Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9Tft6fqVsopa58ma27qsidTAz7w.cer
File: 9Tft6fqVsopa58ma27qsidTAz7w.cer (raw, json)
Hash identifier: dIzfglOtjOQiI1t/tlvYqcdM7eHIFITqBC6y6Bu/Pnk=
Subject key identifier: F5:37:ED:E9:FA:95:B2:8A:5A:E7:C9:9A:DB:BA:AC:89:D4:C0:CF:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0DBC7A404BB931566FFA03C2974F2B90B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/ba5010-6f1c-4e73-82e1-18fa66acdf54/1/9Tft6fqVsopa58ma27qsidTAz7w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/ba5010-6f1c-4e73-82e1-18fa66acdf54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 26 Sep 2026 03:34:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198681
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:c7:a4:04:bb:93:15:66:ff:a0:3c:29:74:f2:b9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 26 03:34:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f537ede9fa95b28a5ae7c99adbbaac89d4c0cfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f3:21:e5:ae:76:78:cb:64:59:56:78:dc:94:
a4:4f:df:20:36:b0:17:32:13:f2:ea:f2:07:62:fe:
a7:cc:3e:55:70:3f:98:4c:04:70:12:c9:ce:b3:cc:
f3:11:26:00:f1:c8:e4:b9:2c:ba:fc:f0:f0:04:ee:
50:a2:a5:7b:d2:46:b7:95:76:1d:06:07:4b:81:a0:
b3:ef:66:d5:b9:63:1f:de:90:0f:1b:f0:ee:b1:70:
18:b3:14:46:1f:96:0c:65:25:15:8d:26:0c:56:38:
c0:49:75:78:3e:d0:69:a9:8d:9e:0f:6a:5a:f2:b3:
b1:d0:7c:77:03:d0:01:80:fa:d7:95:53:18:52:73:
5a:73:08:2b:77:98:d0:ea:4c:57:d1:ca:46:05:a1:
ef:a2:5f:d2:80:8e:af:b9:5d:e2:54:66:8c:fc:1f:
4f:3e:c5:ac:b1:65:e1:cc:63:00:dd:68:cf:42:87:
6a:85:09:4a:11:0a:ea:0a:60:4b:d3:90:3c:d6:a7:
95:32:d4:21:0b:f5:88:8d:33:82:94:e3:51:fa:cc:
92:3e:34:c3:72:5a:0e:a2:41:b8:15:bd:01:c7:6e:
7d:1b:64:2f:31:39:87:c3:1b:22:cb:8a:3b:b2:a7:
ea:ae:67:18:42:33:f6:90:31:0d:1e:53:ad:09:eb:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:37:ED:E9:FA:95:B2:8A:5A:E7:C9:9A:DB:BA:AC:89:D4:C0:CF:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ba5010-6f1c-4e73-82e1-18fa66acdf54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ba5010-6f1c-4e73-82e1-18fa66acdf54/1/9Tft6fqVsopa58ma27qsidTAz7w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198681
Signature Algorithm: sha256WithRSAEncryption
a0:3a:ef:7b:99:ec:cf:79:5b:56:c0:80:10:19:74:5a:0a:e5:
8c:4a:b2:63:b0:2f:97:02:20:40:86:a4:75:c3:dd:2e:e4:66:
ff:92:89:d4:d9:2b:67:45:c4:ba:cf:c7:51:45:eb:b1:04:f2:
3f:10:1c:3e:f0:71:aa:9d:1d:2b:e3:99:c0:e7:61:db:d8:09:
08:8b:5f:8d:db:a6:b6:9c:08:b0:ce:63:6b:03:4b:58:50:36:
82:d5:ef:da:45:65:f6:7d:03:17:98:49:c8:22:fc:19:3d:7f:
27:ab:1c:3b:d3:13:7a:48:9c:e3:62:68:a4:52:c5:60:ed:37:
ec:8d:9e:ca:f8:a9:ae:a7:bd:83:d8:25:83:44:8f:ca:56:57:
27:e4:fa:52:bd:be:97:88:77:7c:2f:4b:2c:1f:3b:13:7f:f0:
fc:53:1d:ad:89:1c:53:90:c3:d2:8d:21:60:1a:46:56:3d:1d:
05:3a:1e:22:f7:45:f3:66:ed:ec:5e:17:f6:11:99:9b:19:3c:
0c:89:81:47:15:6d:b4:ad:6e:92:14:2d:a7:62:78:36:b5:2b:
43:da:5b:13:04:57:0b:93:47:3e:31:b3:51:4b:ca:c1:35:9f:
79:fa:69:b4:b2:d1:db:bc:c2:4f:93:11:45:6b:26:15:f0:7f:
ba:97:ac:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 21:28:09 2026 by rpki-client