Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
File: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer (raw, json)
Hash identifier: gzaROepPF18koKHlQeGYhpilpN4R41fjl/GGCS7Ta7g=
Subject key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A2BB7788AB6C32BC84891992928EC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62034
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:bb:77:88:ab:6c:32:bc:84:89:19:92:92:8e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f09760cf11ef2b862187b05e5d751c734c634b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:38:f1:6a:22:e4:89:11:3f:23:1f:1a:63:
e2:62:d6:10:bf:f1:7f:91:0e:7a:c9:62:60:a4:7c:
ac:7e:cb:b3:c5:92:fa:e1:80:de:b8:7f:7b:d6:7e:
33:6f:db:ad:66:b3:b5:a3:f1:85:3c:b4:51:14:92:
31:df:f9:0e:48:58:b9:a4:3e:0e:f2:88:85:14:8f:
c4:0f:fd:49:07:1d:e6:1b:65:4a:72:d5:e9:34:21:
a7:08:03:2e:33:04:ad:47:c0:3a:af:15:d5:b7:bb:
7d:d2:34:85:95:84:fa:17:c8:b5:e2:75:de:16:a2:
53:22:82:5d:b3:b6:51:cd:5c:1a:57:c8:2d:55:49:
84:0d:46:42:51:1e:12:59:88:17:2e:9c:29:ba:b1:
5a:7e:45:1d:65:05:05:d6:de:aa:f4:5a:6f:f1:49:
04:92:f2:87:df:e6:10:bd:41:db:aa:2d:0a:d1:08:
ae:76:6c:21:09:40:9c:e7:ef:01:1f:d1:34:12:4f:
ef:2a:92:d9:13:9a:d5:2e:d9:4b:f4:69:06:02:a9:
2c:74:b5:07:6b:18:ac:88:a4:5e:12:3c:06:82:fd:
14:65:23:b0:12:a7:73:d8:1a:a0:3a:b0:55:e9:c6:
3f:28:62:e0:1b:dc:a9:a5:30:39:f5:9f:98:07:cf:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62034
Signature Algorithm: sha256WithRSAEncryption
73:d7:ef:3a:46:e0:b3:3c:40:b5:a3:fc:ec:74:55:71:68:78:
7c:66:38:0f:74:58:94:0f:ec:3b:bd:77:05:4f:e1:05:aa:64:
14:92:93:0c:df:09:80:e3:9b:bc:cf:00:34:ec:2a:44:7d:77:
9f:5e:4a:c4:df:f7:a7:dd:98:ad:dc:4f:07:1d:c5:03:f9:af:
c9:07:8d:34:25:02:11:36:8b:3f:91:2d:f8:70:99:2e:90:88:
0b:9e:00:97:09:22:1d:e9:23:bd:5b:26:6f:2a:13:82:90:d4:
63:b8:17:99:37:31:83:df:d8:c2:0b:e0:52:15:06:f8:c5:1d:
1c:a0:74:73:06:cd:71:7b:48:48:95:58:e0:45:df:bc:93:4d:
e2:fd:7f:0f:01:55:8c:d1:8c:47:cc:e9:fe:42:ba:3b:bb:61:
f4:11:48:fe:81:62:be:ae:0e:c6:8b:a0:87:4c:50:a8:90:3c:
56:5e:b6:90:9e:53:1f:22:d0:08:23:d3:8b:66:83:92:2d:27:
05:38:88:65:66:bb:2f:79:a5:35:73:59:4c:6d:84:1a:62:54:
22:a6:41:dc:8a:4c:5e:e7:9a:5f:82:b3:60:eb:f6:fb:d7:a4:
53:66:a1:bc:43:c5:27:d3:a5:a1:f8:60:59:15:0b:28:87:c6:
d1:41:eb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:59 2026 by rpki-client