Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
File: dcqtndM2-CAZCTaTYHy57S-ZDXE.cer (raw, json)
Hash identifier: de4iVPTdiJVzCPKx4tVjhPW3Lfi6tx4LO4slfNy/BJ0=
Subject key identifier: 75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F929603D48F7BF5267D2BCF2E15DF8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 85.118.208.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:29:60:3d:48:f7:bf:52:67:d2:bc:f2:e1:5d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75caad9dd336f82019093693607cb9ed2f990d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:3d:b4:6d:9d:6c:49:83:f8:15:5b:fa:a9:
fa:24:63:8a:b2:00:c7:fc:7d:de:69:93:86:57:ac:
e5:c3:5f:d0:58:23:86:af:68:55:96:c4:4e:13:35:
be:67:fb:24:b8:a7:05:0a:f4:85:1d:64:3d:63:c1:
fe:61:de:73:54:9d:8c:0c:19:29:90:cb:ec:cf:9f:
87:f1:d1:5d:ff:e0:e6:03:df:88:88:de:80:77:26:
c2:e3:02:9a:8c:1d:b2:fe:3d:12:9f:a9:d4:b4:a2:
01:82:32:bd:6b:37:c7:da:43:07:fa:c0:6c:41:aa:
cf:24:08:b1:91:05:9e:e3:b0:78:70:0d:d9:ce:17:
4c:4e:ca:ed:97:2f:5e:44:b2:36:ff:8d:d4:55:c0:
72:c5:aa:10:33:87:83:39:76:41:9d:b6:64:a1:76:
3c:65:f2:02:0b:b1:d0:f0:b6:d7:27:a2:53:92:6a:
be:0e:19:45:2f:6a:ab:a5:a0:54:a3:d3:35:93:bc:
25:c9:39:cc:45:37:70:8f:8c:17:aa:47:6a:e7:99:
d7:fb:f1:53:34:96:57:6f:af:ac:69:34:48:00:1b:
56:1a:1c:3d:f2:65:75:0a:c9:c6:dc:eb:56:69:42:
76:25:e1:76:63:48:85:d7:eb:bb:72:45:c4:08:f8:
1a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.208.0/21
Signature Algorithm: sha256WithRSAEncryption
87:f9:93:1e:fe:a6:5c:0d:80:24:2f:bc:7a:22:cf:bb:b3:d1:
53:35:b8:2e:4a:c2:c3:0e:c0:88:79:28:18:1c:e5:6f:c3:96:
61:92:bc:35:81:8c:c2:65:1e:c9:dc:e6:8f:b8:cc:69:4f:1b:
0f:d0:9f:02:52:0d:57:dd:8b:85:04:96:0d:dc:ff:52:40:8f:
ba:f0:d7:06:ff:c6:a8:42:8f:52:89:46:ac:dc:58:e6:4f:e2:
ac:82:1f:3f:c7:8d:72:3d:48:65:7d:58:f6:80:12:90:66:42:
a4:1f:20:ff:c7:46:e0:c3:64:f5:da:d1:22:99:f9:04:62:d1:
ab:4d:f2:2e:f6:ac:58:2b:92:a5:87:95:85:be:9e:03:4a:24:
cc:f0:2b:8d:2d:ab:16:c5:93:8a:dd:f4:f0:83:95:ab:43:99:
49:90:db:40:d4:81:21:ed:e3:3d:1a:f0:76:32:6d:ad:db:1a:
b8:cb:10:36:30:66:07:7d:f6:7c:bb:88:34:80:ae:c2:c9:18:
c3:16:a0:d7:ed:b1:9c:dc:e8:9a:0f:3a:3f:15:d6:7a:ee:2b:
53:80:ea:04:a4:28:cc:d5:e2:fa:9b:47:f4:6e:1f:05:38:e2:
3b:b5:84:13:a6:69:1b:d4:16:e9:0a:7b:b4:79:bb:d9:06:b1:
49:62:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:16:54 2026 by rpki-client