Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86s6YdwOB9DHYXN-TcPPDo96how.cer
File: 86s6YdwOB9DHYXN-TcPPDo96how.cer (raw, json)
Hash identifier: 242GFOyOCdZisdprxx+D4W0ptCcNk65nHUnfzCciT6s=
Subject key identifier: F3:AB:3A:61:DC:0E:07:D0:C7:61:73:7E:4D:C3:CF:0E:8F:7A:86:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DE49AFC51047C526EE314D6A8FC705DA7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 May 2026 17:34:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198155
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e4:9a:fc:51:04:7c:52:6e:e3:14:d6:a8:fc:70:5d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 1 17:34:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3ab3a61dc0e07d0c761737e4dc3cf0e8f7a868c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:9e:e2:91:14:20:6d:0d:f2:d9:ea:d4:99:
09:fc:f0:ac:79:1f:68:80:ec:09:4e:f9:62:59:0b:
f2:fe:d6:a2:ee:24:28:65:45:9f:9c:3d:f8:e3:d2:
65:19:a3:c6:89:d5:b3:41:bb:ff:b1:ea:6d:8c:76:
45:03:c9:76:1a:25:c8:b6:af:e0:06:56:1f:15:c7:
e3:42:51:ea:60:6f:e9:c9:5d:35:4e:3f:d3:aa:dc:
37:49:c6:f3:b9:02:ab:be:f4:cc:b5:d4:03:5b:1d:
51:84:bf:d8:e1:8b:6a:3a:99:f4:76:a9:38:cf:b1:
89:20:e9:84:89:ff:40:ce:4b:ce:a9:aa:e7:4c:9f:
a1:2e:c7:d6:ef:bb:5a:21:99:6f:9b:d7:c3:b5:e0:
7c:bd:a1:e3:4d:87:1c:c7:96:83:f3:3c:6f:d0:9e:
24:86:07:ff:be:1f:5e:c3:f1:fd:99:07:b1:d9:e5:
ce:27:0b:86:21:2a:69:33:f3:93:2c:35:a5:67:28:
38:87:a7:23:b1:17:a2:74:2c:5f:a0:6a:29:0e:08:
8a:40:f0:65:a5:57:99:8e:0a:e1:02:41:27:9a:48:
11:93:f9:9c:8d:5e:41:56:78:5a:95:23:c7:1f:00:
8e:39:f8:84:f1:0f:88:69:2b:f7:64:a0:14:5d:2d:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AB:3A:61:DC:0E:07:D0:C7:61:73:7E:4D:C3:CF:0E:8F:7A:86:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198155
Signature Algorithm: sha256WithRSAEncryption
33:bb:db:49:ed:c6:86:1f:8f:e3:a1:98:23:6d:51:f1:08:cd:
93:62:df:ca:3e:c9:43:f3:e8:16:64:b7:d4:3b:2f:7c:10:f7:
b5:87:a5:3b:7b:30:9b:c5:48:b2:9b:9d:42:16:b2:27:7e:2f:
97:82:cc:37:a7:4b:4e:20:8d:e4:c4:66:a4:f8:80:24:34:f0:
3f:cd:9c:62:6d:8e:48:8c:6d:89:35:da:b0:e3:dc:7e:e9:9c:
50:51:11:51:d2:c1:74:00:fb:cb:0d:a3:d4:8f:5e:5f:15:c3:
bf:52:d4:b9:d4:2f:2d:88:39:36:55:5f:b5:de:a2:7a:12:48:
09:6d:2a:f6:28:99:6c:78:57:a7:61:d7:ee:5c:a0:b9:19:50:
6f:b0:90:ea:13:8f:c6:ae:84:b0:71:b8:2f:dd:ed:7f:31:d4:
49:34:8f:e3:f4:99:af:d1:ed:9d:1d:62:02:ec:1c:20:4e:10:
58:5d:da:85:a4:f4:d1:17:94:ed:fc:34:b8:b2:40:70:1e:84:
29:7c:da:35:f9:62:fb:35:fe:ac:b1:c6:82:53:77:74:cc:6c:
77:6e:04:c3:1b:08:4f:74:cf:05:f1:33:21:58:cf:c6:76:49:
81:67:c0:6f:c7:cd:05:f8:e1:46:79:40:7d:6c:4e:40:2b:bb:
c2:34:1d:66
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZ3kmvxRBHxSbuMU1qj8cF2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNTAxMTczNDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2FiM2E2MWRjMGUwN2QwYzc2MTczN2U0ZGMzY2YwZThmN2E4NjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUae4pEUIG0N8tnq1JkJ/PCseR9o
gOwJTvliWQvy/tai7iQoZUWfnD3449JlGaPGidWzQbv/septjHZFA8l2GiXItq/g
BlYfFcfjQlHqYG/pyV01Tj/Tqtw3ScbzuQKrvvTMtdQDWx1RhL/Y4YtqOpn0dqk4
z7GJIOmEif9AzkvOqarnTJ+hLsfW77taIZlvm9fDteB8vaHjTYccx5aD8zxv0J4k
hgf/vh9ew/H9mQex2eXOJwuGISppM/OTLDWlZyg4h6cjsReidCxfoGopDgiKQPBl
pVeZjgrhAkEnmkgRk/mcjV5BVnhalSPHHwCOOfiE8Q+IaSv3ZKAUXS2QiQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFPOrOmHcDgfQx2Fzfk3Dzw6PeoaMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzc5OTA4
OC05OWNlLTQ4MmUtOGNhNC1iZmY0ZGVmMzViMjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvNzk5MDg4
LTk5Y2UtNDgyZS04Y2E0LWJmZjRkZWYzNWIyMC8xLzg2czZZZHdPQjlESFlYTi1U
Y1BQRG85Nmhvdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMGCzANBgkqhkiG9w0BAQsFAAOCAQEAM7vbSe3Ghh+P
46GYI21R8QjNk2Lfyj7JQ/PoFmS31DsvfBD3tYelO3swm8VIspudQhayJ34vl4LM
N6dLTiCN5MRmpPiAJDTwP82cYm2OSIxtiTXasOPcfumcUFERUdLBdAD7yw2j1I9e
XxXDv1LUudQvLYg5NlVftd6iehJICW0q9iiZbHhXp2HX7lyguRlQb7CQ6hOPxq6E
sHG4L93tfzHUSTSP4/SZr9HtnR1iAuwcIE4QWF3ahaT00ReU7fw0uLJAcB6EKXza
Nfli+zX+rLHGglN3dMxsd24EwxsIT3TPBfEzIVjPxnZJgWfAb8fNBfjhRnlAfWxO
QCu7wjQdZg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:07:50 2026 by rpki-client