Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9aKrEck1CB9eSaaFyDl49vc9TaE.cer
File: 9aKrEck1CB9eSaaFyDl49vc9TaE.cer (raw, json)
Hash identifier: bj+8OENhWnEXbLiKrqEAav+NMrOWxCoaIlWBfYdhyZY=
Subject key identifier: F5:A2:AB:11:C9:35:08:1F:5E:49:A6:85:C8:39:78:F6:F7:3D:4D:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C7F3BF6BC22FE35D1FCDCC55E442489
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:17:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 51999
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:3b:f6:bc:22:fe:35:d1:fc:dc:c5:5e:44:24:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5a2ab11c935081f5e49a685c83978f6f73d4da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:39:20:1a:b1:21:bf:21:f3:cf:48:16:80:
cd:1e:de:73:ee:9c:a4:56:e7:f8:10:12:56:c4:8e:
9c:e4:a7:f7:ef:9a:a7:d0:54:87:43:5a:7e:d7:89:
83:e2:6a:e3:ab:91:5b:df:78:f3:30:bf:25:fe:a0:
d0:83:51:85:7e:ad:fc:60:d0:1b:16:20:e7:7a:39:
8f:b1:f1:e9:7d:9b:be:9d:0b:02:45:13:ef:1a:a0:
87:3d:08:2c:a0:13:da:0a:76:11:d5:8e:8f:fd:f0:
65:03:7e:dd:52:14:53:99:13:91:f0:b6:1b:ea:e1:
14:86:62:80:65:34:0a:2d:40:f1:11:a0:3b:c3:5c:
b5:83:30:c0:8d:8a:41:96:f0:e1:56:1b:0a:2f:9e:
e9:04:7b:75:02:85:4f:7e:a7:3c:93:54:cb:0d:97:
01:cf:11:b0:63:86:8f:ff:20:6c:dc:a8:aa:21:19:
35:c7:f8:9b:18:7e:0f:7a:9a:f2:f5:d8:24:84:65:
fe:c3:c3:ec:3f:62:d0:9b:ff:bc:21:5a:77:0a:a8:
92:58:35:61:06:56:a4:bb:68:3c:63:34:00:37:bf:
9b:56:e2:bd:60:d8:65:37:77:f5:2a:fe:03:6a:1c:
ca:8d:7d:94:57:d6:9a:6e:fd:17:3c:20:b8:59:d2:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:AB:11:C9:35:08:1F:5E:49:A6:85:C8:39:78:F6:F7:3D:4D:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51999
Signature Algorithm: sha256WithRSAEncryption
18:9e:5c:59:38:d2:a9:d5:45:6f:59:b5:63:cc:98:74:50:bf:
a1:a4:63:80:43:3d:80:b3:5d:f6:1e:03:99:93:ec:ab:af:92:
81:be:3f:68:13:d5:10:2c:3d:5c:ef:d2:88:f9:0c:86:4c:ac:
1c:bc:f8:a9:b4:c7:a9:8f:22:62:78:34:84:14:92:cc:66:1e:
d8:9b:8a:4a:76:2a:f4:97:d7:25:87:2c:53:b2:0e:ff:d4:34:
35:ef:0c:85:15:3b:26:c1:13:92:0b:d6:61:38:52:be:e7:ff:
d3:4e:62:67:cd:58:80:a2:48:4c:e5:89:75:e4:35:eb:68:5b:
91:47:73:f3:23:8a:9b:e6:2c:d9:32:b4:6c:f4:3f:ff:ae:54:
4a:a0:1a:2c:95:6d:f0:32:94:0b:9d:ce:af:1b:35:71:1d:9c:
07:b2:3f:ca:5e:ae:e0:3a:6f:8a:7c:34:0d:7d:c2:93:ba:7a:
9e:21:8a:e6:c1:96:6a:90:7d:19:25:86:20:b6:2b:b7:10:7d:
54:04:d7:48:e6:11:cc:ed:03:40:4a:f7:35:15:50:36:e6:34:
40:06:9d:9e:24:16:a0:96:43:bf:56:75:b9:6f:e4:bb:f1:ae:
e6:34:e3:fc:0f:d0:cf:91:5c:c8:2e:94:6c:98:e0:4a:e4:10:
ef:48:e9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:55 2026 by rpki-client