Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
File: 7fBEw2PXiOdDNOE24DzH_R5JohY.cer (raw, json)
Hash identifier: TBDXG2AbpFHYR0tvKu5DAGeer0tdGMDhzsSzkbJjPyo=
Subject key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77592E67B7782AE959CE04248804A77E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:18:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209742
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:2e:67:b7:78:2a:e9:59:ce:04:24:88:04:a7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edf044c363d788e74334e136e03cc7fd1e49a216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:81:9c:4d:00:8a:49:34:7f:d5:0d:40:ca:
91:6c:23:94:e9:93:28:9d:94:1f:3a:02:55:24:e4:
59:6f:f1:d7:9e:95:69:02:df:80:68:b6:59:26:13:
06:48:5d:5e:b2:35:32:de:2d:cc:f6:df:03:87:a2:
14:4f:0a:bb:88:48:11:a7:2e:76:78:72:ac:1c:55:
80:9b:31:06:49:3a:48:8c:07:a2:82:8b:2d:a1:4a:
42:2e:0c:d7:68:e2:44:a5:e8:08:07:a5:0f:39:39:
99:10:8d:59:cb:9f:cd:14:68:f8:d4:24:34:18:ef:
49:af:06:2b:cb:e7:76:01:84:ed:16:70:ad:56:94:
b2:85:ac:93:a8:c4:44:51:e0:85:ef:22:00:0d:96:
b6:14:d3:4b:88:c7:f0:60:96:d3:bf:86:4b:07:4e:
5e:a1:7f:7e:d4:9f:56:c4:4d:c1:de:5b:fa:73:72:
43:6d:f2:a8:2b:a0:9b:6d:68:f4:10:a0:32:e5:87:
a1:5f:c6:e1:6a:5a:34:49:92:27:3b:07:f7:36:b8:
4e:40:cc:79:5f:25:8b:6c:15:35:e2:e2:64:55:c5:
eb:f0:dd:3b:76:30:e7:af:61:1d:83:a5:c3:92:87:
ad:e3:f8:f1:48:38:9a:7f:69:76:20:75:48:cf:e8:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209742
Signature Algorithm: sha256WithRSAEncryption
81:f8:a0:fb:2c:48:86:03:a2:34:89:14:be:6a:b4:ef:33:fc:
05:37:1f:d6:d2:85:6f:8d:a7:2c:03:c4:1b:a3:5d:b9:9b:15:
86:e1:c5:4f:f4:81:4b:39:3d:78:a0:56:80:24:89:17:db:fe:
ae:d8:f6:55:54:de:bb:b1:08:22:50:ff:0b:99:cc:76:be:0e:
3b:cf:75:53:75:cc:12:86:be:5f:da:d9:6c:2c:25:38:6c:b6:
50:af:8b:5b:fa:64:f4:6b:5e:0c:09:58:50:87:c5:c7:f3:7b:
cb:35:9a:28:8f:13:15:f5:dc:a6:87:f5:0d:dd:84:58:8b:a9:
26:5e:f8:7f:e4:9d:02:0b:d1:62:33:ae:29:cd:cd:1b:52:fe:
d4:b5:07:f1:6e:62:82:d6:c9:af:d8:c9:13:de:8f:69:c1:ac:
23:d2:a5:8f:d3:c4:71:a0:9c:65:49:d0:29:42:a2:d6:d9:90:
8d:ac:1c:73:64:38:21:aa:c6:f6:b7:58:08:6e:0c:15:7d:f3:
8c:8d:56:7b:4b:b1:27:1a:a3:a1:c1:70:5a:c9:a6:90:5e:5d:
27:dd:cd:ec:b2:0f:8a:68:28:a3:3f:99:a9:c8:63:32:95:b5:
81:f8:a3:12:cc:59:f5:f7:b6:4b:91:03:b2:16:61:8f:45:e7:
25:cf:cd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:54:05 2026 by rpki-client