Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
File: Vyq9haWJkatxoX_XVB-43pb1Wn0.cer (raw, json)
Hash identifier: QvAO5/6hLqwV5aubrani2USIzwbpVpJy1zcKhY5wfqY=
Subject key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ECC657A62C9E5A1AB219EE50B2E516
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42760
IP: 46.227.224.0/21
IP: 77.74.0.0/21
IP: 185.74.28.0/22
IP: 193.246.101.0/24
IP: 193.246.120.0/24
IP: 2a02:cd8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:c6:57:a6:2c:9e:5a:1a:b2:19:ee:50:b2:e5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:11:4f:13:7e:21:b0:b6:e1:25:75:e3:15:
76:da:68:63:29:26:2e:43:d6:43:11:7a:ff:90:e3:
16:96:24:c5:ef:8a:6b:77:5e:34:8e:d7:d1:8b:c1:
cc:1e:fa:0f:b2:c2:3e:ca:89:59:31:90:6c:e8:f0:
a8:34:0d:2d:72:26:6e:2b:e8:35:e4:96:45:56:6b:
71:97:09:5c:e5:88:7c:41:1c:48:0a:fc:96:03:bb:
e6:db:f7:25:b7:85:97:e2:34:90:58:c7:27:0d:bd:
c5:c5:4c:bb:df:e5:22:62:fe:cf:dd:aa:ff:f9:dc:
5b:94:40:b5:b0:f5:3d:80:ba:66:82:2c:18:93:10:
90:43:00:7f:84:2b:03:76:f2:3f:fb:9e:0f:df:ce:
c4:36:db:44:d7:c0:e9:06:e0:ef:29:32:18:ef:03:
ce:86:6a:f6:89:28:fe:e0:33:11:19:cd:44:db:f3:
17:3f:3f:70:5e:09:98:6d:ba:19:fd:4d:8e:ab:d4:
11:b1:65:e8:36:4a:5f:ae:f2:fe:f5:b4:c3:ce:34:
28:18:83:79:79:a0:5e:01:68:c9:eb:9c:7a:cf:dc:
ac:1c:ff:69:2a:2f:1d:1d:a9:dd:df:e1:65:b9:e9:
18:84:05:6b:16:57:5e:2a:2e:c4:d8:11:57:9f:4d:
42:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.224.0/21
77.74.0.0/21
185.74.28.0/22
193.246.101.0/24
193.246.120.0/24
IPv6:
2a02:cd8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42760
Signature Algorithm: sha256WithRSAEncryption
a0:15:f7:8c:08:19:f6:e9:07:c8:d1:06:bf:93:44:05:43:37:
a0:b3:27:2d:ed:f4:fe:be:16:a7:9b:7c:d9:fe:b5:a3:36:38:
13:f6:8d:a3:29:99:11:c7:55:ef:7e:16:54:7c:9c:d4:40:27:
90:ec:c3:33:73:65:1c:1e:a7:62:d0:33:d1:4e:bd:46:e8:6d:
fe:d1:e7:d9:cf:31:fe:45:11:4d:1d:df:29:4e:16:74:23:9e:
f1:74:ce:fe:f7:4f:87:82:d2:40:ca:6c:ef:a4:51:65:96:e9:
21:5f:98:84:14:e2:4d:db:46:1a:b3:7a:04:09:24:8c:a8:82:
a0:6b:f5:f6:86:ad:68:91:b3:71:37:cf:fd:93:b4:18:6a:7b:
9e:f1:45:ed:35:c8:ac:27:8d:46:dd:7b:d9:c2:db:a1:b2:51:
d3:c3:bd:69:33:a6:aa:a0:af:07:0a:fb:ff:aa:02:fc:2d:8f:
84:9d:e4:f5:36:ac:72:88:92:89:fe:95:36:ca:0d:a5:68:55:
d9:c6:80:a2:99:46:ef:06:4a:a7:dc:7c:8b:ba:0f:43:ce:6a:
aa:7b:39:5e:a9:f0:ff:66:62:b3:0f:fc:1c:16:b0:05:fd:be:
42:0d:69:7d:df:1b:8d:4e:73:29:ac:2f:bb:45:61:ac:2e:59:
1a:41:ef:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:23 2026 by rpki-client