Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
File: VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer (raw, json)
Hash identifier: mpVPzeR3AuZX7ZuG9ywCb2UHuAanrv0ZzGJOaeuVwuE=
Subject key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797E09C8B7EE918889D8B1F5A0A150FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:17:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43708
IP: 95.85.192.0/18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:09:c8:b7:ee:91:88:89:d8:b1:f5:a0:a1:50:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:27:37:88:e7:5c:d9:c2:50:75:a8:35:23:f6:
22:36:4f:c1:c4:e9:70:62:d1:5e:ea:f1:af:80:10:
5a:a6:57:23:94:ff:18:16:38:64:68:5a:20:8c:1d:
43:01:c3:3f:70:13:a1:05:a7:b1:cf:dc:27:95:25:
d2:e5:c9:1f:91:6d:3d:61:8f:db:70:17:51:04:18:
c9:07:1f:3d:a5:f8:67:67:d8:eb:ef:04:9d:9a:63:
dc:5a:c6:c3:c2:18:b2:9e:68:fb:1c:a8:07:f3:da:
08:88:2b:bc:3e:ba:17:23:58:cd:7c:36:f4:7a:49:
a2:74:9c:25:21:3c:77:f1:e3:fa:2e:1f:76:89:91:
72:86:d4:c1:78:4b:28:0b:94:bf:5a:bc:fd:a8:4a:
46:04:a7:72:ff:db:e9:77:8e:6a:ea:06:d5:24:ed:
6b:4d:27:cc:b3:76:3b:c6:33:62:cf:fe:81:88:91:
10:01:dd:36:72:f4:06:98:1b:ee:2a:4c:e5:3a:bf:
08:25:93:f0:68:2f:8e:8d:50:7e:20:f4:ae:4f:b3:
c2:71:0d:1b:47:d0:80:7b:de:85:f5:3a:6f:f7:a4:
17:2a:32:26:8d:e6:93:ba:0d:40:87:9b:21:46:b1:
c7:a5:55:5e:b0:56:12:cc:86:ab:8e:15:1d:9a:c7:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.192.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43708
Signature Algorithm: sha256WithRSAEncryption
9a:0c:a1:ea:21:38:d9:b1:10:5c:26:af:03:b0:e8:1a:53:88:
b6:59:c2:88:b2:ae:1e:86:76:4a:73:a5:e8:ff:4b:0f:b5:5a:
f3:a9:44:3b:86:d3:4b:6b:40:3f:2d:50:ff:f0:c9:58:c9:85:
5b:0c:c3:91:b1:87:63:c4:e7:b6:cd:24:51:12:86:77:41:a3:
1a:bc:bf:8e:ce:94:61:c2:27:2b:c9:29:22:34:5c:4f:a1:11:
c7:5b:a2:5f:5d:e5:c5:87:5a:5e:5e:56:f4:3b:71:65:cb:9f:
66:ed:10:26:a5:d0:32:53:3e:a8:1a:44:da:17:a9:33:dd:bc:
6c:03:89:59:57:b8:0d:d0:99:9a:4a:27:bf:39:d8:d7:64:54:
8d:27:2a:11:fb:e7:01:20:c5:d1:fe:04:51:c2:0c:e4:0c:f7:
6e:70:5d:1e:a7:09:34:f7:79:ef:b7:80:89:b2:18:e3:fc:dc:
12:1d:e8:82:1c:a8:55:22:fb:63:ed:1a:cb:3b:86:54:5c:d0:
b9:c4:10:c0:49:48:2a:7c:83:96:21:3b:95:a2:a4:f5:58:b8:
c1:c8:d8:db:1c:ce:4f:90:6d:9f:49:d3:b6:7c:02:11:b4:6a:
2a:5d:75:09:a8:bb:57:d8:85:5d:51:88:ed:7f:88:99:e5:eb:
af:12:b9:3f
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZt5fgnIt+6RiInYsfWgoVD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGIwYmVjOGY1OGRiMGNlNWI5MWYzNDUwNTI3N2U0MGJmZDNhZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Cc3iOdc2cJQdag1I/YiNk/BxOlw
YtFe6vGvgBBaplcjlP8YFjhkaFogjB1DAcM/cBOhBaexz9wnlSXS5ckfkW09YY/b
cBdRBBjJBx89pfhnZ9jr7wSdmmPcWsbDwhiynmj7HKgH89oIiCu8ProXI1jNfDb0
ekmidJwlITx38eP6Lh92iZFyhtTBeEsoC5S/Wrz9qEpGBKdy/9vpd45q6gbVJO1r
TSfMs3Y7xjNiz/6BiJEQAd02cvQGmBvuKkzlOr8IJZPwaC+OjVB+IPSuT7PCcQ0b
R9CAe96F9Tpv96QXKjImjeaTug1Ah5shRrHHpVVesFYSzIarjhUdmsfmjwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFFSwvsj1jbDOW5HzRQUnfkC/064RMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzJhZDM0
ZS1iMWU1LTRkOGMtOTQ4ZS0wZjRkYmI4OTBiZDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvMmFkMzRl
LWIxZTUtNGQ4Yy05NDhlLTBmNGRiYjg5MGJkMC8xL1ZMQy15UFdOc001YmtmTkZC
U2QtUUxfVHJoRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQGX1XAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCqvDANBgkqhkiG9w0BAQsFAAOCAQEAmgyh6iE42bEQXCavA7DoGlOItlnCiLKu
HoZ2SnOl6P9LD7Va86lEO4bTS2tAPy1Q//DJWMmFWwzDkbGHY8Tnts0kURKGd0Gj
Gry/js6UYcInK8kpIjRcT6ERx1uiX13lxYdaXl5W9DtxZcufZu0QJqXQMlM+qBpE
2hepM928bAOJWVe4DdCZmkonvznY12RUjScqEfvnASDF0f4EUcIM5Az3bnBdHqcJ
NPd577eAibIY4/zcEh3oghyoVSL7Y+0ayzuGVFzQucQQwElIKnyDliE7laKk9Vi4
wcjY2xzOT5Btn0nTtnwCEbRqKl11Cai7V9iFXVGI7X+ImeXrrxK5Pw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:22:23 2026 by rpki-client