Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer
File: dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer (raw, json)
Hash identifier: Tdw2w3FDNbdRzpB9+E7LuHxBhyMA/+L30YspY+J9JT8=
Subject key identifier: 76:6D:18:B7:A5:A8:37:E6:71:4F:BA:B2:52:40:0A:3B:EA:BC:22:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CFABF4C7E8A787BC052F9A3346A9421EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Mar 2026 07:42:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200572
IP: 131.222.245.0/24
IP: 2a12:65c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:bf:4c:7e:8a:78:7b:c0:52:f9:a3:34:6a:94:21:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 17 07:42:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=766d18b7a5a837e6714fbab252400a3beabc220a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:c5:97:43:78:87:1c:db:e5:f3:9e:e0:17:
20:1b:b9:20:44:f9:2d:d9:b8:92:ce:45:ca:8e:71:
8c:ba:01:ca:37:3a:2e:0d:0c:9d:44:b4:32:bd:ae:
39:9d:43:ae:9c:d2:97:be:59:4f:35:ef:ff:e3:40:
b6:be:9b:69:d8:6b:95:81:53:90:d1:da:48:4e:8e:
50:20:40:c7:11:fa:e7:bb:02:a0:48:b5:3b:55:b1:
c6:f4:52:16:4d:db:2f:d6:40:6e:2f:d4:cc:d4:bf:
0b:9b:a7:33:c2:11:fb:d0:e8:52:bb:43:03:7d:80:
99:65:1c:ed:c3:40:d0:41:9b:6f:97:5b:c8:f1:bb:
bb:a4:d0:48:34:3e:28:6a:c8:48:7e:ff:d5:e8:37:
47:d0:b9:5e:4e:2f:3f:d8:3c:ac:4a:fd:de:cb:64:
98:5a:64:a3:6a:18:06:8c:d9:34:b2:61:43:b2:f3:
1a:df:db:88:7d:22:c0:9f:f6:ec:be:c6:e2:d9:23:
d4:82:b7:b7:bd:d4:7e:06:16:b0:6b:2c:10:2a:3c:
a0:cf:be:55:1d:55:c7:fe:fb:1e:94:b1:85:95:34:
9e:b0:8c:10:04:6f:5a:71:19:e6:c2:e7:91:8e:ae:
9d:ad:21:70:87:75:cc:91:94:e0:7c:55:95:b2:01:
97:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6D:18:B7:A5:A8:37:E6:71:4F:BA:B2:52:40:0A:3B:EA:BC:22:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.245.0/24
IPv6:
2a12:65c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200572
Signature Algorithm: sha256WithRSAEncryption
7c:21:b4:03:e9:5b:84:c7:1d:a8:ce:42:a7:92:d0:b9:3e:8b:
d7:96:f6:0d:8f:98:2a:11:c1:2c:f8:4f:6b:db:85:71:04:13:
dc:3c:e9:31:51:13:1e:df:fe:53:5a:1a:83:06:a9:d9:36:c3:
30:e2:b1:db:9a:b1:c9:67:f0:e3:ba:0d:91:7a:6a:87:21:80:
26:41:c8:4e:d3:7e:48:3f:3d:d0:12:4e:6b:1a:a9:54:9b:cc:
91:02:cf:2e:4e:02:26:06:b7:f1:d2:38:62:26:f6:75:b3:4d:
a1:85:2d:b4:d7:27:9b:40:41:56:7e:a3:9a:fc:5f:60:ab:e4:
aa:07:f8:2b:5e:40:c1:9e:b8:16:a0:41:93:da:66:16:e1:9c:
cd:8b:50:ba:52:75:1b:94:0f:06:a4:b4:d0:74:58:2f:b6:c6:
0a:b0:dc:74:12:d8:b4:6d:cc:b3:af:fc:e5:6e:42:bd:b2:be:
13:ac:9e:87:26:db:b1:5a:e2:64:dd:cc:9e:7a:db:b6:31:a6:
ef:6e:7f:da:b4:34:23:36:df:af:22:f3:e1:a3:7b:e9:86:8a:
b1:a5:2e:0c:c0:6c:62:b3:07:aa:be:f3:cd:94:00:15:93:80:
de:0f:9f:81:46:0d:7a:2b:72:aa:e6:1f:8a:e6:11:84:fb:1a:
3d:17:27:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:07 2026 by rpki-client