Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.cer
File: VGUJ4ySNZd_gMx_XuZ0oRfSsff8.cer (raw, json)
Hash identifier: RH/bmgSQJzCULLl+TEDI8ovKC50P6NzVEjhHFri5H7s=
Subject key identifier: 54:65:09:E3:24:8D:65:DF:E0:33:1F:D7:B9:9D:28:45:F4:AC:7D:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FF52564735A3C22DAC506248394F1C22C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 12 Aug 2026 08:44:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199180
AS: 218976
IP: 2a03:db40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:25:64:73:5a:3c:22:da:c5:06:24:83:94:f1:c2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 12 08:44:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=546509e3248d65dfe0331fd7b99d2845f4ac7dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:2e:a0:94:16:01:2a:30:39:95:a1:a6:58:
b3:7a:00:e4:d9:bb:0e:f0:e8:27:d0:4a:32:37:54:
3d:8c:f0:ad:9c:81:81:12:0c:d4:a4:76:37:12:d3:
21:fb:90:fd:d3:26:8f:ae:3b:7f:fd:a3:1b:99:1a:
3a:e4:f6:5c:1b:9f:95:cd:c3:ff:a2:84:ae:ea:39:
b1:3d:8f:99:5d:d2:c4:25:d8:23:f8:26:d5:bd:f7:
5c:4a:fe:8e:4f:03:54:5e:b7:40:10:99:e8:92:6e:
ab:9a:d1:79:a1:f9:8d:9f:d2:76:34:10:98:14:d6:
6c:ab:96:bd:2c:11:f3:39:49:6c:b2:a1:73:88:3c:
ab:a7:f9:38:32:27:33:e6:69:4d:36:1a:d9:64:56:
02:22:cf:e0:30:ee:69:01:be:4a:31:c4:db:86:79:
1c:ff:1b:9f:36:49:ef:72:d6:13:64:28:72:d0:23:
23:31:f4:a5:b9:28:55:d5:fb:6c:f8:12:4b:b3:0e:
2e:02:33:60:f3:64:7d:0b:70:dc:c9:91:d1:c1:c4:
7d:50:4c:db:37:a5:8b:d1:1b:d2:ea:ad:b5:29:a1:
ca:0a:71:52:03:72:c4:07:f0:21:ac:97:cb:18:02:
15:ea:99:24:05:b7:ff:c0:68:36:09:dc:e6:c4:ab:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:65:09:E3:24:8D:65:DF:E0:33:1F:D7:B9:9D:28:45:F4:AC:7D:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:db40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199180
218976
Signature Algorithm: sha256WithRSAEncryption
3b:df:e6:3e:2a:74:40:22:52:71:b6:02:37:5e:20:9c:18:ff:
05:ec:7e:61:0c:9f:13:ed:8b:c7:8e:1e:4b:54:2b:4a:57:16:
24:40:d0:7a:d1:6b:b7:07:a2:0a:3a:b5:a5:51:60:35:52:63:
67:75:b4:6e:a2:8e:d9:4b:e4:9e:db:0f:2f:06:f4:16:52:3d:
e6:88:0c:09:cb:db:94:93:4a:16:6d:ae:a2:e9:e7:9b:75:27:
db:f0:57:e7:e1:8c:3a:7f:3c:e2:b0:e1:09:d8:0c:78:1d:09:
cb:d7:7d:a3:b3:50:f1:35:99:4b:b5:73:47:bf:83:d2:95:b7:
f4:1b:50:be:9b:33:3a:14:30:61:7b:c6:6e:17:f4:a7:1d:73:
13:74:21:0a:c4:10:17:01:f8:4a:77:22:2c:b6:13:ac:72:c0:
85:99:74:ae:e9:3f:f7:1c:9a:42:7f:49:78:7d:66:40:3e:7d:
a9:cb:59:d3:3a:76:88:f4:e1:54:8b:7e:c1:5b:ba:fe:75:cc:
a9:1d:d0:dd:21:1b:c0:d7:94:b4:a5:5b:ec:16:be:2b:f6:9d:
95:c2:e6:d6:b2:2e:ef:7c:12:07:26:d6:90:38:39:6d:ce:0d:
c6:b7:bf:3d:a9:94:d9:01:0f:c3:3e:ed:a4:d0:16:25:01:80:
b3:e2:42:a3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:40 2026 by rpki-client