Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1TWbs5OO2MpV324QAT-f9hAcG_c.cer
File: 1TWbs5OO2MpV324QAT-f9hAcG_c.cer (raw, json)
Hash identifier: WJg+jzWTrXi0A4446L2/86QttwLIruUoqbKzH6o58mU=
Subject key identifier: D5:35:9B:B3:93:8E:D8:CA:55:DF:6E:10:01:3F:9F:F6:10:1C:1B:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C94DD9FB2B5BB7A4EBC5210BC2D3F3FE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Feb 2026 12:54:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213661
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:dd:9f:b2:b5:bb:7a:4e:bc:52:10:bc:2d:3f:3f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 25 12:54:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5359bb3938ed8ca55df6e10013f9ff6101c1bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:87:5a:e3:6f:ac:c4:b4:ef:dd:2c:7c:8f:
cc:53:e3:f1:7e:c7:79:9b:40:76:03:64:d6:77:f8:
8b:e7:54:5a:f1:b3:87:3f:c2:14:ff:63:b2:52:57:
de:5f:54:48:79:b6:b2:6c:96:df:1b:b3:69:d3:c0:
54:6c:b0:99:9b:1f:5f:cb:11:45:1b:87:2d:37:1a:
13:f3:70:30:6e:c0:55:ad:43:2f:86:7b:2f:15:fc:
4e:66:8c:70:54:f7:95:29:b5:14:d6:f1:9b:dc:54:
a1:b7:54:aa:1d:49:12:11:f5:ad:7b:6b:44:74:1a:
cb:6e:12:bc:56:6e:d9:bb:55:bf:dc:38:5b:7f:61:
b8:d6:cc:9d:c9:f0:c8:3a:8e:a3:69:bd:d2:72:35:
f6:be:5d:c5:dc:ba:7d:6e:0e:f1:13:3c:3c:b7:04:
c2:cb:e4:bf:38:72:4d:6b:8d:57:99:7e:60:ea:58:
f9:14:7f:56:14:23:83:2c:a8:8d:51:3b:5e:c7:78:
8e:0e:6d:32:d5:85:82:46:4a:69:93:de:f6:d2:b2:
cb:21:7f:af:b1:bd:26:41:e0:ed:99:bc:41:e8:59:
2c:80:59:06:c6:44:54:8c:44:44:ce:a0:76:c0:64:
2b:d0:e3:99:f5:63:7b:46:a0:ab:d7:14:6c:fe:4a:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:9B:B3:93:8E:D8:CA:55:DF:6E:10:01:3F:9F:F6:10:1C:1B:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213661
Signature Algorithm: sha256WithRSAEncryption
86:89:26:e0:03:ba:57:ba:91:60:d7:73:99:bc:bf:75:1d:61:
3e:87:68:fe:e5:85:10:1e:13:a9:eb:48:31:b6:71:01:5f:92:
8c:43:bc:91:65:26:9e:97:67:ff:1f:9e:d8:68:62:0c:15:ea:
84:9c:14:72:e3:7a:77:95:3d:7b:59:69:75:23:aa:3a:52:38:
31:bf:37:60:06:4b:5b:2e:41:f7:53:0e:98:02:9f:06:05:07:
23:58:5b:e6:17:a8:b3:ad:2d:0b:cf:0a:55:40:25:d5:00:0b:
6b:fb:37:68:af:d8:82:c1:74:19:80:f5:4d:a4:63:af:a1:5f:
d9:a6:a5:48:92:9f:80:e3:31:cf:d4:3d:06:fd:bc:1c:c8:eb:
04:af:c3:51:b3:c4:03:be:cb:7c:a7:c3:63:e2:b6:a0:8f:d6:
d1:83:07:39:59:ad:3c:db:61:0a:51:71:34:d2:bd:3d:81:89:
62:93:d4:1d:ce:3b:d8:15:41:82:f7:89:5a:88:a8:3c:b5:81:
f9:e1:f6:71:61:27:28:29:bc:f0:11:ee:54:04:95:49:3b:13:
38:4b:a0:3d:57:85:8b:f7:6f:2e:0b:d5:ed:d3:fc:1a:e8:85:
38:be:a3:d8:1a:60:ea:3f:04:4f:d1:52:49:e2:29:3e:1b:d9:
fb:b0:a6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:17:50 2026 by rpki-client