Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
File: vLKFmOvl92DrY-BRpVABF12cY_8.cer (raw, json)
Hash identifier: 4Zac0EBsG/e94PqFoIYVPEyBWq0K5vsYGkD4chNgErE=
Subject key identifier: BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77593ECE4E16523F6757DAAC50C60C7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:18:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 84.22.128.0/22
IP: 95.130.132.0/22
IP: 185.43.196.0/23
IP: 2a04:8a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:3e:ce:4e:16:52:3f:67:57:da:ac:50:c6:0c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:2d:d8:af:f8:e5:92:76:06:c6:cc:e2:1e:
8f:6b:a2:61:8c:ef:0b:e8:32:b7:c0:6a:18:6b:7c:
9c:37:b2:5a:e2:b7:27:b0:30:e3:a9:04:d9:4c:1c:
25:fa:c5:d8:02:45:37:70:a9:fa:5a:49:eb:ee:bd:
c6:74:a6:9d:ed:a0:38:e8:8e:aa:2a:73:1a:78:8a:
d4:6e:6b:b5:85:52:f4:20:e0:0a:07:9f:dc:73:8a:
09:f6:a0:8f:f4:56:56:2d:43:f2:cf:1f:cd:df:ac:
0c:0e:46:54:7e:9c:33:08:ee:91:49:4e:f2:41:3c:
2f:11:4a:90:6f:70:4f:e2:41:a9:3e:f3:cb:37:f9:
e8:b8:e6:3b:aa:26:8a:7f:20:24:c4:cc:60:1a:10:
1b:a9:84:98:31:e0:6c:2f:41:43:41:ae:47:e4:57:
2b:1e:2d:19:ce:b2:21:de:fa:69:22:d5:0c:d2:e0:
b6:98:3a:94:8e:36:c0:d3:d3:55:f2:48:92:d4:e1:
fb:d7:0b:ba:8e:1f:53:ad:fa:0d:fa:6a:e2:1c:91:
86:03:14:5f:c2:02:48:d2:56:e3:1f:37:7e:45:f6:
a2:f6:06:0e:3b:cf:78:f0:79:64:43:b1:86:40:2e:
63:61:96:16:01:22:30:1d:fe:0e:f8:fb:00:24:6a:
94:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.128.0/22
95.130.132.0/22
185.43.196.0/23
IPv6:
2a04:8a00::/29
Signature Algorithm: sha256WithRSAEncryption
50:0c:8b:3c:b1:37:81:d9:e4:da:b7:31:ee:34:81:a0:17:6e:
b8:0e:3c:f4:d3:4f:5d:cc:be:ee:6c:d5:4b:54:30:a5:1d:77:
68:d2:36:8a:bc:99:0f:ae:3a:b3:75:5b:e5:5f:2f:31:ac:40:
d2:49:64:1f:2b:19:1a:3b:55:f6:b1:7e:17:b3:ac:2c:5c:50:
d2:4e:1d:0e:ba:67:50:a4:e3:64:49:1d:a6:0a:53:05:d8:73:
92:be:cd:c9:d2:0a:92:30:30:28:8c:62:6d:16:c7:1e:23:26:
d1:a2:98:d4:2a:51:1a:83:6c:8c:f1:fa:75:1a:d0:17:c3:72:
24:0d:5f:75:7d:c8:85:1e:b4:7a:4f:f7:d1:28:b0:aa:49:bf:
8c:b4:fe:59:66:7e:d8:03:ed:39:03:7e:72:8e:47:3b:5c:7c:
fb:4a:0e:50:56:4d:31:c8:0a:a3:93:89:fe:51:ab:d9:6f:a6:
de:9d:cf:bd:3a:e1:bd:01:f0:2f:e5:c5:69:aa:41:10:4e:7b:
00:6f:c6:4b:e6:f4:96:da:0a:f2:9a:13:4c:96:4a:35:43:06:
c5:be:b6:4a:4c:5b:6a:83:a8:1d:b3:9c:4b:28:fc:f1:aa:48:
31:34:33:e4:21:85:fe:76:93:5c:07:68:d9:15:fb:08:8b:ac:
9d:41:65:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:39:30 2026 by rpki-client