Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
File: 7dnow7XdvumM1_7qDf-MdiW4Wp0.cer (raw, json)
Hash identifier: RCZGYoUO9ewpFL/3lYpI5g5bdi9gw71Bvwoz2JdrZ+k=
Subject key identifier: ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B363F37F95F639431EC39BF3093A3A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:18:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203062
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:3f:37:f9:5f:63:94:31:ec:39:bf:30:93:a3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:29:22:60:9b:33:ce:b6:42:16:08:f0:95:
88:17:ab:4d:fb:4e:a4:07:0c:8e:66:81:34:16:63:
9d:8f:01:41:1b:6d:3c:c7:49:1e:ab:72:1d:b1:44:
d0:bc:ea:9d:a3:e1:48:2c:3c:08:be:20:90:dd:1b:
c2:21:7b:2c:e8:43:2f:e6:af:57:a9:f0:38:e1:5b:
ca:4a:9a:01:4c:24:b6:c7:e8:dc:91:a7:2b:54:50:
36:7b:82:e4:df:80:03:58:cd:f5:16:8a:2f:d5:6f:
31:99:61:dc:4a:70:68:19:08:3c:d1:8e:24:06:93:
3d:71:39:5a:93:b6:20:cf:a5:e9:0c:87:04:03:4b:
07:40:cc:e9:ba:a2:84:70:c9:5b:24:ef:60:7b:51:
01:0b:e1:3a:59:af:aa:5f:49:d7:b0:e5:0b:b2:40:
71:66:7e:c6:a4:0f:d2:92:af:3c:5c:df:23:d2:7d:
be:e1:32:7b:40:03:8a:a3:3d:70:82:e0:e5:2b:08:
6b:ef:eb:8d:99:79:1f:31:26:fe:3d:55:3e:6e:2b:
5f:85:d1:da:0c:e6:94:80:38:87:4a:04:be:de:65:
01:e4:c1:ea:65:80:b1:4a:c1:ae:bc:4a:60:15:85:
c3:73:27:fe:96:02:5d:24:85:74:91:5c:65:95:ba:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203062
Signature Algorithm: sha256WithRSAEncryption
9d:ae:b2:6c:05:60:e6:52:7e:2d:8c:51:74:17:a6:ed:0e:ca:
83:10:0e:29:f4:17:cd:a6:6b:fd:ee:aa:26:ed:46:0a:68:4f:
cc:3b:ba:31:c0:7f:5e:fe:2c:6c:df:3b:77:b8:08:19:2b:69:
2b:19:c9:ae:1c:3b:5d:9f:90:f1:52:9f:da:94:33:a9:56:e1:
93:a5:7b:81:e7:f3:df:45:15:3d:fb:cb:d4:d6:38:34:c3:df:
41:b5:21:de:2c:0f:67:8e:5b:fd:eb:dd:65:57:71:96:de:71:
e9:ff:3a:0e:27:50:17:12:86:fd:51:25:df:37:8c:e0:3e:fd:
46:31:32:48:f3:11:9c:58:75:ac:de:85:81:d8:67:b3:be:11:
9e:52:c9:4f:bc:88:73:7b:da:d9:e3:49:02:dc:41:07:af:b8:
f5:0d:5a:ea:b2:e5:3b:73:aa:d6:30:6a:2b:4c:ef:ce:58:e1:
06:1b:b2:3f:40:d0:58:5b:8b:c0:9d:f0:43:91:79:87:a6:56:
a7:0a:db:3c:e5:8d:3a:30:e5:14:c8:95:1d:c5:db:29:2a:16:
56:f2:3b:40:d8:b7:fa:85:cc:b7:1d:81:9f:5d:7c:72:9f:71:
1e:ed:d9:41:25:8b:b2:40:18:a3:cf:a0:16:7b:2a:c9:c8:d0:
37:5f:33:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:54:27 2026 by rpki-client