Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dnvDZOY8eqV5U_s-SlF447Q8H28.cer
File: dnvDZOY8eqV5U_s-SlF447Q8H28.cer (raw, json)
Hash identifier: Db4fw+Wuze8FW54Y3MsvqHvppbqx/wnfBni+vfe18cw=
Subject key identifier: 76:7B:C3:64:E6:3C:7A:A5:79:53:FB:3E:4A:51:78:E3:B4:3C:1F:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DE39574127AAA9311D7E40376F11BB0C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/dnvDZOY8eqV5U_s-SlF447Q8H28.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 May 2026 12:48:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198798
IP: 2001:678:1250::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e3:95:74:12:7a:aa:93:11:d7:e4:03:76:f1:1b:b0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 1 12:48:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=767bc364e63c7aa57953fb3e4a5178e3b43c1f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:66:76:10:28:2e:1a:47:3b:d0:a1:6d:54:
e1:c4:54:f4:2a:eb:be:5c:78:2a:6a:86:a7:90:d2:
94:bd:ee:43:27:68:94:90:05:ed:98:e9:f8:89:18:
63:e8:06:24:c8:d5:3f:d8:06:8b:04:ca:ad:22:06:
9d:85:7a:82:66:a9:13:61:9a:39:52:ae:7a:67:e0:
97:44:3e:33:b2:ed:d1:63:04:c6:db:32:86:ff:2d:
77:8b:8b:09:83:6c:8d:6c:84:61:68:12:c8:95:74:
a1:35:b1:bb:1e:ac:e9:85:ce:3e:9c:45:8a:49:a4:
73:84:46:04:e4:90:b2:73:1f:65:7a:90:01:4a:01:
db:03:94:2c:3e:df:36:e4:bd:24:38:e8:d3:ca:c6:
17:69:6f:5d:d7:bc:d8:27:7f:3e:fe:0a:7b:52:05:
18:66:d0:ad:7a:a9:c0:61:2e:b4:cc:63:e9:19:61:
5b:da:6b:5c:7e:d2:91:a7:c0:67:c2:71:ca:0e:43:
22:aa:3f:d2:28:72:38:aa:18:91:7e:98:35:8d:14:
e3:b2:5c:ad:6b:9b:8e:27:d9:0c:6e:a1:c4:4f:02:
bc:92:7b:4e:ea:a7:2b:d9:3c:90:72:e9:0d:c8:e1:
d0:26:bc:ca:a1:fe:c1:dc:cc:86:9a:79:e3:45:64:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7B:C3:64:E6:3C:7A:A5:79:53:FB:3E:4A:51:78:E3:B4:3C:1F:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/dnvDZOY8eqV5U_s-SlF447Q8H28.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1250::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198798
Signature Algorithm: sha256WithRSAEncryption
0c:20:0a:2e:18:ab:08:a0:b2:9d:8f:56:9f:9e:91:81:51:f3:
cd:e5:21:3c:7d:85:f2:40:7b:16:ad:a6:72:90:31:0c:d8:10:
0c:e9:0b:45:08:3e:75:ba:b5:63:2b:98:12:23:99:01:c2:c1:
7b:a0:39:2c:be:a4:3e:16:3a:69:81:5c:82:de:c0:f3:77:7e:
4a:8d:4e:94:f1:c4:84:fa:56:98:4a:7a:74:7c:ba:8f:25:93:
23:8d:52:7c:72:ee:2a:cf:0a:97:9d:92:ae:00:a4:3d:28:91:
7f:31:8a:fb:c8:c5:e3:c0:b2:5e:77:1a:d9:57:7c:0e:40:ca:
86:67:f9:82:34:15:8d:91:86:4b:89:3c:34:ab:8a:66:9d:b7:
81:61:dc:c0:e4:a5:20:ad:e0:ca:b1:10:75:05:9d:47:43:20:
65:1a:cd:02:40:ca:a1:8c:ac:6a:73:a1:78:a9:16:6f:96:8d:
c2:cd:99:f7:21:de:61:a0:a8:2c:9c:69:ed:29:c3:4a:bb:37:
6c:b3:b5:47:b3:b8:7b:9c:ef:87:c6:53:49:8e:58:d8:c6:e1:
59:b0:93:71:87:44:eb:67:5a:89:d3:e3:c7:b7:8f:96:95:42:
2e:84:fd:26:63:4f:98:55:1a:ab:2d:41:0e:31:1e:c9:1d:4b:
6e:ab:18:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 07:41:11 2026 by rpki-client