Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
File: Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer (raw, json)
Hash identifier: Gy0KArpVR8uB922TpHOfVo86pOvhygQywZ5jsx1EcFQ=
Subject key identifier: 0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C4CB57FFFDE7813DACA40A313154C5523
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Feb 2026 12:38:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201472
IP: 195.13.37.128/26
IP: 2001:7f8:4f::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:b5:7f:ff:de:78:13:da:ca:40:a3:13:15:4c:55:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 11 12:38:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:b2:d4:1c:5d:6e:69:5f:00:1f:dd:09:98:
90:45:7a:bc:32:ed:d7:6f:96:4f:21:a6:a5:4f:77:
d4:6b:f0:11:9e:1c:f0:e9:a0:42:1b:31:e9:b7:ea:
c4:52:52:60:2d:60:32:be:2f:79:5e:15:72:ce:dc:
f0:8a:30:51:56:a9:41:84:78:02:98:0c:8c:05:1f:
91:4b:c9:81:55:06:bd:5d:24:ef:b2:0b:45:b4:71:
83:f8:b9:d9:3c:ce:f4:c0:48:18:c2:76:93:4c:af:
49:a2:8c:93:72:1b:a5:5a:33:f2:b3:48:57:ee:42:
08:89:3d:42:4f:89:ca:67:b5:13:78:fa:81:8a:6f:
87:4d:ee:aa:08:14:aa:88:52:2c:33:f0:0c:c1:ea:
bc:f8:b0:13:ec:f4:ce:d8:a2:30:d5:3f:43:16:fe:
64:d3:20:69:cb:4a:de:25:73:61:1a:ad:4a:c0:6f:
22:0c:3d:09:05:2c:32:c8:57:61:96:b1:b4:59:a5:
61:57:4c:23:24:4d:33:ad:a8:02:1b:e7:0f:35:f9:
40:c1:eb:06:f1:f0:2e:1d:03:a0:fc:30:9e:5c:85:
6f:f6:66:8f:b0:d1:32:5d:fe:f6:10:0a:a6:81:4b:
cb:e8:55:12:af:45:92:07:6e:10:21:6e:2d:c6:ce:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.13.37.128/26
IPv6:
2001:7f8:4f::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201472
Signature Algorithm: sha256WithRSAEncryption
15:22:da:b2:cc:a5:e7:ad:90:85:09:bb:fe:40:76:b2:8a:e2:
3e:d8:99:7f:bc:4d:27:7d:9a:ab:76:90:91:e8:e3:d4:e6:66:
cc:62:59:d0:bd:c2:bf:97:a0:fd:40:de:a4:9e:ce:28:a3:8f:
4f:20:fa:d8:3f:2e:66:12:b5:0f:e3:ff:61:95:a7:bb:66:83:
84:e2:dc:16:0a:2d:3f:f6:b3:40:fc:9a:b1:8a:c1:b6:3c:48:
51:3c:2b:c8:0b:45:bd:46:a7:a8:49:45:35:b6:b6:e2:8e:03:
a4:34:9d:70:ca:3c:aa:bc:a6:c7:5c:1e:58:7b:f9:b2:24:74:
de:90:f6:c3:b0:3f:eb:1d:f6:ec:51:c0:d1:ce:f6:c1:05:25:
a6:c3:86:5e:f0:aa:e0:57:0b:5f:07:30:cb:07:74:d0:f8:dd:
24:4f:10:7d:e6:26:ec:34:3c:d0:cb:6e:99:91:3d:79:22:81:
b1:1e:80:60:88:9e:9a:ec:6b:7a:79:12:61:b6:61:18:59:bc:
00:71:60:1c:d2:24:2c:8d:65:a4:e9:30:2f:fb:86:1b:f1:28:
8d:5c:63:77:37:0d:9a:12:ad:94:fc:fc:18:a5:e0:96:48:b1:
e2:14:f2:d2:4b:80:bd:b2:ba:9e:87:d7:be:da:0d:00:06:a2:
4f:c6:5e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:55:34 2026 by rpki-client