Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
File: dF5pC2XdK2La_T6uUwne-ky1x8Q.cer (raw, json)
Hash identifier: bdoFPl9c5/ob2h/hfXbB2Ol4jMQT75IEbrU5LATKYoU=
Subject key identifier: 74:5E:69:0B:65:DD:2B:62:DA:FD:3E:AE:53:09:DE:FA:4C:B5:C7:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA1BAAB544A90059E42CAA6E9FCAD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 161.3.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:1b:aa:b5:44:a9:00:59:e4:2c:aa:6e:9f:ca:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=745e690b65dd2b62dafd3eae5309defa4cb5c7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:60:2e:f0:0a:fa:2d:71:31:6d:05:9c:85:a8:
48:3f:6f:cb:77:6e:ac:af:02:a9:8f:d1:43:1c:f0:
7a:45:27:d4:3b:ce:5b:8e:50:cc:89:67:33:00:98:
50:ca:a6:16:a5:af:5d:a9:b6:20:73:f2:91:e5:91:
47:b1:41:d1:f0:68:ea:a3:6a:06:2a:b0:a5:8e:87:
dc:1a:ad:aa:73:21:10:91:be:37:e3:d1:da:9d:6b:
59:82:26:ab:f8:05:96:eb:a7:31:5e:2f:b4:64:0b:
d3:6d:b5:05:70:5d:88:e9:5a:f4:d9:0d:41:8b:18:
0d:39:08:2a:e3:c6:02:df:6b:23:89:10:5d:25:5c:
25:5e:a0:f4:89:0c:b0:ec:12:45:d8:d3:39:1e:70:
cb:fa:d5:09:62:c8:3b:f2:b7:21:89:5b:a5:df:3a:
3e:57:1f:58:0f:ed:35:54:c5:ef:4b:97:39:44:48:
10:ec:e6:8f:b8:ff:bc:51:19:7e:33:76:ce:bf:d7:
33:3a:66:fe:61:3c:64:db:90:26:4c:3b:84:9e:d7:
28:95:a7:a8:6c:cc:b2:b9:22:d4:98:b4:28:5b:66:
65:cf:01:da:5f:50:d7:b6:29:bd:9b:ec:21:9b:95:
95:bf:86:0a:ad:37:39:5e:ee:92:6c:7c:45:3d:bd:
3d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:69:0B:65:DD:2B:62:DA:FD:3E:AE:53:09:DE:FA:4C:B5:C7:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:1e:48:87:3c:93:40:34:6d:58:16:cc:7f:c5:73:f1:c4:a7:
fa:d7:ea:80:01:cd:b9:d4:a4:c8:b7:c1:9d:95:26:8e:c5:cc:
f2:a2:76:2b:cd:6a:73:19:e8:3d:3d:39:59:cb:ef:56:8e:08:
0e:ca:fe:ec:da:a0:ad:a8:32:db:da:f4:30:bb:7d:e8:c4:5e:
38:88:e9:d0:53:b5:cb:f5:db:3b:dd:d0:f4:bb:3e:13:9f:4e:
f6:53:df:91:df:e1:3d:46:8c:0f:95:3d:17:85:74:d0:2e:c6:
d7:54:f8:17:84:de:2f:30:f0:37:89:04:69:aa:f4:ce:e1:2a:
72:53:2d:36:0e:19:d1:62:45:15:8d:a2:a4:e6:54:65:e6:79:
6a:5e:02:15:60:0c:42:ac:74:71:5c:4c:8e:8d:9b:51:84:0b:
e2:99:cf:38:fe:b3:92:23:cb:39:04:c0:f2:e0:a3:0f:ea:a6:
f3:7c:54:1b:f0:a7:33:a0:23:04:27:bf:f3:38:a8:76:82:6d:
01:ab:73:2f:6c:cc:bb:52:65:d2:b8:4a:de:af:84:43:63:83:
88:8f:f0:16:41:ed:82:ff:f1:c6:13:c4:66:a5:03:a6:1e:1e:
2a:7a:c9:e3:1d:59:a7:d6:7e:0b:07:12:c7:f1:6a:90:f9:5f:
e8:22:61:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:44 2026 by rpki-client