Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer
File: vI6RiHZmXLWDii99KNdHYRM5bvQ.cer (raw, json)
Hash identifier: cx8K+ht9N+SM8m8WJygWvQeBz9lIKxigzvbTcE6KgVY=
Subject key identifier: BC:8E:91:88:76:66:5C:B5:83:8A:2F:7D:28:D7:47:61:13:39:6E:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C7BA3575D28E4C78D8467FF283E892272
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 20 Feb 2026 15:20:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 149.232.0.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:a3:57:5d:28:e4:c7:8d:84:67:ff:28:3e:89:22:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 20 15:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc8e918876665cb5838a2f7d28d7476113396ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:2b:a5:6b:2e:ff:fb:a5:e4:da:92:1b:cd:
cb:94:a5:b5:b1:b3:f3:4d:89:44:17:86:50:19:ae:
06:87:32:41:a4:29:ff:ff:6d:4d:c4:50:3f:d5:fb:
92:e9:31:9b:61:62:3e:76:d0:35:fd:19:d5:90:35:
71:7a:4d:3b:5c:e4:49:40:f9:18:6f:1e:b0:31:e7:
5a:38:1c:68:89:1e:a1:82:bd:87:f8:b1:33:1b:08:
f1:04:10:04:3d:ba:8c:d2:aa:80:72:a4:78:ca:b6:
58:dc:14:44:dd:a2:63:e8:13:4f:c2:4e:99:4a:64:
e3:52:f5:be:c5:f1:64:fb:4d:ee:a7:2a:fd:19:92:
d3:76:50:15:a8:2f:60:36:f8:e6:69:e0:4b:cc:05:
70:5d:53:93:f4:a6:4e:25:1d:d1:90:08:0b:76:83:
bc:05:af:c7:fc:d5:e7:c7:8c:67:34:5e:8e:8e:e9:
7f:58:81:7a:58:2a:bd:01:ce:9e:3c:e8:c6:2f:a7:
bd:52:98:21:94:81:c1:c6:33:0a:f3:3a:f5:1f:e1:
16:08:4d:48:d9:e7:d2:4b:5c:0d:25:8b:4f:39:0c:
68:e2:c2:95:cd:05:16:da:4a:41:6e:2f:13:0e:81:
12:0b:65:02:be:d3:82:87:3f:b9:08:c3:5c:fe:d1:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8E:91:88:76:66:5C:B5:83:8A:2F:7D:28:D7:47:61:13:39:6E:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.232.0.0/20
Signature Algorithm: sha256WithRSAEncryption
43:12:90:e7:63:2e:e6:1d:a3:49:9e:0b:13:9c:09:d3:6d:b9:
eb:6e:64:6f:f6:3d:3b:72:47:0e:df:db:0e:1b:5a:6a:50:5e:
d8:63:f1:57:3c:5c:36:07:d3:52:93:fc:01:86:9b:07:0d:34:
f4:ec:9e:0e:c6:27:18:1b:d7:1c:f7:f0:09:51:43:79:16:91:
77:27:ff:08:a7:1a:ab:3f:36:c8:08:69:f2:ea:0e:d0:7f:77:
7a:0b:c6:92:e6:8e:33:23:aa:a6:6e:12:8c:fd:3b:72:94:5e:
44:45:16:cb:d5:43:fd:86:a6:aa:56:b2:13:97:fd:9d:0f:c5:
fd:eb:ac:38:fb:1d:4c:cb:72:38:f4:6b:77:a1:b0:07:a5:22:
66:bb:52:29:7e:d3:d2:f3:ec:9b:9d:12:2f:a5:3f:fe:80:8e:
2d:fb:89:96:8f:89:32:36:f7:f5:5b:a7:52:9a:d7:8e:31:a5:
78:dc:b6:19:0b:09:63:da:14:a1:5d:99:30:d7:8a:9d:31:2f:
b5:4e:81:f8:e3:39:5d:14:66:a1:96:42:41:12:79:a0:02:fe:
f2:a4:69:66:41:a3:8f:7a:dc:a5:0e:a5:1b:0d:e2:8e:eb:21:
06:2b:16:6a:5e:75:1b:9f:da:b3:7f:c7:5f:c9:5a:23:df:05:
f5:fe:b1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:35:13 2026 by rpki-client