Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VDwpWyZA5Zkv5ltbQ0KR36AzF18.cer
File: VDwpWyZA5Zkv5ltbQ0KR36AzF18.cer (raw, json)
Hash identifier: qtVpx0DwdhbpLE3dIRCHpMa87w16lmKuzVmP5ikE/uI=
Subject key identifier: 54:3C:29:5B:26:40:E5:99:2F:E6:5B:5B:43:42:91:DF:A0:33:17:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D1A33872664D7552D44AD3E5B45216016
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/VDwpWyZA5Zkv5ltbQ0KR36AzF18.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 Mar 2026 10:17:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199084
AS: 208761
IP: 5.180.68.0/22
IP: 91.223.12.0/24
IP: 185.198.252.0/22
IP: 2a09:ffc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:33:87:26:64:d7:55:2d:44:ad:3e:5b:45:21:60:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 23 10:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=543c295b2640e5992fe65b5b434291dfa033175f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:fa:ff:1c:44:de:2a:31:b5:6e:4f:57:eb:
77:41:b0:78:7d:88:22:73:8d:d0:ac:da:4a:92:15:
54:8b:4b:3f:da:06:6d:d0:9c:8b:4a:b9:92:29:fd:
46:03:22:5b:c1:0f:46:8a:37:69:37:48:4f:43:57:
d7:4d:5f:19:a6:a6:34:fd:62:c1:de:1f:a7:0f:fd:
b9:54:56:ab:ff:7e:6f:23:4f:d6:00:95:88:ef:ab:
e9:d1:d8:69:2a:2a:5b:9b:c7:eb:eb:b7:37:79:d6:
74:39:4c:83:c9:63:54:0b:ef:3f:92:39:7b:d5:9a:
5e:eb:41:92:1c:5e:fb:4d:18:f6:a0:03:39:e0:61:
39:4f:62:32:d0:74:4e:59:36:10:66:f6:90:42:50:
41:0f:40:65:da:26:58:08:73:44:e2:b0:85:65:f0:
8e:fc:56:70:4c:74:75:df:19:9f:fb:b0:e1:17:1c:
2c:78:49:3b:57:72:cc:29:7f:b3:87:45:02:53:f8:
54:03:99:92:c0:c7:95:58:0d:8e:3b:5e:79:6c:0c:
ed:bf:e3:a3:aa:a3:54:dc:83:66:df:25:2c:d5:3a:
05:63:5b:aa:53:51:22:8f:ca:49:c5:cb:57:fc:1e:
55:e6:7c:17:ab:ec:26:4f:22:77:f6:c0:9c:f0:03:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3C:29:5B:26:40:E5:99:2F:E6:5B:5B:43:42:91:DF:A0:33:17:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/VDwpWyZA5Zkv5ltbQ0KR36AzF18.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.68.0/22
91.223.12.0/24
185.198.252.0/22
IPv6:
2a09:ffc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199084
208761
Signature Algorithm: sha256WithRSAEncryption
9e:1c:7f:fd:7e:7b:9a:65:09:5e:24:b9:e4:f0:df:71:32:0d:
fc:21:54:87:12:f9:78:60:9f:67:97:37:eb:79:9f:39:de:8d:
95:35:50:27:13:19:fd:e7:2b:fc:0a:91:de:f2:66:56:b8:12:
4c:e3:ae:d3:80:5f:af:da:05:af:aa:34:ea:86:c2:51:b6:81:
2b:f4:a9:13:e5:59:92:5f:86:df:b8:fd:39:73:b7:89:9f:33:
96:21:f4:96:d4:1c:7a:af:7c:cf:76:1c:1f:fb:f3:8b:2a:86:
40:40:aa:59:cd:0e:8f:6b:4c:fd:c2:79:70:41:5d:05:5e:2b:
c3:18:e9:fe:59:13:28:b8:3b:7e:47:21:4c:be:4f:1f:df:e5:
c9:da:04:fe:b1:8e:74:a4:b0:64:fc:a6:1d:e8:11:4b:b4:77:
3c:6f:cb:b8:ce:c4:3d:57:46:93:a4:6d:f4:d5:27:45:59:da:
eb:e4:a3:3c:22:3f:78:41:aa:5c:fa:a8:31:e9:4b:53:3c:b4:
2f:89:91:2c:b8:d3:6b:de:27:6c:21:63:b7:61:06:b5:02:c0:
c3:fd:44:40:65:3d:bc:91:8c:4f:c7:b0:77:88:ab:52:96:9c:
e0:86:74:7e:38:d1:76:34:fc:b0:bf:b9:8d:8c:2f:85:00:26:
4f:23:78:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:23:07 2026 by rpki-client