Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
File: VVvz0dRYglh_O_uidLL4uaRbyJk.cer (raw, json)
Hash identifier: iBmkbl8ELzBs0Uyq5yb5rjk7bGfbhI4+WgbQorWJIVA=
Subject key identifier: 55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CB8CAD8652AE321C732F01A3C453F29C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Mar 2026 12:20:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 109.205.196.0/24
IP: 185.75.178.0/24
IP: 185.234.103.0/24
IP: 2a14:ea80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:ca:d8:65:2a:e3:21:c7:32:f0:1a:3c:45:3f:29:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 4 12:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:05:36:60:ae:26:1f:37:d5:04:79:18:21:
e0:20:12:68:14:a4:41:6b:57:bd:b1:39:66:e3:ff:
83:c3:0e:e7:a7:b9:2d:14:10:3e:89:5b:9b:51:06:
02:6e:93:23:cf:05:ed:7e:cb:84:b0:8e:51:12:c1:
de:97:a4:67:ee:df:3b:67:81:93:45:2f:8c:89:af:
a4:31:c6:bc:17:6b:52:12:8b:02:67:95:cb:ce:2e:
7b:90:1c:ad:a7:48:70:dc:46:a0:85:c0:e2:4d:92:
31:34:b8:71:5f:c2:aa:8b:5d:c1:43:92:cc:f0:31:
f4:e1:33:32:28:c7:60:c9:a1:cd:db:1e:d6:25:ca:
c1:72:75:e7:bc:b3:e2:b2:34:c2:5f:50:3b:19:01:
d2:7c:93:cc:4f:d1:85:78:fb:02:16:07:c4:29:49:
69:89:91:a5:4c:c5:86:f0:03:3e:67:9f:7e:0f:2a:
7b:de:f9:33:f4:fe:77:fb:78:25:88:1d:06:dd:58:
d4:32:47:e3:21:67:e2:73:c8:a7:a7:ee:cb:13:be:
b9:93:36:21:4b:19:62:3c:ce:86:d0:b1:79:19:e9:
1f:87:1b:70:e5:bc:90:e2:22:b3:df:97:2a:9e:e5:
cf:67:c8:fa:cd:72:6b:7a:4b:d1:75:13:29:05:07:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.196.0/24
185.75.178.0/24
185.234.103.0/24
IPv6:
2a14:ea80::/32
Signature Algorithm: sha256WithRSAEncryption
6c:fd:56:dd:77:e7:59:9d:b2:34:ab:91:7c:a4:8c:fe:76:13:
84:e9:63:b1:f2:29:95:87:09:a7:4b:d1:bd:4a:97:8a:53:ff:
f1:56:a2:f5:77:10:f2:ea:ed:ac:15:41:10:a8:e0:c6:73:bf:
3d:bc:f7:cf:32:3e:b7:b1:3b:74:f2:53:79:bc:41:e2:9d:e7:
24:79:04:66:7e:7b:2f:31:f6:ff:a2:b6:e1:2f:f2:d3:fd:c0:
8c:8f:4a:94:af:cc:75:f3:64:18:f4:08:8d:b4:48:6c:b9:56:
e5:8a:c8:f7:bc:6d:b8:67:94:cd:ca:c5:77:8c:66:fb:fc:a0:
16:e1:bc:49:7e:29:9a:d9:3b:7d:58:29:b0:53:5a:84:f8:29:
d0:9a:d6:06:48:23:af:eb:2e:cd:b6:44:48:3e:b4:24:71:6a:
b5:4a:11:7a:a4:d8:95:3e:c0:23:50:ee:b3:64:95:c5:8d:19:
6f:8e:dc:23:29:6d:58:0a:b5:08:d2:7e:19:00:75:11:69:d1:
90:ac:be:84:0f:35:7b:c3:06:47:53:c0:28:d4:f5:fd:c4:1f:
cc:90:44:ac:6f:af:32:9b:e4:2e:89:38:14:6a:da:5c:c8:65:
7a:77:fb:81:f9:5b:2b:c9:ff:97:dd:59:b1:31:9e:6f:6f:bb:
b7:1e:fe:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:24:07 2026 by rpki-client