Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vylib6kTE9VuTXZFVy_1gGH9T4w.cer
File: Vylib6kTE9VuTXZFVy_1gGH9T4w.cer (raw, json)
Hash identifier: sO5i9SPfb6gwHJGq8wa733W2TNge9CcKg5RUe9jg3v4=
Subject key identifier: 57:29:62:6F:A9:13:13:D5:6E:4D:76:45:57:2F:F5:80:61:FD:4F:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E37D8F4401B1FDC2DBBC6B10564A212
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:19:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:67c:1978::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:d8:f4:40:1b:1f:dc:2d:bb:c6:b1:05:64:a2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5729626fa91313d56e4d7645572ff58061fd4f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:0f:fa:2f:1f:8b:7d:69:12:b4:e3:01:64:
81:a5:7f:c2:a4:ca:2e:e3:43:ad:31:2e:54:3e:51:
26:7b:bd:e3:08:0e:f4:d7:31:1e:67:31:de:0a:70:
38:de:8d:01:73:1b:19:fe:af:38:2d:49:0f:05:37:
84:b6:c2:68:bb:43:f0:24:20:39:6b:29:11:f1:fa:
2b:40:9a:16:f9:c7:2e:10:45:fd:47:38:66:96:0d:
1b:7f:25:b4:c9:50:62:f8:b7:12:0e:aa:d4:8f:0c:
ae:67:08:4b:c6:e2:c8:6b:e4:34:f7:63:be:de:ba:
e3:d0:6f:94:91:a9:11:65:48:0a:b8:e1:a3:c7:4e:
ed:dd:9c:ed:19:7d:73:f8:1d:f0:3e:7f:ff:34:9d:
5a:36:8e:d0:0d:9c:04:77:2c:db:42:d1:52:4a:4f:
30:13:17:f4:3b:67:d1:16:59:fd:00:74:bf:5c:4d:
48:4e:8b:00:a3:30:d0:cc:87:c4:d5:1d:15:27:53:
92:40:d1:68:51:e5:a7:39:0c:80:21:cf:80:32:2e:
13:6b:bf:ce:78:75:cf:76:76:aa:dd:64:74:4c:c0:
b9:ca:bb:f9:e4:1b:b9:d0:74:e5:44:fe:85:3f:70:
8b:c5:55:8b:d5:b8:f8:dc:42:b0:87:9e:86:b3:57:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:29:62:6F:A9:13:13:D5:6E:4D:76:45:57:2F:F5:80:61:FD:4F:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1978::/48
Signature Algorithm: sha256WithRSAEncryption
46:ed:9d:10:d2:87:b4:cc:e2:fa:30:b4:1a:8a:f0:35:d3:a0:
36:ea:d0:15:e5:57:27:47:65:7e:1e:0c:51:68:4d:78:76:c2:
a3:2c:57:99:61:e0:1b:64:dc:1c:14:a3:72:9f:1e:b7:0c:a2:
22:99:d7:b1:95:db:02:a8:d7:b2:f0:1b:d3:fe:1b:69:56:5e:
5a:ed:dc:b5:9c:9f:e3:57:c6:de:42:c7:ea:bd:cf:e4:04:56:
e1:8f:6c:f5:92:1b:b2:a3:69:ad:e0:27:81:96:64:c0:41:16:
a2:5b:e1:c3:3d:05:9d:fd:c6:3c:35:16:ed:31:d5:82:b6:5f:
47:2e:a2:e2:5f:ad:72:4f:df:f0:3b:e3:f2:17:d6:2d:2e:9e:
de:2d:bf:10:a2:d1:56:0a:9f:d7:ed:45:98:ef:8d:6e:45:0c:
c7:dd:f8:3b:75:1a:d6:7d:78:b7:91:ea:39:dc:71:70:d9:05:
ba:5c:2d:86:97:d3:8a:28:76:a4:aa:da:81:cd:4f:cb:53:cf:
a5:c5:40:4a:1f:fc:0b:be:e1:03:e0:ab:05:90:7d:d1:65:e6:
be:d6:dd:09:a8:f4:c4:1a:97:cb:77:7f:a0:4a:9d:33:2f:c3:
2f:df:94:74:15:61:fa:4d:a7:45:94:0a:5b:e0:ae:0d:08:c9:
85:f1:c8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:47 2026 by rpki-client