Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Vkb3geFKv_3Wf47QKaRSUxxCKoM.cer
File: Vkb3geFKv_3Wf47QKaRSUxxCKoM.cer (raw, json)
Hash identifier: KW+WXvMh5os8IqE/SL6FDNnbKmxHc0tZHUHuRh+Tcas=
Subject key identifier: 56:46:F7:81:E1:4A:BF:FD:D6:7F:8E:D0:29:A4:52:53:1C:42:2A:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0A7FD62D6E3368161F8A50BEBCEF37302
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/0/5646F781E14ABFFDD67F8ED029A452531C422A83.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 16 Sep 2026 02:13:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201392
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:fd:62:d6:e3:36:81:61:f8:a5:0b:eb:ce:f3:73:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 16 02:13:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5646f781e14abffdd67f8ed029a452531c422a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fb:5e:e2:1f:f8:6a:e3:62:73:79:16:ab:b3:
f5:71:55:08:8e:93:e9:87:60:b2:da:d8:25:92:cb:
c1:4b:0a:54:38:ac:45:83:65:db:6a:ca:6c:d5:69:
72:12:f6:d3:72:85:f0:00:0b:a4:7f:44:b3:2b:7f:
74:5c:8c:6e:5c:0e:a5:61:94:05:c5:97:8b:cd:1e:
31:5c:49:e3:4f:97:b1:8e:45:86:a6:17:9d:fd:b5:
16:9b:fc:e6:17:55:99:22:8d:36:b2:3f:b5:28:ff:
2a:93:e9:01:c9:b5:ee:c8:68:36:03:02:da:5d:c2:
10:f6:17:b8:71:8f:9f:2e:96:34:eb:57:6f:14:ba:
e4:89:6f:94:e9:3e:df:06:8a:fd:83:db:34:4c:84:
aa:17:b0:04:1d:0b:a3:e3:18:ed:dc:11:cc:e2:82:
1f:72:21:8a:91:5f:e8:0a:60:43:d4:cf:a8:c1:b2:
0e:dd:93:ae:d3:77:26:cc:4f:5d:86:08:36:ae:ac:
61:a0:df:bc:ab:dc:0d:8b:ab:42:9e:d0:68:9a:f3:
d8:7a:99:1f:eb:0a:19:de:e9:ec:68:a4:70:e4:b9:
5f:f5:71:3d:8b:55:75:be:41:a6:7f:a7:2f:2b:06:
23:02:1e:af:d4:52:6a:00:90:d1:72:cb:f3:e2:b4:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:46:F7:81:E1:4A:BF:FD:D6:7F:8E:D0:29:A4:52:53:1C:42:2A:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/0/5646F781E14ABFFDD67F8ED029A452531C422A83.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201392
Signature Algorithm: sha256WithRSAEncryption
78:5e:45:a9:6d:cb:d9:ec:02:55:d8:51:9a:f3:d2:1e:4b:5f:
4d:f3:0e:30:c9:56:e4:e1:61:82:3f:4b:2a:f7:0c:f7:3f:d1:
f3:7f:60:18:ea:ee:a8:43:08:be:ad:39:c2:bc:34:90:2a:7e:
23:c5:be:53:5a:3d:9d:dd:26:89:1f:83:d4:cd:ee:36:14:5e:
58:32:aa:d5:be:17:6d:82:fc:75:ad:6e:f0:61:a5:7d:70:12:
ab:79:44:40:70:56:dd:a3:db:4b:1e:69:d3:4e:0a:de:dc:d5:
02:80:38:3f:63:94:4f:a9:fc:7d:9e:98:10:d2:0d:96:a2:f4:
b0:70:29:b2:a2:b1:8e:1a:48:05:64:08:cd:01:ce:36:42:91:
0d:b4:25:01:cf:40:98:6e:8c:f8:b8:98:f3:6c:a7:06:86:9f:
a7:a1:c4:97:ff:b3:1b:e4:b0:43:a5:63:07:ff:81:b2:91:c6:
a4:bd:b5:44:49:de:5a:d9:cf:c1:c1:87:d1:7b:d7:86:fa:7e:
31:6a:54:6a:c6:c8:b6:b7:b1:23:a1:1c:dd:53:66:63:05:a0:
2c:74:e3:72:5a:90:ac:96:c4:d4:25:d2:80:67:b9:cc:11:1a:
42:46:c6:8f:e5:15:85:5e:27:bb:74:7e:c8:12:23:48:21:75:
b1:2b:8e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 03:22:38 2026 by rpki-client