Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
File: B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer (raw, json)
Hash identifier: qvDFHAfiLM/ZE1Ky8R02gQ5L8ekI0FgC0NP6v/Y0B7o=
Subject key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3F13AD775B6A2EA644024F6CA9BF1F7B4B40BDA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 28 Feb 2026 15:57:00 +0000
Certificate not after: Sat 27 Feb 2027 16:02:00 +0000
Subordinate resources: IP: 2a05:dfc5::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:13:ad:77:5b:6a:2e:a6:44:02:4f:6c:a9:bf:1f:7b:4b:40:bd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Feb 28 15:57:00 2026 GMT
Not After : Feb 27 16:02:00 2027 GMT
Subject: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:87:9c:d9:52:54:98:ee:8d:da:6e:50:b7:
da:e4:3b:5d:00:6d:df:19:bb:23:2a:b2:5f:8a:30:
d6:a6:97:8c:33:17:2b:41:57:bf:92:87:fe:0d:fe:
2f:0a:fb:e4:a9:64:37:0d:06:52:ae:39:d4:06:a9:
9b:47:d6:ae:68:d1:98:f2:45:20:47:d4:f2:06:54:
c7:44:57:4d:d0:06:78:54:ed:4a:55:e1:f3:db:16:
b8:f3:b4:ee:3b:53:8c:2d:5b:d0:94:24:73:54:71:
6f:41:85:8e:09:9f:9c:49:2c:cf:88:1d:17:1a:7e:
72:78:67:fa:b4:97:6b:6b:20:90:78:d7:02:40:4b:
a3:12:00:f0:a2:a5:70:da:69:b6:63:18:f9:2a:b0:
31:19:23:cb:d2:d7:69:3b:7f:72:a8:fc:60:bb:c5:
2e:c7:73:0f:c4:e7:09:db:c9:29:41:5a:08:fc:ac:
21:51:67:fd:16:d9:14:a2:23:ed:72:69:46:c7:57:
96:f7:b7:3f:7f:53:3c:1d:65:0e:a4:23:2b:27:a9:
d3:d7:26:2d:49:ae:9c:de:4e:23:b2:23:2d:c7:fb:
cd:16:d1:03:50:d7:e1:68:80:b8:c7:01:72:54:7b:
12:2d:f9:8a:9f:db:5e:d2:8a:55:a3:29:20:47:f1:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc5::/32
Signature Algorithm: sha256WithRSAEncryption
b2:45:ab:a3:5f:95:c4:df:76:10:7f:96:86:ae:8a:79:be:03:
03:d8:7f:70:43:ae:2d:9d:f2:7c:02:31:1c:6f:7d:3a:ed:0a:
82:cb:ba:f8:9d:15:28:ec:02:6a:8e:80:d7:c3:2b:a0:32:a6:
b8:14:fa:a0:69:45:bb:7e:7e:ea:d1:21:48:ac:06:cc:a6:23:
b9:15:5a:49:0d:f1:dd:7d:b8:73:b5:9f:72:a6:e8:89:8d:4a:
f1:d6:20:6b:a5:d2:f6:aa:d7:d4:4d:a4:c5:7a:ad:eb:71:a8:
0d:68:b0:33:46:e3:ea:3a:3b:0b:fe:cc:53:04:3f:9b:9f:5e:
f1:0f:d3:6e:5e:17:87:e1:80:ff:a3:ea:88:da:90:6e:99:2f:
03:37:b4:a2:96:dc:d0:56:96:28:cb:df:28:78:18:e8:4e:25:
df:7a:8a:ef:7a:a8:63:f1:db:fc:7f:ca:f5:65:06:a9:07:a0:
df:77:a1:d2:3c:13:62:9c:17:a1:f2:6d:7b:31:02:c5:eb:23:
5f:f7:77:d2:34:ac:48:59:5d:8b:fc:47:b6:00:a0:43:a1:4e:
ce:01:7e:2d:be:20:ac:92:46:f3:9d:13:18:4d:05:bc:c0:d2:
4f:1b:dd:08:0b:8e:71:d7:ed:21:33:b4:f5:c2:be:f4:02:d5:
27:98:6e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:40:36 2026 by rpki-client