Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
File: dPYRYnGtLREZYKLZYaqcFi-VgKY.cer (raw, json)
Hash identifier: BsHl+nbN3HwawpvKc86BkCZtwx4+m8AldQyEtQMz5P0=
Subject key identifier: 74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F1570A796C9F0FBFB1E1023C57392AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:21:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212563
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:70:a7:96:c9:f0:fb:fb:1e:10:23:c5:73:92:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:21:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:c2:0a:b3:0b:29:6b:21:f8:79:3c:a6:44:
8a:fb:c8:6a:b8:90:5e:9e:34:2e:6b:11:28:29:27:
c1:8b:ca:09:f6:ca:ba:c7:5a:ae:e6:fc:e8:23:aa:
92:54:c8:35:da:de:df:88:5b:b1:37:f4:5f:db:27:
37:09:2e:f4:a4:a5:92:8b:bf:6c:c8:4b:f3:74:0f:
f9:cf:37:c0:2f:bd:07:90:29:62:66:82:ec:15:0d:
fa:45:50:9a:d8:38:1f:b2:30:e6:5a:c6:e8:df:b9:
3b:8b:71:e1:e4:1f:e3:29:08:58:a1:b5:9f:40:f0:
68:84:b4:13:79:40:34:bd:e1:82:a8:2e:9c:19:fd:
f0:6b:2d:f0:9f:34:58:53:1a:1f:26:be:4c:f3:51:
c2:99:da:87:e1:ea:36:22:b1:57:00:06:a2:5b:a0:
89:93:b3:9e:18:bf:c7:47:de:bf:59:98:8e:90:d6:
79:c6:8f:11:be:9f:38:ca:d3:6b:ed:9d:1e:0e:47:
08:cd:16:31:78:9a:d6:f2:df:e8:b5:46:c4:61:fa:
c4:55:2c:0f:e3:b9:d4:b8:80:52:90:89:35:5c:72:
da:db:3a:e1:2c:e6:24:26:78:d0:d4:60:1a:27:13:
ee:46:2e:4c:d3:85:1f:0c:1f:27:d2:67:09:24:42:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212563
Signature Algorithm: sha256WithRSAEncryption
4c:ff:45:6c:45:db:65:11:8b:39:d0:96:f2:26:ce:12:0b:83:
f0:3a:a6:90:1b:30:94:0e:8f:e3:4e:eb:32:a7:dd:e9:70:ac:
09:42:3a:bc:ad:a4:53:ef:33:67:8d:26:95:4f:25:e6:0f:ff:
c0:7a:a8:b8:47:3c:d4:7a:32:e3:05:fb:61:52:fe:f4:f7:2a:
a4:6e:31:3b:ac:9d:0f:d1:5f:4b:db:29:9f:28:10:a7:34:84:
5f:f4:48:40:e3:1b:6c:a7:6b:e3:cf:12:26:34:f3:42:aa:05:
23:0d:ed:07:64:d0:2e:cc:4d:a6:83:08:9c:45:cf:c9:41:d4:
c9:e4:e5:bc:e7:ee:10:74:d4:f6:98:fb:e9:02:93:81:79:72:
a9:3a:33:02:fd:cd:4a:4b:de:90:21:8d:84:7d:b7:be:9f:b5:
90:d5:6a:47:a0:31:ee:71:f4:fe:89:fc:aa:e7:50:83:a9:de:
5d:f6:0d:9d:d7:72:40:0a:f8:60:4c:fd:4c:4f:0a:c7:bd:b6:
2d:f9:58:4f:45:0a:e0:af:87:6d:55:12:88:b4:bb:01:cf:bc:
64:fa:6c:45:ab:5a:55:80:94:50:6b:f1:7c:68:28:bd:81:41:
75:27:4d:45:d8:09:64:6c:3d:90:42:fa:c8:9e:b3:da:c2:c1:
b4:e0:be:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:53:40 2026 by rpki-client