Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
File: VyWt0r_z5miuGFVL7r8xojpp3aU.cer (raw, json)
Hash identifier: yS0hYjjTtWZneXCbzkHKQRFmKJthpU18odZ1rDD+Aqw=
Subject key identifier: 57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79EBC24929FABEB423119A640ED92D15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:17:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 12823
IP: 193.53.106.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:eb:c2:49:29:fa:be:b4:23:11:9a:64:0e:d9:2d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5725add2bff3e668ae18554beebf31a23a69dda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b9:4e:51:87:b2:1c:7f:9f:01:35:fc:ae:15:
4a:ec:1d:bf:ee:37:2f:45:ce:6c:6b:cc:3a:6f:0b:
eb:84:5e:a5:23:78:ac:99:41:d7:5a:3a:81:8f:ca:
1c:33:c3:5f:e7:e9:76:86:d0:4a:86:28:33:4f:74:
17:7a:12:23:33:fa:7a:d4:1a:1d:22:14:39:e0:95:
4b:24:b2:38:24:1f:2d:37:61:66:44:9f:d2:67:b0:
6d:ee:0e:da:97:37:4f:d4:4f:ba:7c:a5:2f:8e:bc:
67:f5:b3:d5:63:dd:8f:c0:05:2e:06:eb:3a:85:23:
59:fa:2a:b6:3e:93:1a:1f:60:a9:15:a8:c4:ea:e0:
d1:d9:e6:dd:1f:ca:7b:67:dc:b8:b4:9a:1a:6c:52:
30:66:7e:34:11:97:71:4e:e3:3e:99:63:6e:25:1f:
08:54:07:e4:1a:4c:d1:a6:b1:33:aa:6c:d5:4d:da:
69:bd:e4:e0:c6:44:36:56:74:58:7e:70:99:c5:9c:
db:cf:f6:e4:fa:0d:d9:86:b0:e9:f2:9e:76:18:7c:
c2:51:df:3b:19:c4:2d:c9:d7:62:43:dd:71:00:78:
05:11:07:e1:82:17:1b:95:9e:e8:3c:cf:64:d5:db:
24:f4:b5:12:e6:ed:ce:df:16:49:ee:4c:80:5a:09:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.106.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12823
Signature Algorithm: sha256WithRSAEncryption
59:b6:3c:19:d8:3d:2f:ef:f2:a3:23:4f:65:9f:ce:1e:d0:1f:
a7:4c:e2:c5:55:2a:9e:d7:92:a6:7c:ab:eb:d7:f1:3d:8a:49:
db:e9:df:aa:66:7b:ac:22:4d:fb:ec:0c:15:41:a9:ad:99:7a:
65:38:26:15:a4:c4:a1:93:2e:5f:df:b3:3a:22:99:45:c9:45:
02:a7:ed:b4:2c:de:1f:9d:31:e4:81:90:0a:cd:5a:ff:6b:08:
75:8b:ee:50:66:fb:77:a1:b9:d2:59:9a:97:80:54:d8:60:c2:
b9:2b:1d:fa:88:52:88:a3:ad:9d:65:e6:ed:99:0b:4a:5e:ad:
5f:e5:5b:12:3e:a6:7b:68:a4:41:17:02:df:07:33:7f:7b:32:
6e:77:39:c9:21:cc:03:aa:d0:8c:d1:f7:86:61:a7:0c:4d:ae:
ef:ed:42:14:01:3e:6e:55:68:d5:2a:0d:f0:cd:61:27:21:a8:
e6:88:da:b2:c0:b2:dc:48:d4:1e:4f:94:78:99:51:2e:3c:22:
84:c5:93:2c:44:e6:d2:9d:16:a5:a0:8a:b1:b0:df:31:db:89:
1e:e4:17:59:88:5b:31:06:ff:a4:f1:57:85:76:79:e8:df:af:
5d:7b:fd:c3:53:6f:e3:04:aa:1d:d1:f5:4a:64:00:93:45:de:
7a:11:08:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:32:05 2026 by rpki-client