Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
File: v4F9yFUt82EP_EVEGz-BRk5Incg.cer (raw, json)
Hash identifier: Ez1bEdt/2oIsTZ6dHu9MAcb/Ms8maBhFt0kGPBpUzeU=
Subject key identifier: BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C1DD0B08FB38D24A658BEF3582573E114
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Feb 2026 10:05:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:67c:21e0::/48
Validation: Failed, certificate revoked on Tue 17 Feb 2026 09:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1d:d0:b0:8f:b3:8d:24:a6:58:be:f3:58:25:73:e1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 2 10:05:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf817dc8552df3610ffc45441b3f81464e489dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:70:08:cf:a6:ab:c3:f1:74:01:c0:1e:da:
69:bd:4a:57:27:60:b3:66:b1:53:26:09:c0:c9:50:
64:51:a5:dc:f7:63:07:20:0f:51:b7:39:ab:ac:22:
7a:9a:28:d2:e7:43:1a:ac:88:1e:b5:cc:c7:8a:fb:
b5:39:68:ac:dd:a2:43:84:db:c2:83:41:04:96:2f:
7f:e5:52:47:dd:ff:23:31:29:ef:9d:3f:02:69:f3:
6f:35:82:48:a2:e1:81:5e:9f:d9:46:67:51:d3:53:
cf:d2:1c:44:d3:f0:85:ae:02:b2:c5:39:56:20:a7:
3a:01:ad:36:83:dd:1c:cf:7f:d1:6f:ca:7a:48:18:
3f:4e:72:3c:44:ea:97:5d:25:4b:86:20:3e:cb:19:
96:28:54:d6:f1:c5:cb:17:5f:66:9d:0c:c7:0d:8a:
c1:ca:13:45:d9:24:f0:be:24:8e:3d:e6:40:72:47:
be:03:ac:1f:0a:73:69:d5:0c:65:14:31:af:7a:ff:
e7:84:08:b4:60:a2:5e:51:8c:a9:75:c2:f5:4c:4f:
a9:55:cf:55:bb:ac:e3:9b:e9:4e:71:47:e9:38:b5:
ef:48:d3:c3:79:d0:2b:cb:39:a2:f3:c7:16:6b:ff:
e3:f5:6e:49:7c:03:34:e6:88:89:83:46:b0:fc:e8:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:21e0::/48
Signature Algorithm: sha256WithRSAEncryption
11:76:14:56:22:88:62:a3:ec:9f:ea:2f:c1:06:ec:52:dc:8f:
51:16:ef:2f:7f:c9:6d:67:ff:a8:5a:47:5b:7d:fb:81:30:e7:
df:67:20:46:17:16:d7:4f:f9:89:2a:ff:a7:79:84:c6:47:ac:
f7:87:52:1d:0b:73:c5:2e:d2:8f:8f:db:da:d7:f0:a9:32:5e:
b7:01:1b:af:8a:8f:a9:58:75:14:dd:f3:23:89:cc:0b:bd:22:
e0:54:35:c4:c0:c8:d1:ca:ce:99:67:9a:4b:77:51:b2:b1:08:
6e:6c:dc:6e:65:94:d3:e1:24:8b:b1:ec:57:da:e1:59:db:76:
c6:df:e9:a9:72:b3:71:a5:f9:08:c2:9d:11:26:e9:d6:b6:c1:
20:33:9e:75:bd:d1:d9:4f:94:a0:8d:f3:d3:f2:dd:d4:1c:d1:
3c:67:83:92:30:7f:f2:7d:d1:ef:dc:b2:61:d8:3c:8e:1f:da:
96:a9:4b:88:42:15:32:00:5a:dd:1f:9a:ed:5b:72:ab:32:62:
d8:d7:ce:17:92:63:f3:7d:da:cb:74:9f:87:c7:b8:5f:b3:89:
ce:d9:8f:1f:ef:6f:31:5e:12:d4:4f:25:15:12:02:d9:1f:cb:
fe:9c:aa:2e:63:95:71:21:d6:4c:2a:56:e7:74:0a:b2:de:09:
cf:76:8b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:49:03 2026 by rpki-client