Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2ma78NRZYjYmqZu-JCXgIHIJC08.cer
File: 2ma78NRZYjYmqZu-JCXgIHIJC08.cer (raw, json)
Hash identifier: 7fKRy+lcd+lDpzZcsJyujebEUA9LML2tSaLuMbu0/rQ=
Subject key identifier: DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C124C693E34250644DBEB523F6E4621
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:18:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60106
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:4c:69:3e:34:25:06:44:db:eb:52:3f:6e:46:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da66bbf0d459623626a99bbe2425e02072090b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:23:82:e2:c0:9a:6e:4a:4f:cd:f3:67:ff:
49:5e:76:17:b5:b8:9a:e4:6f:f4:53:9a:07:0e:44:
8b:f5:75:57:34:90:99:48:3f:ff:4b:46:17:fe:9c:
e0:ea:38:af:f0:0f:11:20:fc:3b:83:12:b9:7c:4f:
ec:9f:1b:95:d2:3d:c0:c6:8d:ba:2c:a1:6e:8a:e1:
61:d3:4b:11:85:d2:55:bd:70:54:b3:dc:b8:d1:72:
12:1b:ce:cb:be:fc:ed:a2:62:92:30:95:14:aa:af:
c3:12:b3:0b:1f:d1:c0:8a:8a:90:15:9a:ce:d4:35:
06:4a:88:ca:ba:a0:22:29:ce:49:c6:6b:d8:d9:bc:
76:02:18:6f:16:88:88:5d:e5:1f:7c:8f:5e:59:04:
44:ad:55:3f:e8:c4:d8:23:84:05:d5:14:b5:1c:35:
db:09:6b:9b:9e:6a:42:f5:f1:c9:07:06:d7:c4:e7:
cd:26:6b:dc:84:21:ee:20:a4:04:79:43:a6:4b:da:
45:8a:73:33:a7:a0:d3:e1:21:87:01:38:98:64:b4:
c9:de:bb:f7:fb:c2:3f:e7:e7:14:d7:51:c5:72:39:
75:bb:06:42:dd:2e:66:72:2b:fa:c9:a1:ec:df:cb:
d1:98:fe:c4:46:2c:d9:53:4b:43:ea:90:b6:99:27:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:66:BB:F0:D4:59:62:36:26:A9:9B:BE:24:25:E0:20:72:09:0B:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f509b5-2a01-456d-b410-5a471edb8018/1/2ma78NRZYjYmqZu-JCXgIHIJC08.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60106
Signature Algorithm: sha256WithRSAEncryption
5f:c0:90:bd:f6:23:cc:aa:c3:46:f9:b2:c6:5a:31:7b:ac:a3:
84:6c:08:e9:80:84:c2:b0:71:80:a2:fb:02:e0:93:4c:14:30:
e7:4b:b7:29:72:c5:94:bf:20:a6:c9:3f:02:1b:53:90:20:0a:
db:1f:ae:32:38:ab:be:07:87:51:41:b0:63:c8:85:0f:a0:5c:
f5:30:3b:e5:ab:12:12:fb:3f:e4:2f:ae:3f:4b:6d:b7:34:05:
28:37:30:36:34:18:95:1c:e2:93:59:1a:ed:1d:96:6b:e7:5b:
2f:99:8b:b6:9d:19:47:77:7a:fe:fe:d6:b8:b0:ad:a6:3b:ec:
b3:d4:6a:ae:cd:4f:31:3c:c3:bb:1f:6c:9f:b3:a4:be:bd:e5:
ce:e5:c2:6b:2c:07:5e:8a:d4:15:49:dc:82:29:13:75:ff:64:
d7:53:15:46:56:65:e4:9c:b0:59:64:24:63:6b:54:57:4a:60:
a6:97:f3:e4:8d:2f:e9:f3:77:b0:b5:14:7b:4a:04:60:42:0d:
6a:21:38:3d:77:8e:f4:e5:d0:41:f8:e6:f3:6b:4f:0a:fd:13:
b5:dc:53:09:70:97:4b:b2:41:b0:c3:62:40:be:9d:1a:6e:e0:
11:79:65:8f:46:30:c1:0d:62:64:e3:fd:2c:ff:5a:7a:56:ca:
07:ac:05:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:55 2026 by rpki-client