Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
File: 28kgJa2zaMuVMgmJhgdwebAcFlU.cer (raw, json)
Hash identifier: IYtlDQNZqNJOt8i2OFsJqTslUdeM3056NcBIdr4FioQ=
Subject key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CAEF9CA7A296712EA1C39C1EBC07ABD22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Mar 2026 14:35:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200477
AS: 212200
IP: 77.235.32.0/19
IP: 185.140.164.0/22
IP: 2a07:340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:f9:ca:7a:29:67:12:ea:1c:39:c1:eb:c0:7a:bd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 2 14:35:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbc92025adb368cb9532098986077079b01c1655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:7a:68:f9:34:e4:51:c2:4a:73:05:6d:8d:
61:c8:75:48:d2:a9:d0:cb:89:cd:a9:9a:3d:7f:9b:
23:52:8f:76:94:51:5c:be:5c:be:39:26:39:0a:07:
6a:72:3c:91:e8:17:df:70:2e:d9:62:0c:95:86:8e:
e8:a7:62:7c:ee:93:1b:dc:6a:2a:f2:15:10:1b:47:
df:c9:34:b0:7c:72:74:75:24:cf:c2:fa:30:32:7d:
09:2e:da:28:12:79:32:a5:9e:6b:7d:87:93:94:39:
77:0d:af:24:12:ec:c6:57:bc:bb:40:b3:ba:8d:b1:
0f:74:f3:2c:83:9f:06:31:5a:e6:c3:d7:66:53:b5:
31:94:5e:be:84:01:56:f0:e6:74:d8:c8:5c:7a:5c:
17:79:8c:00:cb:42:f7:78:34:8d:0c:b5:78:5e:f7:
a2:3c:e7:91:a2:24:c7:cc:f5:4d:86:a0:05:0d:ca:
f3:90:c4:be:31:62:76:b1:69:32:ea:00:48:3a:29:
54:4e:39:7d:aa:97:bd:c8:2d:e2:9b:a0:87:01:4a:
48:79:34:14:92:af:e7:ee:01:79:91:91:b4:89:22:
af:6d:5c:26:95:60:b8:fd:88:f2:4f:2d:4b:3e:f9:
e2:cc:23:4f:52:2b:62:4c:1c:6f:04:11:c3:3f:91:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.235.32.0/19
185.140.164.0/22
IPv6:
2a07:340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200477
212200
Signature Algorithm: sha256WithRSAEncryption
97:23:83:c5:21:0a:da:f6:36:93:77:36:16:59:96:83:af:b6:
12:6b:e5:47:63:42:15:2f:fe:cf:10:f9:f6:76:e1:d3:42:55:
47:dd:69:1f:d3:d7:4d:36:91:33:a2:a9:42:19:df:49:0d:01:
19:e7:36:3a:9a:d9:86:8f:16:98:e4:10:28:a9:a1:0e:42:be:
b7:cf:d2:cd:5d:2a:68:4f:ec:c6:fc:3c:f8:86:e0:5d:0e:0a:
48:88:66:46:11:e8:a7:49:e1:c6:e9:a5:65:f0:79:7f:57:18:
17:87:e3:42:ad:0b:59:53:4b:47:b5:05:d6:a4:b1:8a:69:69:
fc:09:3a:f9:ed:7d:3b:14:7d:01:6f:54:f3:6a:81:5b:a7:2d:
93:70:47:b7:c7:40:8f:d3:70:78:6f:77:ba:a7:d7:9d:83:7e:
d9:16:b1:13:15:f5:e8:09:3a:03:33:fe:20:f7:82:24:e7:4e:
1e:07:00:25:8c:13:8a:f3:23:71:d1:f4:7c:da:fb:f9:d1:8b:
40:85:d1:b2:a8:f4:d7:c0:35:8b:d4:92:5e:28:b1:95:ce:dd:
9c:0a:a3:f4:4c:a1:46:ca:f4:64:d7:7a:f6:8d:64:f8:0c:4f:
e5:46:82:1b:fd:8b:a8:fb:68:72:c1:52:7b:69:4e:a8:63:7d:
9d:85:34:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:12:11 2026 by rpki-client