Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vDH-mHQNcnxyab0GmhN11ZFftI4.cer
File: vDH-mHQNcnxyab0GmhN11ZFftI4.cer (raw, json)
Hash identifier: eoCGvi6U7ESUnxnJ0/KqhJGGXYzBkP9EAe67C5XhXhM=
Subject key identifier: BC:31:FE:98:74:0D:72:7C:72:69:BD:06:9A:13:75:D5:91:5F:B4:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C74C28FD37A646D8320C35469513DFBE9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 19 Feb 2026 07:17:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.211.192.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:74:c2:8f:d3:7a:64:6d:83:20:c3:54:69:51:3d:fb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 19 07:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc31fe98740d727c7269bd069a1375d5915fb48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:16:15:6b:bc:2e:73:b6:99:fb:e4:44:55:
a8:09:48:63:a4:95:1c:b2:c4:0a:88:65:48:0a:1a:
4c:74:93:cb:22:d0:7c:73:2e:83:1b:40:ad:0e:52:
da:46:83:82:d4:7a:ab:b3:bc:66:07:62:c3:8d:cb:
64:8e:ec:bf:0c:16:18:5a:08:b8:a3:96:36:8e:b4:
e5:bb:f4:c7:d4:ef:4f:e2:c1:0b:19:39:49:c6:5f:
b7:3f:ac:fe:56:84:09:b7:53:6e:0e:84:07:b6:8a:
52:6b:17:46:82:3a:0b:26:c1:b7:c0:2f:61:71:2a:
a1:a5:99:1a:e8:f3:ce:28:7f:c4:f2:43:85:d8:e0:
95:38:f7:ce:42:35:ef:6b:9e:5a:c1:b1:2d:64:cc:
1e:b7:48:58:88:c4:8e:4f:d6:bc:12:8d:b9:6b:bc:
99:53:36:8e:72:32:f7:c6:5b:e2:d5:f1:56:d1:50:
ce:d0:64:ea:fa:a3:42:42:03:63:82:ac:3b:fa:cc:
b6:99:2f:aa:df:45:f3:ba:a6:7d:6b:09:6a:78:da:
7b:85:85:0e:dc:c1:c9:01:98:79:2b:4f:7c:48:ac:
e8:b3:3f:b2:c9:f3:c0:73:e1:6c:52:c6:9a:1b:e6:
04:5a:0e:78:d6:d5:e8:1d:3f:dc:3c:88:4a:1e:00:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:31:FE:98:74:0D:72:7C:72:69:BD:06:9A:13:75:D5:91:5F:B4:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.192.0/22
Signature Algorithm: sha256WithRSAEncryption
06:5a:23:14:03:ea:ea:8c:2a:e8:90:bb:14:9e:50:f5:d4:9b:
6f:15:54:ae:5f:d6:0c:25:fa:7e:2a:7c:99:df:97:f7:ed:e5:
5e:e5:64:0a:a9:52:01:44:6a:09:69:18:d5:31:8f:63:5c:5c:
f3:3d:80:97:92:ff:d5:a6:7a:06:15:87:8a:3d:1d:9a:5c:79:
16:fb:28:af:f1:47:18:13:a6:d3:d2:22:61:09:e7:09:29:87:
c7:c4:17:ac:76:fe:e8:88:a5:f9:f3:8b:42:61:ec:ed:d8:11:
20:7d:17:17:e2:b9:94:d1:77:3b:76:8e:8a:a6:30:0a:1d:f3:
ba:f5:e5:fd:dd:47:25:36:44:3e:16:0e:b2:07:6e:20:07:7b:
9c:95:42:79:f6:3f:7c:b3:7a:0e:8b:f5:41:17:a6:62:24:1f:
0d:d3:85:a1:ef:8b:65:54:b0:49:e0:57:37:0b:b8:63:90:40:
f0:47:f4:58:ed:2b:df:4b:87:31:d8:b6:bc:32:91:7d:34:f9:
a6:70:57:b5:f2:f9:75:6e:ce:3d:da:ae:41:af:1c:f0:41:46:
24:69:0d:07:62:36:e0:d8:6e:67:9d:c2:8d:11:11:f9:8b:a1:
e8:14:3c:e8:db:2d:b4:58:52:50:ad:f0:0c:cc:48:1c:cb:57:
4f:ce:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:53:11 2026 by rpki-client