Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer
File: dg6-87rwwTdAhVCVOQhSzkQlzkw.cer (raw, json)
Hash identifier: DrG4sf4BmrIfoiu4SMOREbaCLq7xOhLxTPTj2FMFn3o=
Subject key identifier: 76:0E:BE:F3:BA:F0:C1:37:40:85:50:95:39:08:52:CE:44:25:CE:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7834C1EBE596496E8797D154A5AD2920
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205380
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:c1:eb:e5:96:49:6e:87:97:d1:54:a5:ad:29:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=760ebef3baf0c13740855095390852ce4425ce4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:fa:c4:ac:68:38:40:f3:7b:4d:4c:58:20:
9f:7a:7b:d4:04:70:09:8f:cc:8b:ef:17:f6:9a:d8:
47:5b:b4:3c:54:e7:29:3d:2e:5d:b6:b7:57:7a:c6:
a8:3f:08:a0:7a:3b:bc:47:71:56:1c:7d:5a:97:a1:
62:c6:78:e7:95:37:61:14:49:bc:1b:aa:ee:80:2c:
ff:f4:2f:9f:49:60:a4:ee:4d:bd:47:7a:f4:e7:e9:
6c:8d:8b:0a:7f:85:75:c2:37:b0:5c:de:9d:dd:cc:
c5:a5:51:53:cb:60:33:53:98:33:59:81:d0:cb:5e:
80:15:c7:09:dd:6f:63:2b:bc:e3:7a:fe:af:f3:f5:
5e:4f:f4:93:1b:6a:ff:33:e1:55:ba:6c:ed:f7:c6:
5f:06:68:ad:47:6c:da:74:d2:1c:6a:fa:00:42:61:
60:52:3e:d8:d7:62:1b:77:e5:ac:9c:5d:35:00:09:
8d:9f:13:22:96:1d:86:72:e8:b4:50:1a:e5:15:49:
90:db:82:51:dc:64:63:f3:3d:1d:b1:16:9b:2a:f4:
87:d5:33:29:34:e2:24:81:e3:3d:47:d2:fe:cb:db:
9f:8f:a8:25:b4:14:8a:4b:36:85:fa:e3:5b:47:3a:
e2:ad:10:4f:e1:17:14:c4:10:1a:ad:6f:92:02:1b:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0E:BE:F3:BA:F0:C1:37:40:85:50:95:39:08:52:CE:44:25:CE:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205380
Signature Algorithm: sha256WithRSAEncryption
39:94:60:1c:18:d9:08:f9:f7:c4:34:52:4c:f7:20:91:27:6a:
85:c2:b7:de:b2:62:a1:62:6b:40:41:f5:b3:9a:47:56:cd:e2:
9b:36:0a:12:a6:f0:be:67:68:d2:84:f9:8f:3e:f9:f8:71:e2:
be:fb:79:e2:0d:0e:93:8f:36:31:d4:d9:07:69:17:cd:cb:b0:
d0:c5:a4:0e:c6:39:ce:3b:f8:1d:5a:d2:31:70:24:7e:02:ac:
91:88:bc:3a:7e:45:38:0d:6f:42:fa:1c:17:38:06:2e:dc:25:
fa:6b:24:82:82:c1:43:96:6e:48:a1:9d:01:87:98:58:17:9c:
40:5b:6c:16:4d:4d:3e:8f:52:dd:33:3b:53:a5:e3:18:bd:9c:
cf:a1:81:ca:58:5c:70:b9:b2:34:f0:3b:e9:40:83:c6:fd:4b:
c4:99:9c:46:7f:40:77:ab:ee:8e:74:8e:3f:8c:9f:7f:c7:65:
ef:0c:d7:b4:b0:1a:16:75:95:42:08:e3:2f:fd:78:13:b9:e3:
42:e0:ab:19:a5:6f:62:47:6d:03:52:ea:1b:e7:38:a1:a8:94:
e4:7b:f8:ce:74:70:68:1a:c6:54:e0:0b:18:93:cf:b5:f9:ad:
66:20:a4:e1:80:6d:f1:2a:81:c7:f1:40:7d:83:bf:05:bd:18:
e5:70:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:10:26 2026 by rpki-client