Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
File: vL4wndalMhnOvVZb4fI0uT5WLjk.cer (raw, json)
Hash identifier: 3HAwvLYbYV0ao4ZX1+ipXMMmKJLvgJJ2VzvmcWXjK3c=
Subject key identifier: BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C94640E32AD9E51747A0B85A958A70F38
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Feb 2026 10:41:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201371
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:64:0e:32:ad:9e:51:74:7a:0b:85:a9:58:a7:0f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 25 10:41:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcbe309dd6a53219cebd565be1f234b93e562e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:df:ea:ae:1c:d0:e1:13:4d:cf:be:06:79:
be:4a:1a:6c:d5:cf:cc:e8:46:fd:db:ae:c8:92:dc:
27:2c:5d:85:72:18:55:91:e5:35:4d:99:3e:fc:d0:
80:b9:2d:4a:e6:3a:77:e0:42:e0:59:2b:3a:a2:dd:
4d:0a:33:16:8e:eb:a6:64:b1:10:34:58:86:d5:de:
1c:bc:72:22:cc:c5:81:57:78:9b:49:94:c4:3b:1b:
24:81:e3:4f:6f:ff:c4:69:3b:27:44:85:fd:ec:b0:
f2:1d:03:e9:4d:51:d4:ba:c3:a2:5c:02:d3:b3:2a:
2e:3e:bf:eb:47:3b:fb:e6:47:9a:09:0b:ce:08:ef:
0f:df:54:a6:e3:b8:f4:d2:c9:38:d1:28:77:ea:c0:
15:e2:8e:6f:2b:21:49:99:73:18:4a:3f:69:37:37:
96:94:ca:7c:2f:db:2e:48:75:6c:c7:4d:30:ff:1f:
dd:06:b1:a0:54:90:81:e7:25:03:c8:f1:f9:4d:ae:
50:ea:79:85:9a:99:58:80:b8:af:20:8c:a8:ee:f6:
c8:ad:11:43:d4:cc:8f:05:cf:1b:00:1c:37:e2:9f:
03:f4:eb:54:5f:e5:b9:4f:c8:27:6d:81:16:a2:ec:
96:85:22:cf:44:62:c4:33:98:38:ed:c1:f9:e3:d6:
ab:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201371
Signature Algorithm: sha256WithRSAEncryption
58:c7:7b:c9:82:3d:cd:34:7e:8b:61:fc:9a:aa:3e:d4:9f:df:
4b:2e:cf:4a:57:d1:2f:a7:81:2d:85:52:7f:f5:b6:90:86:58:
d9:3e:e7:5e:04:ab:19:41:e9:7b:40:e1:57:cb:67:e4:78:1c:
29:7f:0e:4f:4e:0c:0e:dc:70:9d:6c:5f:e6:6f:6d:13:c0:e8:
2a:c2:03:d0:9a:35:a1:22:65:95:ca:aa:6d:02:25:50:3c:53:
5a:17:c9:81:9b:15:23:b1:e3:ac:6d:59:77:16:43:1f:54:f0:
69:94:35:8c:3f:8f:9f:99:a9:a4:fc:20:b2:8d:92:25:32:b4:
6d:23:5f:07:bf:7f:a6:7f:6a:51:d8:9f:29:df:29:4d:3d:cf:
de:fe:56:78:f8:b5:84:0f:bd:d9:6d:69:10:1c:cb:2d:e7:83:
1f:49:6e:fa:48:bd:f1:ae:26:26:a1:88:3e:be:7d:11:05:f7:
bd:b1:d2:27:ae:e4:5c:af:1c:89:c9:3f:d2:4d:5e:5c:a0:d2:
f8:4a:e3:84:14:77:d3:3b:56:b2:44:c4:4a:13:61:be:9a:37:
9e:4b:59:64:ef:33:4a:c9:b3:43:9e:ba:75:bd:88:25:ce:2c:
bd:58:8e:1e:b5:00:c9:fc:de:8a:76:72:aa:eb:5d:8f:4f:a4:
cd:b7:e9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:18 2026 by rpki-client