Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6fEf0LwGH5d6F2oq5eHKd9q5DjY.cer
File: 6fEf0LwGH5d6F2oq5eHKd9q5DjY.cer (raw, json)
Hash identifier: zXdrhSvSVjg6Qb1qoHT7sZ0BZ1rNjUT6tUiZV4YgiG8=
Subject key identifier: E9:F1:1F:D0:BC:06:1F:97:7A:17:6A:2A:E5:E1:CA:77:DA:B9:0E:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB3ADA038C6E3B9479BD87F2C9C6E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/6fEf0LwGH5d6F2oq5eHKd9q5DjY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34002
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:3a:da:03:8c:6e:3b:94:79:bd:87:f2:c9:c6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9f11fd0bc061f977a176a2ae5e1ca77dab90e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:dd:c1:ef:55:37:57:54:ec:b0:a2:b8:2b:
a1:e6:1b:b7:6d:d5:9e:b1:07:38:c9:5e:15:b7:f6:
f1:94:60:4a:71:b7:28:85:44:72:ca:74:91:d4:df:
8b:96:b5:0f:50:24:3e:8f:9c:b1:cb:14:f8:68:39:
c3:e5:3f:72:25:8e:0f:f6:60:aa:fc:d6:d4:f5:20:
7e:4b:c5:92:90:fd:42:4a:5b:c8:df:ab:d0:98:ea:
bb:43:09:e1:20:2e:e2:46:0c:97:b3:20:74:54:ab:
09:73:77:12:d4:29:e8:cd:e0:44:1e:a4:66:c7:2a:
1f:89:e4:de:6e:c3:21:c6:d7:99:e9:7e:3d:35:b5:
2e:f0:0c:94:7f:9d:ea:9e:65:52:55:7d:6a:04:14:
13:e4:91:82:62:9d:45:3f:31:07:64:34:00:67:92:
0d:53:fa:4b:8c:d8:1d:62:ff:a9:6d:ff:94:9a:f3:
74:fb:e3:74:f4:6d:8f:2f:28:f7:29:59:74:df:f3:
a5:c8:e9:c6:f1:e0:b1:8c:a3:63:f0:21:bc:29:9e:
7e:c2:4d:ba:45:2e:c7:c4:73:38:9f:8b:9a:98:8b:
a1:3c:bb:43:a5:24:60:3a:81:5a:ec:aa:8d:33:0e:
4a:8b:34:1c:ba:14:d7:98:74:8e:ce:6c:80:0b:75:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F1:1F:D0:BC:06:1F:97:7A:17:6A:2A:E5:E1:CA:77:DA:B9:0E:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/6fEf0LwGH5d6F2oq5eHKd9q5DjY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34002
Signature Algorithm: sha256WithRSAEncryption
2d:62:aa:7e:b1:74:42:b1:ee:a4:22:fc:61:d3:ff:0c:bc:12:
99:3c:59:42:ee:9f:c8:65:2f:5f:9b:bb:3a:a6:ca:6e:88:73:
2d:27:69:07:8f:53:5a:19:c1:2f:68:4a:f9:e4:10:1e:c3:cc:
e6:20:66:ea:2c:b7:a9:9d:54:c5:fc:27:62:8b:d8:de:b8:be:
ec:01:46:4c:36:03:25:c9:ec:65:e6:ec:f1:96:6f:60:fc:8f:
f6:47:95:9d:2c:ae:ca:c9:8c:bb:cc:31:ee:7e:c5:d0:bb:71:
b8:38:68:64:06:de:17:c6:6f:0c:b4:c4:1f:b6:84:a0:87:c1:
1a:44:9e:9e:f1:2c:0e:45:3a:c1:cd:77:89:38:62:c6:29:c8:
29:35:01:81:48:f8:f5:85:af:c6:1e:60:ba:65:1d:ed:33:d0:
7f:f1:2e:3e:9b:50:da:bd:8c:35:2b:75:e7:9a:e5:84:b2:53:
c0:a4:7c:e2:b3:cb:72:75:af:b8:ec:2e:3c:92:80:17:13:97:
77:a0:d7:f2:bf:f8:c4:f4:ff:d6:a8:85:75:26:b1:b8:9f:e6:
5f:a1:4e:ec:ea:32:ce:c9:55:40:7c:66:7c:2b:6b:53:7a:ff:
65:b2:d9:64:25:cb:5a:d0:46:39:10:ec:cb:b4:73:14:a7:d4:
1f:2a:af:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:27 2026 by rpki-client