Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1EBxTDFwJ9Z0hNYxPAoK-TBE2DY.cer
File: 1EBxTDFwJ9Z0hNYxPAoK-TBE2DY.cer (raw, json)
Hash identifier: SSZXY88nbFKTHcF7HOjbeNDbNoh7sKk3e3sGwhhR1Lc=
Subject key identifier: D4:40:71:4C:31:70:27:D6:74:84:D6:31:3C:0A:0A:F9:30:44:D8:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0A4299D10CC9FD3E656D52946C7A507B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/2804c5-a5fe-4bb1-a0ac-fd11cfe71079/1/1EBxTDFwJ9Z0hNYxPAoK-TBE2DY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/2804c5-a5fe-4bb1-a0ac-fd11cfe71079/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Sep 2026 08:23:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216086
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:29:9d:10:cc:9f:d3:e6:56:d5:29:46:c7:a5:07:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 15 08:23:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d440714c317027d67484d6313c0a0af93044d836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:ee:6d:1b:0e:03:0d:11:88:28:75:2b:b2:
de:0b:ea:10:f7:ab:e0:99:a4:4d:14:86:9d:69:73:
61:db:2c:6d:ce:a6:11:54:8b:7e:19:ee:e1:7f:20:
b9:f9:d8:aa:27:cf:68:fd:ea:7f:2c:91:0c:f1:53:
35:a8:59:53:85:6d:71:cb:f2:0b:39:a5:fc:c0:43:
50:00:74:1c:e4:a3:30:16:9b:8d:52:29:99:33:ec:
8d:05:28:3b:75:af:db:46:ac:5e:a2:eb:98:7e:e5:
bd:94:b0:87:e6:60:37:ed:97:3d:a9:81:92:25:49:
17:45:ee:39:34:43:d2:1e:f0:b4:4d:ca:ae:3d:f6:
38:74:85:be:bc:98:d5:01:d0:7a:fb:05:11:40:a1:
dc:e9:57:c3:e3:31:93:de:60:e2:51:85:71:8f:61:
e7:2e:bc:2c:2e:3d:70:1f:0d:86:cf:b4:a2:64:9b:
78:3e:5e:52:02:4b:5f:ce:2d:cf:2b:f2:6f:96:41:
0a:99:10:7d:72:3b:b9:6a:68:2a:9c:0d:ff:39:97:
96:ca:f5:39:b6:7c:35:36:7e:ff:90:65:47:93:c1:
25:1a:b8:1d:5d:e3:53:91:43:a5:22:6a:77:86:26:
d2:c4:27:d0:56:09:f6:09:38:b4:92:2e:cc:8d:51:
3e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:40:71:4C:31:70:27:D6:74:84:D6:31:3C:0A:0A:F9:30:44:D8:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2804c5-a5fe-4bb1-a0ac-fd11cfe71079/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2804c5-a5fe-4bb1-a0ac-fd11cfe71079/1/1EBxTDFwJ9Z0hNYxPAoK-TBE2DY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216086
Signature Algorithm: sha256WithRSAEncryption
38:cd:40:16:e1:ce:81:17:24:c2:a5:1a:6b:cd:1f:9c:9a:45:
14:0b:6d:eb:6b:06:e6:84:2c:93:58:b4:25:ae:e1:6e:c2:ca:
5d:0e:1a:bd:25:af:fd:fe:ba:6c:a6:b5:f9:0b:0f:78:85:4f:
d3:54:c0:9d:be:17:19:24:d2:be:8b:83:3e:69:0b:60:ce:6c:
20:ba:25:3c:b9:cb:04:f2:1c:af:81:d3:73:b1:41:f6:2a:79:
35:a1:d2:a5:09:9f:c5:ce:d5:86:34:99:99:27:55:f9:35:39:
f2:3a:4c:b6:da:0c:b9:08:1a:5c:67:f0:1f:dc:60:61:2a:08:
97:eb:5b:0f:5a:7d:25:e6:ea:28:df:56:f2:c8:71:45:42:c2:
ff:51:52:03:d9:b7:2b:2c:da:42:53:a1:71:9c:be:4a:65:a3:
f8:6e:05:5c:37:78:4a:16:cc:4d:52:49:e7:5b:11:62:18:ee:
36:4d:3a:ae:01:89:cc:59:b2:85:d7:e9:84:4f:26:f0:88:b3:
87:0e:26:5f:a7:33:87:e6:19:60:63:3d:a1:7a:d6:39:11:59:
ab:74:03:34:75:69:34:71:89:68:f0:34:ca:02:c6:de:12:39:
71:73:ed:6e:fe:11:85:7c:d5:13:44:f2:a8:a2:5e:7b:4d:ba:
a4:3b:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:09:37 2026 by rpki-client