Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2PDDRgpyhimVO1uoZcPQDBdsWYA.cer
File: 2PDDRgpyhimVO1uoZcPQDBdsWYA.cer (raw, json)
Hash identifier: CBsulK5qc4dpkOaQX43TD9fdFUfYJmvrX4dkxVw3enc=
Subject key identifier: D8:F0:C3:46:0A:72:86:29:95:3B:5B:A8:65:C3:D0:0C:17:6C:59:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F97CE2C05DC7722BDCDFBEE4FD437C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/2PDDRgpyhimVO1uoZcPQDBdsWYA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207536
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:7c:e2:c0:5d:c7:72:2b:dc:df:be:e4:fd:43:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8f0c3460a728629953b5ba865c3d00c176c5980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:24:db:5e:65:d7:b8:98:b5:ca:84:d3:ab:
73:6f:0d:c3:f1:9f:8e:93:07:c3:3d:9d:fe:e9:62:
4b:99:15:07:88:24:b4:e6:5a:58:56:f5:00:c1:50:
f8:8f:83:82:bd:62:54:2d:91:ce:fb:c1:ec:7b:16:
a5:37:24:62:6a:2b:28:d6:98:1f:9b:9f:10:3c:79:
14:12:f4:7d:6c:60:ff:27:ba:ab:b0:33:cf:02:f7:
6f:66:fa:72:2d:4c:ad:79:26:97:d1:27:98:b6:92:
65:28:fe:fb:83:d1:e0:aa:e0:6f:ac:a0:f6:07:6b:
05:07:cb:13:d1:f8:94:b8:46:87:56:50:ce:5c:ea:
95:7e:81:ba:ca:c6:d3:d1:0c:a8:55:7c:0f:55:3f:
c5:b3:d4:19:95:1c:cb:60:fa:0b:0f:63:de:ba:d5:
52:93:c4:90:17:66:3f:57:bc:75:e8:5a:7d:99:0e:
10:9e:f8:af:2f:2a:5d:e7:2d:43:b7:ff:b5:dd:73:
a8:9e:30:03:69:14:f0:55:b6:6a:04:d4:c2:dd:47:
b8:c7:18:d0:ae:86:f1:0d:89:a1:f6:31:ec:34:4d:
3d:df:a8:23:ee:f2:91:84:07:57:27:61:14:c0:46:
f1:36:46:5f:8f:2f:11:a9:14:31:1b:93:36:38:cd:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F0:C3:46:0A:72:86:29:95:3B:5B:A8:65:C3:D0:0C:17:6C:59:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/2PDDRgpyhimVO1uoZcPQDBdsWYA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207536
Signature Algorithm: sha256WithRSAEncryption
3a:af:77:ba:72:3b:11:a6:2a:bc:cf:d7:98:18:c2:3b:87:2f:
7b:ab:b5:92:f9:eb:8b:30:4c:ae:f3:ea:e5:cf:d0:83:00:30:
8b:02:d9:72:f5:03:71:f4:27:c3:f2:3e:06:1b:8b:f3:0d:10:
70:a4:23:61:13:e2:fa:4a:53:4f:ba:41:5a:aa:6f:ed:cb:ed:
03:30:4e:31:c0:40:1a:a3:b7:fa:e7:1a:5d:14:d2:a6:d5:a8:
00:f4:ad:74:f8:fb:a3:66:74:fb:47:f2:7a:73:21:b5:52:a1:
8a:c3:f0:d0:ea:a1:b4:04:08:19:85:98:71:f3:cb:bd:2a:30:
66:bb:2f:99:f5:ff:05:ff:25:23:ed:6b:e0:26:80:88:58:c7:
ae:5a:49:af:4e:aa:a2:fb:ee:b8:85:9c:0c:5a:58:fa:44:3f:
27:d2:13:64:df:09:47:3f:02:40:6e:c3:b6:56:63:15:0f:2e:
8a:07:eb:d9:fc:77:7f:29:4c:22:dd:30:8f:b0:fc:a0:77:2e:
92:75:37:19:cb:d9:6a:22:73:b6:25:44:8d:3e:95:b5:a4:6f:
62:4c:cd:43:55:7a:13:f3:ec:aa:b5:cb:54:53:e8:99:01:dd:
33:7d:58:8c:ae:6e:c9:6d:1d:fc:9e:55:09:9f:56:16:03:ac:
bb:cc:ce:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:09 2026 by rpki-client