Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vmGeqxZHT-1toJ0UezAl31t0l8o.cer
File: vmGeqxZHT-1toJ0UezAl31t0l8o.cer (raw, json)
Hash identifier: jKUVr5Wf7MsEJLYcGE36T8p+bMbs4wiOVw+FmUvz4RA=
Subject key identifier: BE:61:9E:AB:16:47:4F:ED:6D:A0:9D:14:7B:30:25:DF:5B:74:97:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA8E5A8E171C7CF324C5F66776731C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 141.69.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:8e:5a:8e:17:1c:7c:f3:24:c5:f6:67:76:73:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be619eab16474fed6da09d147b3025df5b7497ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:24:6a:28:1b:ed:63:4e:87:0b:dc:24:a0:
30:e5:3f:47:9a:aa:3b:b9:ed:e7:08:0e:80:02:bd:
ef:a0:53:81:23:df:4b:e7:63:e2:a0:04:9f:22:44:
20:6e:a7:ca:c3:48:60:79:9e:3d:95:d0:15:b3:8a:
77:f2:97:ad:76:43:3f:6c:ad:c1:f2:0b:f1:fb:a1:
f5:53:ef:03:8d:0d:3b:88:07:68:28:7e:33:d8:d8:
e9:a5:b0:cb:2b:eb:bc:3a:6f:7a:16:61:0a:45:6e:
cf:59:06:96:b8:1a:f4:f8:0b:cb:4c:63:b3:1e:94:
7f:d2:a0:f3:36:d1:92:08:61:78:18:57:c6:2b:90:
28:4e:23:0b:07:ae:e8:83:5e:dd:d1:60:4d:29:ec:
b6:1c:bb:35:ef:41:01:92:16:d6:43:84:16:a2:8a:
62:ac:05:ec:03:c9:3e:4d:8a:fb:a0:b2:be:b8:f7:
81:60:4f:3c:bf:c0:ea:57:8d:13:8c:ea:f5:7c:40:
13:3c:a7:56:7c:04:ed:e1:bc:37:ec:02:90:86:90:
f9:99:f5:87:a1:cd:55:21:9b:11:79:e0:3b:06:1a:
ed:4a:32:37:dc:65:8f:ca:06:29:59:f9:3d:21:6a:
12:6b:76:82:22:70:ad:44:d2:58:7c:b6:58:e4:84:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:61:9E:AB:16:47:4F:ED:6D:A0:9D:14:7B:30:25:DF:5B:74:97:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:b9:a8:af:55:7a:27:41:97:01:3a:dd:50:d9:a0:1a:b5:7f:
07:20:cc:93:a7:77:4e:a1:24:5a:f1:9f:eb:25:32:f7:ef:9a:
3b:85:ba:c3:ab:28:9c:37:d1:42:b2:c3:bf:74:31:2a:bd:77:
1f:28:ae:a8:51:cf:b5:93:cb:a3:54:b8:e3:a9:48:22:58:0d:
48:7e:f1:ef:b4:8c:7c:98:e3:c0:5a:bd:d2:1a:ac:c9:81:89:
e4:3d:48:e2:6f:89:19:8c:98:49:64:06:74:c5:6a:87:64:db:
6f:ff:ba:23:79:ee:5a:cc:42:4a:cd:0c:88:c7:63:ef:97:35:
86:72:a2:ca:69:ad:82:d6:b9:c5:2f:83:bb:fd:bc:e4:36:c8:
ac:cf:8e:49:00:29:ed:24:25:7c:31:2f:f4:fe:fa:80:ae:16:
b5:4f:73:a6:89:82:1d:5f:d6:48:40:4a:75:0d:48:13:31:4c:
5e:65:fb:c9:bf:70:09:d5:99:b5:b8:e2:8c:ae:f6:5c:6f:94:
f3:7b:16:26:85:5d:d9:cc:2b:5b:e4:0b:48:bb:01:77:61:2f:
ae:ed:3d:d5:b2:49:e5:79:9e:df:8e:68:d4:09:5f:1c:cf:1a:
f1:41:14:11:29:2b:f4:34:97:f0:34:d4:6f:4b:2c:ee:21:9d:
70:66:25:3a
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZ8Y+o5ajhccfPMkxfZndnMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTYxOWVhYjE2NDc0ZmVkNmRhMDlkMTQ3YjMwMjVkZjViNzQ5N2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmggkaigb7WNOhwvcJKAw5T9Hmqo7
ue3nCA6AAr3voFOBI99L52PioASfIkQgbqfKw0hgeZ49ldAVs4p38petdkM/bK3B
8gvx+6H1U+8DjQ07iAdoKH4z2NjppbDLK+u8Om96FmEKRW7PWQaWuBr0+AvLTGOz
HpR/0qDzNtGSCGF4GFfGK5AoTiMLB67og17d0WBNKey2HLs170EBkhbWQ4QWoopi
rAXsA8k+TYr7oLK+uPeBYE88v8DqV40TjOr1fEATPKdWfATt4bw37AKQhpD5mfWH
oc1VIZsReeA7BhrtSjI33GWPygYpWfk9IWoSa3aCInCtRNJYfLZY5ITRxwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFL5hnqsWR0/tbaCdFHswJd9bdJfKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzLzJmODcw
ZS0yYmE1LTRiODgtOTFhMC0xZDIzNDhkYmQwMzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvMmY4NzBl
LTJiYTUtNGI4OC05MWEwLTFkMjM0OGRiZDAzNi8xL3ZtR2VxeFpIVC0xdG9KMFVl
ekFsMzF0MGw4by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAjUUwDQYJKoZIhvcNAQELBQADggEBAFi5qK9V
eidBlwE63VDZoBq1fwcgzJOnd06hJFrxn+slMvfvmjuFusOrKJw30UKyw790MSq9
dx8orqhRz7WTy6NUuOOpSCJYDUh+8e+0jHyY48BavdIarMmBieQ9SOJviRmMmElk
BnTFaodk22//uiN57lrMQkrNDIjHY++XNYZyospprYLWucUvg7v9vOQ2yKzPjkkA
Ke0kJXwxL/T++oCuFrVPc6aJgh1f1khASnUNSBMxTF5l+8m/cAnVmbW44oyu9lxv
lPN7FiaFXdnMK1vkC0i7AXdhL67tPdWySeV5nt+OaNQJXxzPGvFBFBEpK/Q0l/A0
1G9LLO4hnXBmJTo=
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:26 2026 by rpki-client