Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.cer (raw, json)
Hash identifier: ddFxpkkEu/P1uhphCaG+JPD+MEUSrtDTs303cFM0CYU=
Subject key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EFF539D2D65FE3EDC9F74BAB659D014F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Jun 2026 15:08:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 2612
IP: 91.240.18.0/23
IP: 193.151.94.0/24
IP: 195.8.103.0/24
IP: 2001:67c:264c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:53:9d:2d:65:fe:3e:dc:9f:74:ba:b6:59:d0:14:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 25 15:08:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:36:69:bb:9c:67:f2:18:e8:18:e4:11:5c:
4e:63:f0:d5:71:13:c5:bf:f7:c5:17:2d:6e:a6:38:
f2:fb:a6:1c:12:70:7b:62:81:e6:d1:89:54:87:69:
dc:2e:68:4e:d8:ff:12:0c:a0:77:f9:7d:ea:19:96:
81:3d:72:cb:63:8d:ce:58:ef:31:b1:3c:ab:33:97:
8c:d1:15:bd:f4:a0:0d:b9:7b:57:b4:59:3b:71:0a:
25:3b:ca:4c:ca:4a:86:4c:62:4f:db:fc:15:20:bb:
ce:d6:2f:ef:94:d7:13:7f:47:6a:d0:6c:5d:bf:45:
ab:4d:61:13:39:69:9f:4c:86:45:44:98:10:7f:c5:
0f:cc:4e:92:ff:09:f2:55:36:4e:7d:60:74:65:23:
6e:eb:51:a2:1a:85:ee:a8:ee:63:fe:f8:96:8e:8a:
00:68:b4:87:cd:45:3b:08:3c:cc:5c:30:8f:12:c1:
0e:2d:f0:3d:04:1d:80:c6:4c:b4:9f:40:a3:6c:53:
25:f8:9a:90:9b:b1:5d:89:38:fd:d2:de:e7:60:5c:
a5:62:46:64:ff:fc:a0:6c:62:d9:2e:f0:51:31:f6:
7b:8e:1d:00:f5:73:91:ed:9c:95:cc:5e:46:8f:2a:
43:dc:77:e1:ed:5c:12:17:f1:77:90:73:46:0c:48:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.18.0/23
193.151.94.0/24
195.8.103.0/24
IPv6:
2001:67c:264c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2612
Signature Algorithm: sha256WithRSAEncryption
8a:2c:5f:d3:99:b5:62:40:d8:19:89:58:73:3a:0e:45:cd:b7:
cf:94:d4:a5:cf:ed:96:0e:ff:f8:fe:15:ee:5d:c7:0b:af:70:
dc:c4:f6:e1:c6:5f:0f:32:33:5f:b7:21:a4:a7:83:91:92:36:
cb:22:03:4c:c1:c6:b4:54:04:41:26:2d:6d:91:52:16:3f:38:
0b:e3:b0:f0:66:bc:a1:f2:4a:2f:c4:af:81:8f:e2:96:6a:eb:
42:36:3f:e7:c7:4a:57:97:3b:81:97:6e:95:ba:6a:c8:65:af:
25:18:8d:38:fc:2f:ab:72:fd:85:52:bd:44:0c:dc:4b:a7:aa:
a8:2e:6c:c3:15:d6:79:3b:ad:43:0c:94:8e:8b:2c:4b:07:ea:
c1:d2:c5:3b:07:4f:00:d7:fc:d0:f5:81:cd:83:cb:5b:88:b3:
9e:28:2f:f9:8c:5e:39:03:ac:46:ec:6b:6f:d5:e1:b8:7c:74:
25:6d:43:ec:7a:89:0e:f9:41:49:7d:fb:cb:99:89:6d:ce:d2:
44:bf:95:4c:e6:81:11:0d:5f:d9:0f:96:b5:f2:90:88:d4:3e:
73:1e:0e:b7:06:37:10:27:cc:11:5e:ba:e7:e4:02:b5:64:95:
f6:a5:a2:b0:69:22:4e:64:c6:57:4f:52:f2:ff:7b:49:ab:df:
ae:6b:1a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:18:09 2026 by rpki-client