Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.cer (raw, json)
Hash identifier: NEotir8J+13xUs83L2hJg+L3MVeYOpGkU2vfO7QgRkA=
Subject key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EFEE5C88768A91B44EE3F1B541DE41A79
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Jun 2026 13:08:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43171
IP: 46.175.224.0/20
IP: 91.221.172.0/23
IP: 91.222.100.0/22
IP: 185.59.108.0/22
IP: 2a02:6ae0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:e5:c8:87:68:a9:1b:44:ee:3f:1b:54:1d:e4:1a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 25 13:08:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:d1:52:4f:3a:ff:10:b7:a5:e9:e1:9b:8b:
44:13:aa:7e:70:ad:bb:3a:64:36:d0:4d:b5:9e:3f:
07:86:36:3b:8e:c9:93:23:00:24:c0:7a:f1:eb:0f:
7a:8c:71:f2:11:26:a8:e0:b4:96:c2:6f:8f:d6:23:
54:63:45:db:e7:c1:cc:43:ee:cf:15:cb:c8:90:83:
77:46:0e:bb:fc:ef:e8:4c:91:3a:3a:34:ad:45:cd:
67:49:d3:78:17:23:65:f1:e9:df:95:71:74:1b:16:
a6:85:96:7a:24:00:25:41:29:8f:1e:a6:b3:ed:7f:
10:59:59:b5:25:e0:43:46:3f:9d:8d:de:4d:71:95:
01:f0:1a:6a:7b:94:eb:32:25:a2:ab:73:27:bc:8f:
e4:65:f1:14:a3:96:92:ae:31:1d:a5:ad:04:28:9c:
5a:89:05:7a:d4:23:cd:c7:4f:77:99:65:73:e8:56:
dd:59:ee:c0:b0:6d:ab:04:ea:50:ff:5c:ff:d1:3a:
91:20:61:3f:f9:1a:64:72:99:35:a5:cf:77:d9:05:
fe:67:96:c9:da:ad:27:04:fa:ae:5f:ac:c1:d8:f6:
c2:3c:97:4a:da:01:44:4c:17:04:6a:b0:8e:89:f3:
b5:6a:25:52:21:58:84:62:3a:70:c2:0f:40:7c:fb:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.224.0/20
91.221.172.0/23
91.222.100.0/22
185.59.108.0/22
IPv6:
2a02:6ae0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43171
Signature Algorithm: sha256WithRSAEncryption
aa:44:8c:b0:b2:9b:43:ff:5c:0d:41:91:94:0e:41:5a:18:53:
a0:94:6d:01:02:0b:e1:69:e0:97:8c:3c:77:7f:cc:b7:2b:a6:
a5:3f:ee:90:e8:b1:71:5a:7c:1c:29:09:3d:80:51:41:8c:da:
ca:3c:31:42:26:f4:38:9f:9b:0d:23:78:3f:bf:b8:48:f0:af:
cf:15:7f:53:6a:f0:42:a3:5f:f7:78:19:90:f9:70:58:ca:a9:
fa:65:c6:5e:88:45:b2:5c:3c:a4:74:3a:d1:65:bb:fe:e1:8e:
db:3a:09:27:7c:28:38:25:d9:03:72:08:53:2e:9d:f9:b7:10:
eb:b5:0e:1d:06:d0:4c:d2:7c:f2:66:67:a4:6d:f2:1c:34:40:
59:e4:30:98:0c:c1:6f:4c:d4:c4:d6:1c:fe:de:09:bb:ae:f6:
c8:e1:85:92:b8:19:72:ea:1a:11:96:79:fa:81:9a:43:c1:2c:
01:57:5e:28:98:c2:42:c7:65:2f:59:55:ce:56:3f:ec:b8:58:
06:6e:17:84:5b:bf:f8:dc:16:aa:7b:e0:45:25:59:95:9b:89:
f4:06:96:3d:94:62:47:01:97:d3:b8:68:b7:38:61:09:78:0a:
07:9b:2e:e0:c9:19:e6:a2:2c:51:c6:57:98:41:9c:18:a8:f9:
3c:b8:23:a0
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAZ7+5ciHaKkbRO4/G1Qd5Bp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjI1MTMwODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTE3NWMwODM1MjcxODE4YmJkMzhkNmRlZDdmOTVhYmJjNTU3NDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6nRUk86/xC3penhm4tEE6p+cK27
OmQ20E21nj8HhjY7jsmTIwAkwHrx6w96jHHyESao4LSWwm+P1iNUY0Xb58HMQ+7P
FcvIkIN3Rg67/O/oTJE6OjStRc1nSdN4FyNl8enflXF0GxamhZZ6JAAlQSmPHqaz
7X8QWVm1JeBDRj+djd5NcZUB8Bpqe5TrMiWiq3MnvI/kZfEUo5aSrjEdpa0EKJxa
iQV61CPNx093mWVz6FbdWe7AsG2rBOpQ/1z/0TqRIGE/+Rpkcpk1pc932QX+Z5bJ
2q0nBPquX6zB2PbCPJdK2gFETBcEarCOifO1aiVSIViEYjpwwg9AfPt/HwIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFHEXXAg1JxgYu9ONbe1/lau8VXRPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzlkNTQ0
YS0yMjlkLTQ3NmEtYjAyZi0xOTQyZTA4OWYwYjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvOWQ1NDRh
LTIyOWQtNDc2YS1iMDJmLTE5NDJlMDg5ZjBiMC8xL2NSZGNDRFVuR0JpNzA0MXQ3
WC1WcTd4VmRFOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQELq/gAwQBW92sAwQCW95kAwQCuTtsMA0EAgAC
MAcDBQAqAmrgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCoozANBgkqhkiG9w0B
AQsFAAOCAQEAqkSMsLKbQ/9cDUGRlA5BWhhToJRtAQIL4Wngl4w8d3/MtyumpT/u
kOixcVp8HCkJPYBRQYzayjwxQib0OJ+bDSN4P7+4SPCvzxV/U2rwQqNf93gZkPlw
WMqp+mXGXohFslw8pHQ60WW7/uGO2zoJJ3woOCXZA3IIUy6d+bcQ67UOHQbQTNJ8
8mZnpG3yHDRAWeQwmAzBb0zUxNYc/t4Ju672yOGFkrgZcuoaEZZ5+oGaQ8EsAVde
KJjCQsdlL1lVzlY/7LhYBm4XhFu/+NwWqnvgRSVZlZuJ9AaWPZRiRwGX07hotzhh
CXgKB5su4MkZ5qIsUcZXmEGcGKj5PLgjoA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:20:26 2026 by rpki-client