Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
File: 1-MVbzhufssnSdXNst6R5YFEv-rs.cer (raw, json)
Hash identifier: APbQ3gQGSIS8jIG7z+ufvVmUxHyglqCwtJmm8rff01Y=
Subject key identifier: F8:C5:5B:CE:1B:9F:B2:C9:D2:75:73:6C:B7:A4:79:60:51:2F:FA:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CE802ED06DF89F9268E17807F65CB9D85
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Mar 2026 16:23:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200140
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:02:ed:06:df:89:f9:26:8e:17:80:7f:65:cb:9d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 13 16:23:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8c55bce1b9fb2c9d275736cb7a47960512ffabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:39:b7:a6:b4:16:bc:58:2c:e7:56:99:90:
69:d4:75:65:27:ed:b6:84:3b:2a:2f:65:26:e5:bd:
a5:c2:1a:98:f3:66:9b:30:7c:58:ae:d1:38:24:bb:
75:4e:a4:3b:c9:7c:30:8f:f4:90:4c:d8:2e:90:6b:
9e:3d:cc:09:69:39:fa:c0:4d:e2:39:7b:3e:0e:ee:
77:90:15:dd:f1:2d:be:dd:e7:a5:e8:d7:ea:54:a9:
e0:10:18:d8:46:25:f5:1c:75:ef:96:db:49:54:c6:
bb:06:66:e4:a5:24:72:d0:e7:8b:60:00:bb:91:d5:
70:ec:4b:57:07:6b:18:3b:40:ac:7c:cd:95:d4:d5:
e4:b9:d2:7f:0a:b6:63:1b:a4:7f:31:d4:17:7d:04:
fc:bb:74:55:13:a4:10:cd:64:6a:61:b6:a4:06:4a:
f1:e5:70:9f:61:88:03:85:2b:70:97:08:3d:99:6b:
f7:6e:1b:33:fd:ff:fb:3b:3f:9f:a7:f1:00:21:54:
40:66:1b:dd:4b:92:9d:fa:e2:83:8d:0b:ed:c6:ce:
c5:dd:11:70:a4:ab:c4:65:63:ed:5d:5b:57:50:ec:
e1:0a:50:0e:2f:6c:a2:3a:50:51:b2:07:c1:ac:34:
58:fe:68:4a:cc:33:12:e6:88:41:84:55:67:40:fa:
ef:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C5:5B:CE:1B:9F:B2:C9:D2:75:73:6C:B7:A4:79:60:51:2F:FA:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200140
Signature Algorithm: sha256WithRSAEncryption
49:6a:a6:c6:1d:1d:04:39:5b:77:71:0e:3b:fb:31:aa:52:5e:
67:83:09:02:44:01:44:62:4b:b6:99:11:07:17:5c:e8:f0:55:
ad:dd:e6:23:63:62:ee:60:78:5e:9e:d3:e4:dc:fc:b0:a0:32:
09:6b:e1:7d:89:52:a9:76:63:75:ab:24:d2:45:b0:f8:c0:a5:
20:80:63:56:ff:03:c9:04:79:63:d4:4f:04:74:f9:7f:90:1a:
ca:70:d5:2c:98:62:9b:48:09:6d:bb:2b:e3:6e:70:d2:96:2f:
d4:b1:eb:8b:d9:7d:df:a2:af:ad:cd:a7:98:f4:28:39:95:a6:
48:de:2e:41:09:56:1b:de:d7:f5:c3:96:d7:10:7d:0f:c0:85:
bc:e9:bf:7d:b2:ba:23:30:df:fd:cf:4c:0b:a0:f6:ab:e9:62:
8c:fc:86:14:f0:99:fc:dc:78:1c:73:c1:85:32:9b:e9:3b:00:
22:91:b7:6a:c7:bc:fc:5d:95:ff:53:49:cb:78:89:63:a5:14:
f9:50:cd:72:7d:81:99:82:1a:7a:d7:60:6a:14:fe:a6:a0:5e:
37:8d:cd:49:b0:11:72:88:47:9f:29:b6:f2:b9:03:8a:da:17:
7e:d7:88:08:b7:3a:b1:fd:68:2f:e5:f0:ff:9b:48:db:e4:4c:
68:12:8b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:16:13 2026 by rpki-client