Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer (raw, json)
Hash identifier: lOGfkbMvJQNSwIcCs/E39dlaPryEyOmAOXEMwRS4E3c=
Subject key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FDC5DB0D93271401E17D8F22211F4DCC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 07 Aug 2026 13:15:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211902
AS: 219024
IP: 45.91.172.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:5d:b0:d9:32:71:40:1e:17:d8:f2:22:11:f4:dc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 7 13:15:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6f8a9263497c8d54e05496460d439cd6e069260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:0d:58:35:cb:4d:1b:b7:19:80:84:19:d2:
31:d3:5d:bd:43:92:db:3b:da:d9:03:6f:93:d2:cc:
ca:05:99:61:15:c4:cc:00:0c:78:12:0e:a9:cd:27:
4d:67:7b:33:a5:2b:d7:fb:b3:37:a7:f7:c4:aa:31:
9e:9c:6e:8b:4d:38:63:00:b0:94:e2:dc:b2:ac:ff:
1f:26:db:4e:4e:80:41:0b:d8:8e:a4:86:2c:30:59:
e6:c2:3e:63:2a:4f:50:5b:a9:e4:b9:0e:93:81:c4:
bb:b4:1c:65:d9:5f:ea:31:93:ea:cd:39:3f:2e:b6:
8f:2b:ff:cd:db:ea:d3:29:c2:ca:94:9b:5a:18:29:
f4:b3:a0:04:7e:1b:3d:89:d4:6f:1c:a3:fa:ad:90:
0a:14:73:32:13:c2:e8:4c:70:77:c7:e7:84:f1:f7:
b4:0b:b8:63:fc:5d:b4:1e:db:0b:5b:09:37:70:58:
41:75:a3:69:36:69:4a:7a:35:53:36:19:7c:62:77:
1b:1c:22:a2:af:27:37:9d:02:99:c7:44:1c:b9:62:
ea:82:de:48:0e:29:9c:a3:ef:f5:fc:6e:a7:fe:1a:
d7:13:d9:40:d5:e8:47:56:3b:87:34:2c:9e:79:0c:
bb:c7:d2:5f:4d:10:7d:d4:48:fe:82:f7:cb:a3:4f:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.172.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211902
219024
Signature Algorithm: sha256WithRSAEncryption
ab:4d:50:51:cb:a8:58:19:e7:aa:8f:83:20:db:3f:83:e3:8f:
11:c0:cd:e2:d1:52:25:34:f2:a8:f5:fc:b8:98:a6:5c:c6:e8:
0c:ee:41:97:3d:d4:5b:f3:11:d8:b3:ca:f8:5e:8a:6c:af:61:
67:35:7b:fb:7c:af:40:c9:1a:19:54:da:17:f0:de:5a:c7:94:
a7:04:14:b7:78:aa:11:7f:61:a3:5f:03:c9:b0:f9:7b:a6:b1:
e4:7f:41:6d:3e:bc:b9:e5:02:d2:64:df:f5:94:32:29:dc:9d:
ca:7a:c5:d3:e2:cb:e8:6a:99:f2:8a:44:f1:7e:79:1a:74:e8:
81:59:b6:70:46:a8:43:80:08:ac:05:32:81:0f:19:18:f6:ed:
29:30:52:9d:e5:d1:77:c2:21:46:49:4e:8b:92:8e:4c:ea:64:
12:1a:62:b2:0e:ca:1b:a3:13:53:32:34:2d:3e:b5:8d:e9:ad:
cc:33:8e:54:6b:4e:6c:6a:de:84:24:8f:6c:33:64:0b:c5:9e:
e4:db:7c:fa:3b:32:c4:79:cb:54:7e:3a:9d:90:d0:f5:dc:49:
75:b1:b9:91:f1:f8:3a:31:e3:9d:b0:82:24:89:8f:43:58:e0:
da:7a:d3:3d:5a:47:16:f1:32:1a:42:e8:55:db:73:f9:b8:5e:
66:33:13:31
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAZ/cXbDZMnFAHhfY8iIR9NzBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODA3MTMxNTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmY4YTkyNjM0OTdjOGQ1NGUwNTQ5NjQ2MGQ0MzljZDZlMDY5MjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov8NWDXLTRu3GYCEGdIx0129Q5Lb
O9rZA2+T0szKBZlhFcTMAAx4Eg6pzSdNZ3szpSvX+7M3p/fEqjGenG6LTThjALCU
4tyyrP8fJttOToBBC9iOpIYsMFnmwj5jKk9QW6nkuQ6TgcS7tBxl2V/qMZPqzTk/
LraPK//N2+rTKcLKlJtaGCn0s6AEfhs9idRvHKP6rZAKFHMyE8LoTHB3x+eE8fe0
C7hj/F20HtsLWwk3cFhBdaNpNmlKejVTNhl8YncbHCKiryc3nQKZx0QcuWLqgt5I
Dimco+/1/G6n/hrXE9lA1ehHVjuHNCyeeQy7x9JfTRB91Ej+gvfLo08vgQIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFNb4qSY0l8jVTgVJZGDUOc1uBpJgMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzA0YjUy
NC1jMWEwLTQzZWItYTk4Zi02ZjgzYjcwOGIzMjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvMDRiNTI0
LWMxYTAtNDNlYi1hOThmLTZmODNiNzA4YjMyMC8xLzF2aXBKalNYeU5WT0JVbGtZ
TlE1elc0R2ttQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCLVusMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoC
AwM7vgIDA1eQMA0GCSqGSIb3DQEBCwUAA4IBAQCrTVBRy6hYGeeqj4Mg2z+D448R
wM3i0VIlNPKo9fy4mKZcxugM7kGXPdRb8xHYs8r4Xopsr2FnNXv7fK9AyRoZVNoX
8N5ax5SnBBS3eKoRf2GjXwPJsPl7prHkf0FtPry55QLSZN/1lDIp3J3KesXT4svo
apnyikTxfnkadOiBWbZwRqhDgAisBTKBDxkY9u0pMFKd5dF3wiFGSU6Lko5M6mQS
GmKyDsoboxNTMjQtPrWN6a3MM45Ua05sat6EJI9sM2QLxZ7k23z6OzLEectUfjqd
kND13El1sbmR8fg6MeOdsIIkiY9DWODaetM9WkcW8TIaQuhV23P5uF5mMxMx
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:24:13 2026 by rpki-client