Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6U0-NrddcSKgh9ezwPuSpnyc7bQ.cer
File: 6U0-NrddcSKgh9ezwPuSpnyc7bQ.cer (raw, json)
Hash identifier: rs3FTUTr0JlSW1IXvgy9SUmmFLOMN9MTIHj/3fDNQvw=
Subject key identifier: E9:4D:3E:36:B7:5D:71:22:A0:87:D7:B3:C0:FB:92:A6:7C:9C:ED:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CDA8C203983C6EAED7B8CEFB97095FD0D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Mar 2026 01:39:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200213
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:da:8c:20:39:83:c6:ea:ed:7b:8c:ef:b9:70:95:fd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 11 01:39:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e94d3e36b75d7122a087d7b3c0fb92a67c9cedb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:d9:8e:d5:b2:81:4c:32:75:73:11:31:01:
b3:13:ca:e8:4a:9d:76:58:f6:f4:30:ca:41:eb:ba:
43:cf:e6:32:2c:d9:78:7d:0f:0f:fc:bd:f2:64:a3:
0a:03:d0:d9:df:4b:84:86:ec:bc:f0:3a:bb:07:ad:
9c:b0:9c:e9:d0:3b:c7:bd:cd:a3:bc:b6:31:0b:ae:
13:8b:03:28:71:47:24:22:e0:01:e7:97:07:f5:ba:
16:f9:27:68:13:df:a4:19:30:4e:e7:b5:7b:e2:c4:
59:86:e4:68:98:9e:53:b2:2e:97:74:92:c4:4f:78:
e0:79:aa:35:c5:49:0c:60:6d:ee:7e:f5:28:18:17:
66:ca:59:ab:2c:12:e7:1d:a6:c3:ae:36:1c:ca:d2:
4e:fb:99:1b:a4:01:d3:39:b6:51:fb:74:33:0b:79:
a7:39:f2:96:38:da:24:5f:01:55:ee:fc:0d:47:3a:
83:e7:60:34:ab:50:55:1a:a7:89:54:83:dc:b6:64:
80:7e:89:98:39:60:52:8d:78:7c:8c:3e:7e:45:eb:
d5:b9:3e:2b:47:d5:d9:16:03:b0:08:a4:96:83:1d:
97:4e:da:15:07:5a:e3:7a:8a:e8:17:50:54:62:e5:
81:40:9c:13:b6:9a:54:56:05:2c:ae:ae:b6:bb:21:
3d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4D:3E:36:B7:5D:71:22:A0:87:D7:B3:C0:FB:92:A6:7C:9C:ED:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200213
Signature Algorithm: sha256WithRSAEncryption
1e:40:af:be:b4:66:ae:17:19:eb:ad:54:75:99:88:28:f0:91:
a3:ee:2e:00:08:10:1b:f7:fe:5b:19:37:5f:4a:0a:74:fd:2f:
d5:0b:fd:f9:2c:75:aa:b5:6b:c7:5c:7b:d4:46:81:fa:e1:79:
41:f1:d8:fe:cc:f2:95:55:63:34:9d:63:1b:80:30:6a:ca:72:
88:db:1a:95:3c:e3:44:e0:df:78:2f:c3:4d:41:12:cf:42:ee:
88:2f:ac:24:3a:1b:f7:76:b4:a0:50:dc:cd:53:c8:ef:a7:ed:
04:79:f5:84:1c:95:08:5f:a5:61:4c:3e:b3:c2:57:91:f1:b5:
16:73:82:68:85:f5:da:62:ba:98:57:65:30:f8:0b:2a:64:12:
8d:ae:ae:0b:3e:ed:45:cf:c4:56:e3:c6:c0:a9:b2:6d:ad:c7:
a9:99:ad:fb:1a:51:51:61:65:d3:2f:27:04:48:95:57:aa:9c:
69:cd:b2:95:19:17:4d:1c:bc:95:e6:c4:c3:9b:51:85:ca:46:
1f:11:27:fa:ba:40:64:d2:00:11:81:88:21:87:0d:3b:1d:fc:
a0:34:7e:bd:89:35:89:55:6b:76:f6:c8:04:1a:7e:eb:d0:3a:
c0:80:09:3b:ee:89:2a:46:63:c9:69:58:5c:b6:2b:20:3f:30:
0d:0d:37:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:24 2026 by rpki-client