1c:70:56:1c:1a:b8:2e:0f:83:2d:
91:43:c8:24:e1:f1:89:97:c2:4e:ad:fc:d1:90:69:
8b:40:0a:d4:b6:74:00:ad:95:c5:59:21:64:39:09:
f0:82:01:22:20:0b:1f:d6:2a:37:09:65:54:71:a8:
2c:50:f4:2d:8a:c0:85:5c:30:e5:2a:d0:13:f3:36:
18:cb:2e:a4:9d:4d:ab:02:38:a3:c7:51:35:ef:f3:
6a:62:ea:c7:90:f3:2f:65:3a:67:87:77:20:2c:1e:
72:6b:f0:e9:75:35:79:58:15:fe:34:21:77:d5:bb:
8b:04:fa:17:2f:93:31:43:bc:4a:8d:89:ea:f3:fb:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.112.0/21
IPv6:
2001:67c:2f10::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51379
Signature Algorithm: sha256WithRSAEncryption
0b:dd:d1:23:78:83:f6:dc:5f:bf:a3:cd:80:ba:0e:7a:51:cd:
92:dd:72:11:47:32:8e:66:2d:7f:47:90:54:88:02:87:82:76:
aa:77:c5:a5:5d:91:0a:4e:12:9d:b7:7f:32:4f:67:f3:80:45:
c0:7a:b0:d0:76:c0:5e:e0:a6:94:98:b4:bb:1c:aa:5a:aa:6b:
f1:bc:96:33:49:54:32:21:c0:c0:a4:0d:3d:dc:bc:e0:41:c0:
1c:6a:d0:ab:64:8a:60:9e:40:fc:41:98:08:2b:ac:99:dc:02:
10:2b:69:7b:29:5c:53:b7:59:d7:cb:fa:cf:17:99:0a:a5:1e:
31:9c:bb:54:8f:7d:eb:94:6b:a6:a8:db:4f:0d:e4:01:91:32:
f5:67:59:6d:58:ce:87:e7:9b:64:5d:d2:a4:89:8b:13:76:df:
da:d2:dd:f5:39:4b:e4:34:b4:4e:bd:de:16:b2:ab:bd:76:c8:
ea:cd:1d:c5:2a:44:5c:a7:34:e5:32:e8:c8:01:62:fa:ef:a4:
2a:5d:0b:e1:bc:c3:13:4a:82:5f:f6:78:7c:0b:1e:c9:7d:ee:
0e:e8:4b:4c:e4:80:e4:79:0b:2e:7b:0e:b2:c6:2f:f6:7a:cd:
95:88:6d:c4:c1:91:44:67:fc:f1:74:4d:a6:39:9c:03:e2:6d:
71:11:cb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 09:58:30 2026 by rpki-client