Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
File: VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer (raw, json)
Hash identifier: y8pbhddtNYPupXLsh0ZilnOi5YKCbryun1PHBbxvCk8=
Subject key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC7A9E361FEE6749F5EB69904E3D77B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:17:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.231.48.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:a9:e3:61:fe:e6:74:9f:5e:b6:99:04:e3:d7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:89:bb:6d:de:89:ba:25:75:09:5f:09:de:
88:f9:b7:ea:33:bd:7a:93:d0:f9:0e:5b:a7:0a:cb:
8e:b7:33:6b:6c:ac:92:89:1a:95:21:41:81:6c:6b:
50:38:36:0c:bf:98:c0:29:cb:a0:7c:a7:1c:64:3b:
0f:19:74:aa:22:a3:1e:f1:b2:48:b5:55:c2:3c:3a:
39:7a:41:15:e1:e8:a6:d8:97:ce:7f:b5:bb:bc:6f:
5a:0f:81:1a:08:8c:b4:d2:aa:67:25:da:25:e9:58:
0d:e3:78:20:b4:35:d8:7c:34:42:ba:53:cc:f3:03:
bb:86:b0:18:95:57:6d:a0:c6:c1:8c:d9:d5:72:ae:
58:cc:ce:b8:6c:41:cd:e1:50:4a:2e:f7:ef:04:86:
15:6d:58:98:31:72:07:5b:dc:6a:d0:b5:d4:7a:ab:
38:bb:4c:58:a2:a3:e1:42:60:6a:2c:c7:1e:a7:88:
30:9a:7a:c0:16:f3:1a:d0:2b:7a:d9:6f:2f:73:ac:
4d:dc:f1:1e:58:fa:d1:76:0b:da:0c:29:ae:be:63:
54:ba:76:e7:2d:61:2b:a8:ee:d1:84:45:92:4e:10:
8f:c5:4b:25:a6:98:f2:f1:c1:05:e7:b9:29:1f:26:
77:17:fc:79:74:e4:69:b4:64:f7:10:36:ea:c9:74:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.48.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:0b:9e:f0:d6:a5:6e:91:5f:76:ac:66:43:a7:b2:49:57:d5:
f1:f4:2b:02:c8:5b:cf:dc:b8:ff:02:15:46:56:02:6b:56:e0:
23:9f:23:a1:52:e9:c6:a3:1e:c5:32:33:1b:b2:09:ab:d5:74:
fd:66:05:17:68:4d:a0:40:48:1d:4a:f8:5c:71:98:85:76:a1:
c3:4c:d1:53:1b:5e:43:c6:32:f0:be:92:fe:44:05:74:c0:92:
53:88:61:ca:f8:af:3e:b8:10:29:88:37:0a:92:ee:ea:ad:a1:
6a:56:8b:df:6b:ea:61:a3:14:58:1a:f9:87:71:79:3a:fc:d0:
8e:17:10:6e:42:37:80:43:e4:aa:91:ab:6a:72:ab:fe:51:ff:
ea:74:aa:8c:94:50:29:78:4d:8a:70:36:02:0f:74:95:b4:3a:
a5:6e:b8:97:da:83:8c:e6:1e:51:2d:d8:03:27:b5:b5:5a:d4:
fd:d6:5d:4c:4b:7f:0f:63:5f:41:79:8a:60:72:2a:46:b8:89:
74:de:37:18:65:35:7b:f5:ee:b8:03:58:c5:81:2b:09:40:d8:
73:08:4d:73:b0:bb:df:0b:e9:64:dd:2b:f2:c9:08:16:01:74:
50:14:15:d0:5c:67:66:15:c7:8e:19:36:7f:97:b7:7b:01:96:
8f:67:58:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:56:57 2026 by rpki-client