Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer
File: vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer (raw, json)
Hash identifier: o7e0NIsEXXuk74ygZGiZfGeYsu0NBm0Vc2ROEhoYp6s=
Subject key identifier: BF:07:FA:84:49:89:13:CD:0A:F2:47:B9:8F:C2:E4:DA:F1:47:F7:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FB348695F3783B1D82170367073EEC4E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Jul 2026 13:48:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2ddc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:48:69:5f:37:83:b1:d8:21:70:36:70:73:ee:c4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 30 13:48:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf07fa84498913cd0af247b98fc2e4daf147f7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:6c:14:70:bb:ac:0a:fc:dc:03:ad:c1:e3:
55:ee:4e:01:e1:a5:ba:39:41:0a:20:7d:5e:f7:28:
b9:07:77:07:89:d2:b2:3e:ac:70:4f:ca:7f:bb:5a:
c2:ea:b0:f7:d7:d0:61:50:18:8b:a6:52:fd:53:7c:
75:26:7f:76:46:78:21:ec:7c:3c:08:38:b7:7e:f7:
5e:ae:e4:b3:ab:76:77:9d:56:5c:19:08:17:94:78:
34:45:45:7e:ff:76:be:1f:ed:06:32:4a:05:d0:e3:
a8:7f:55:33:2f:5a:47:fb:43:3f:2d:6f:99:62:60:
9e:ae:9e:37:02:78:43:bf:cb:c5:9b:93:9d:df:ab:
84:09:9f:03:95:f7:85:67:c5:61:f7:28:45:f4:ed:
bb:5c:56:2d:01:54:b2:32:5b:3c:9a:c0:e4:8a:08:
ea:e6:2e:50:69:72:98:bf:01:2e:90:c2:18:7f:68:
ca:04:ca:96:66:3b:8f:df:42:7f:a3:99:1a:ba:f4:
27:80:c6:cd:4b:92:67:f5:0d:cd:11:ba:ed:9e:e4:
f2:be:15:4e:e8:6b:ec:44:f9:22:bc:3c:00:af:3b:
c6:da:dd:b3:98:ba:bd:e2:09:90:84:20:4b:cf:63:
1a:28:06:58:c1:7d:0e:aa:57:86:0f:96:8f:54:c7:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:FA:84:49:89:13:CD:0A:F2:47:B9:8F:C2:E4:DA:F1:47:F7:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ddc::/48
Signature Algorithm: sha256WithRSAEncryption
88:07:0d:55:04:a7:b1:30:5d:24:b1:fd:de:61:93:eb:11:a1:
b2:a7:59:21:2a:22:db:bd:f1:3e:77:61:43:47:08:f6:80:60:
b6:15:00:e2:36:66:98:02:bd:27:18:40:ed:60:14:32:51:e9:
13:41:14:64:2e:c7:0a:bb:2b:00:be:36:96:db:79:5b:68:68:
ad:94:9e:e8:79:26:47:75:e5:f5:e8:8a:7d:36:c3:82:bd:bd:
60:db:c0:6d:c4:db:cc:2b:ae:48:aa:e3:e2:0c:20:8c:79:e3:
1f:e5:22:4d:6d:0f:0a:29:67:27:92:c0:03:ac:e0:2e:cd:64:
32:3e:6c:9a:ab:cd:ce:53:cb:20:5b:8e:ab:82:1a:38:3a:12:
14:b6:9b:d3:8b:09:1a:01:ab:27:07:43:e9:e8:a0:a7:bc:3d:
63:f7:57:0d:96:85:90:c7:2c:36:bd:0f:a8:36:19:9a:71:6c:
95:cb:7b:52:97:14:4e:53:4a:b5:a3:44:ce:b0:04:d6:00:df:
bc:b6:18:dc:57:cd:68:8b:d4:d1:b2:75:64:f0:43:9e:f3:37:
ce:e4:1d:b8:17:23:01:4e:40:88:84:1f:62:88:68:be:43:c7:
31:c6:48:20:82:45:ee:fb:f1:4f:17:18:b5:41:08:83:b2:e1:
3b:5e:6a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:11:32 2026 by rpki-client