Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34IML0VYrBCvX1xwucbsJ2OAhOw.cer
File: 34IML0VYrBCvX1xwucbsJ2OAhOw.cer (raw, json)
Hash identifier: jLZPpU3iO5z532hU4sjCqB2zIpXnG+wyvZHr8nzVFIY=
Subject key identifier: DF:82:0C:2F:45:58:AC:10:AF:5F:5C:70:B9:C6:EC:27:63:80:84:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9360C7961EC1691157B2746F67661
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212508
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:36:0c:79:61:ec:16:91:15:7b:27:46:f6:76:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df820c2f4558ac10af5f5c70b9c6ec27638084ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:05:fc:44:35:c9:5c:5c:88:92:10:fd:1f:
b0:ce:05:dc:c7:ab:ce:d7:55:4f:e3:c4:1d:27:9c:
f4:d6:df:4c:34:86:b3:62:97:26:80:62:b5:ee:a8:
34:6a:63:91:ba:f5:3c:ce:35:3c:ff:63:a7:f0:92:
09:e4:3f:38:32:f5:14:00:e3:63:98:36:18:8c:89:
42:09:51:d6:47:ff:fb:6b:d7:6e:d3:48:68:6e:68:
cc:69:a2:d8:f5:36:a4:d2:52:da:27:59:05:ff:a3:
0b:82:58:11:5e:ec:49:6b:98:6c:67:50:db:32:45:
ff:88:6c:72:a0:b2:12:77:5b:0b:76:0e:0b:a1:60:
b8:ed:47:16:af:e2:3e:a7:45:94:42:d5:76:3b:cb:
f9:a5:f6:be:8f:7e:d6:3d:6f:b6:c6:e2:23:a5:02:
40:a1:07:db:89:20:58:d9:18:13:8d:da:16:5d:47:
79:f8:5d:48:08:be:0e:49:80:cd:a5:73:b9:7b:e5:
9c:dd:6d:d1:27:d2:87:64:6c:0e:3a:d4:81:59:0d:
99:ed:dc:11:be:8f:c9:ba:0f:c1:4b:73:ce:7f:b6:
3e:62:e4:d5:a4:7b:8f:05:0e:69:18:3c:87:21:5b:
74:b1:90:ce:2d:02:3d:d6:bd:d8:ab:a6:7f:06:3a:
cb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:82:0C:2F:45:58:AC:10:AF:5F:5C:70:B9:C6:EC:27:63:80:84:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212508
Signature Algorithm: sha256WithRSAEncryption
80:bf:5b:f7:1e:1c:f8:53:ba:2c:c0:9a:3c:45:ad:30:4d:f0:
29:ec:04:28:57:96:0f:07:a5:83:aa:d2:59:2e:01:2d:e4:02:
a7:be:0b:a9:ee:cb:ba:16:a9:05:03:2b:67:9b:a5:6f:32:d0:
f1:ad:fa:e3:80:ba:48:ba:85:87:3c:c5:6e:d7:dc:6a:4e:dd:
04:1d:f5:eb:25:32:68:18:87:d1:9e:25:e1:59:b0:3e:a6:79:
e7:f5:d3:a2:30:57:18:96:96:60:c5:8d:3a:b9:6a:7d:45:8f:
20:be:84:08:0f:84:55:44:80:d1:1d:fa:5e:94:d8:13:1d:c8:
ef:d2:c4:a6:5c:cb:5c:da:71:ba:f2:e0:fe:b7:53:e4:5b:b1:
9e:33:1b:05:bd:87:fb:05:4f:ae:a5:18:f8:ac:26:97:c4:78:
55:bd:94:3f:bf:9b:f0:d8:9d:e2:87:78:84:be:ed:03:e6:ea:
22:07:e9:99:b9:45:c7:d9:40:49:12:c5:08:5c:3f:a7:f5:48:
7b:33:91:ca:9b:a5:8d:3d:32:9c:a9:81:91:45:47:5c:f8:98:
52:6d:41:5b:7e:44:d2:e3:90:94:9c:aa:fd:1b:69:ec:b3:df:
a8:41:f0:93:0b:0c:75:26:5a:a8:43:cf:5a:ae:57:08:89:cf:
45:ac:56:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:12 2026 by rpki-client