Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
File: VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer (raw, json)
Hash identifier: aquCUaStyt8v+Qdr7XOJM5FsqZk9PHSziGlpSi6F7Fc=
Subject key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C1198F89E36BE77B8EADEAF90BA4089
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:18:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 176.111.173.0/24
IP: 2a13:940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:98:f8:9e:36:be:77:b8:ea:de:af:90:ba:40:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:fc:10:b7:0a:c2:18:73:10:03:c8:d8:31:
87:86:2e:53:eb:b4:67:3c:f4:6d:9a:d2:19:92:3f:
d6:2c:49:13:67:13:da:ec:14:0f:6c:e8:f4:9c:4e:
61:4e:7b:db:ba:6c:94:7e:0f:a0:b6:52:14:30:eb:
01:cf:c0:53:02:cf:f2:3e:76:d3:ca:7b:b6:7d:ed:
70:c3:19:a3:16:48:8c:42:02:5e:fe:1d:c9:9d:e3:
ec:dd:05:5a:ec:e0:5d:d0:dd:0e:3d:e8:80:9f:02:
b7:92:28:50:ce:87:82:e9:c3:a8:4d:ae:2b:b9:5c:
8c:b9:0a:0e:e0:69:ab:07:39:96:8e:9e:7e:b1:47:
85:58:9e:0a:5a:83:3c:2f:b9:7a:3a:46:8d:07:21:
f5:ab:8e:39:10:cb:9d:0b:e4:da:25:96:11:08:d2:
64:59:48:e2:8c:bf:77:6c:a5:f6:9c:75:bd:73:b5:
bd:8d:75:45:7e:2d:be:1a:10:f7:75:77:32:aa:ff:
b5:4e:5a:fe:4b:06:c7:07:90:f0:d4:b5:9d:14:e0:
94:de:79:f8:77:e3:23:ac:2b:e7:8a:08:df:96:ee:
77:d3:9b:16:b1:b9:8b:2d:70:07:90:29:e0:4a:55:
8e:4a:ec:ef:f6:19:26:b3:3e:1e:82:72:92:9d:19:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.173.0/24
IPv6:
2a13:940::/29
Signature Algorithm: sha256WithRSAEncryption
3b:0c:94:cc:fb:98:ec:3c:05:9b:0e:c9:00:de:a5:2e:c6:f1:
51:23:b3:8d:c3:6c:62:e8:6d:41:42:78:6c:36:7f:2d:ad:8d:
51:f3:e9:dc:c9:e7:21:e4:40:41:01:0a:b5:e5:70:87:94:b3:
55:3c:68:32:1d:58:e8:ab:70:7c:9f:34:de:37:2c:7b:4c:2f:
7b:fe:a5:fd:91:5a:30:d5:d3:14:be:5e:15:cf:90:f7:25:4b:
0b:b9:7c:35:e5:23:01:55:de:86:d2:b9:d6:06:6f:29:59:15:
6d:58:5a:0d:37:82:87:0a:b6:e3:d5:4d:00:ee:fc:2b:2c:4e:
81:50:74:20:ae:f0:4f:96:5d:16:51:af:ed:ff:c1:23:2f:42:
24:a6:a7:e6:61:8e:67:f5:58:85:5b:18:e7:54:d8:e3:20:90:
1c:c4:9f:35:a4:b3:15:48:90:c4:1f:e8:f2:cd:c8:d9:74:6f:
09:31:05:f6:45:ee:b5:d7:91:e7:32:4a:7c:dc:b0:50:7f:a0:
ac:17:60:4f:a1:65:1b:0b:15:21:2e:8c:56:c1:ab:62:54:c0:
3d:d2:cb:4e:5e:50:48:ad:40:91:02:af:6c:ab:af:6c:00:f7:
5c:ea:60:42:1e:bb:ca:9d:83:0e:ad:31:52:b8:3f:24:df:41:
bd:49:6c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:22:27 2026 by rpki-client