Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vCBE7THwVIFIur_gbyzgQqEpbwE.cer
File: vCBE7THwVIFIur_gbyzgQqEpbwE.cer (raw, json)
Hash identifier: TvLLHxap2OvZO5f0TXeys/rPj4VYrvjeKqaT0d0g1Cw=
Subject key identifier: BC:20:44:ED:31:F0:54:81:48:BA:BF:E0:6F:2C:E0:42:A1:29:6F:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAE47E60F801AE634EB010AB51D76C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/vCBE7THwVIFIur_gbyzgQqEpbwE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.194.0.0/23
IP: 91.194.14.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:e4:7e:60:f8:01:ae:63:4e:b0:10:ab:51:d7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc2044ed31f0548148babfe06f2ce042a1296f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:ee:c7:df:3c:16:4b:74:4d:76:21:7d:f0:
ca:84:58:bc:f1:92:79:0e:e1:ee:2a:66:d4:24:4c:
26:1b:b3:2d:71:e3:45:a6:81:57:b0:dd:a2:bd:3a:
42:78:4f:33:eb:cd:61:c7:54:1b:15:4b:7e:f1:18:
33:d4:d1:66:a7:02:5e:7e:e6:e7:c7:db:bd:43:24:
b5:7a:c7:36:78:8a:c9:2d:64:11:97:5c:cb:ff:20:
31:87:95:fa:0a:6c:d7:49:8a:be:13:3a:5f:85:f8:
9b:c4:84:99:41:1f:41:fc:cc:65:e9:8e:20:54:5e:
cd:b9:d8:ad:bb:ad:05:0d:e0:f3:43:ba:74:40:35:
c1:2c:5d:85:ba:fd:2d:a2:87:45:4a:26:30:97:9f:
45:28:36:f7:37:bc:03:38:4d:da:9b:ee:82:56:cb:
17:f9:51:13:22:bd:dc:fb:3d:d8:3e:0d:7e:5c:78:
9e:8a:97:f4:63:49:b4:a1:e7:07:20:cd:31:81:d3:
c7:3d:69:2b:2d:13:2e:27:07:d2:11:46:1a:a3:e1:
a9:a9:af:17:a7:63:a3:14:af:79:e9:83:66:9d:c4:
73:44:3f:f2:d0:9d:6b:86:78:b7:d5:76:38:e2:6f:
5d:32:3d:81:54:b0:7b:0d:c7:61:68:63:74:e6:b9:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:20:44:ED:31:F0:54:81:48:BA:BF:E0:6F:2C:E0:42:A1:29:6F:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/vCBE7THwVIFIur_gbyzgQqEpbwE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.0.0/23
91.194.14.0/23
Signature Algorithm: sha256WithRSAEncryption
44:38:3d:0c:cd:56:87:b8:45:bf:e2:84:d7:41:23:67:e4:bc:
54:33:75:9d:ff:ba:c1:37:56:f2:22:6d:05:62:66:8e:4f:3c:
c3:ef:14:3a:87:09:5d:57:9d:ac:66:0b:a4:a1:b0:26:18:f8:
69:38:dc:86:5e:e9:3f:ee:e4:21:b5:c5:9a:51:d0:db:32:94:
59:11:e9:70:fc:a3:51:54:0d:e7:5c:67:3c:64:d5:7a:21:31:
e4:1c:d9:ab:b6:ee:cf:b4:5d:ba:96:b4:0b:38:84:80:22:ce:
21:12:d2:0d:2b:ee:78:04:0c:b3:94:81:d9:77:9f:1c:1e:9e:
bc:20:6e:63:ff:1a:51:b8:8c:20:44:a9:c0:5a:cd:bb:a8:d3:
ea:0d:27:54:59:39:54:8b:9d:11:65:94:e8:7a:c8:95:ee:2b:
84:d4:e6:c9:a2:cb:4b:34:e5:19:75:a4:d3:59:02:b6:7d:a2:
1b:b9:04:a6:b8:9d:8a:37:a2:3d:e6:9d:d6:21:40:1d:01:e4:
d1:d8:38:bc:f0:07:58:8e:4e:89:84:ac:a9:35:2c:26:9c:a1:
c8:89:96:43:8b:79:d9:92:51:d9:21:7c:b0:11:f0:db:00:59:
15:98:3a:80:d2:b2:f4:70:19:0c:55:29:90:78:a8:f7:45:a1:
80:7f:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 22:31:42 2026 by rpki-client