Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9cFt91G8fHGwA5bo7KeGnxYfbTM.cer
File: 9cFt91G8fHGwA5bo7KeGnxYfbTM.cer (raw, json)
Hash identifier: j1Nquec5imx34xSZMey1fkEIH+O6YmCmUjoy8qVVmMI=
Subject key identifier: F5:C1:6D:F7:51:BC:7C:71:B0:03:96:E8:EC:A7:86:9F:16:1F:6D:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A03D4F985B7576AA8B1C87B2FCDFA0E839
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 26 Aug 2026 09:03:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39555
IP: 89.105.160.0/19
IP: 2a00:cac0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:4f:98:5b:75:76:aa:8b:1c:87:b2:fc:df:a0:e8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 26 09:03:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5c16df751bc7c71b00396e8eca7869f161f6d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:d9:84:63:21:73:42:76:29:3e:ee:d2:d7:
0a:86:56:61:fc:2f:48:79:42:72:c2:36:3f:95:05:
20:97:1c:25:6e:e5:60:f9:f5:58:a4:c7:a1:67:1e:
d3:5f:61:9a:67:3b:5a:85:38:c7:08:41:55:3d:10:
e7:5e:69:a6:21:75:31:b1:80:f2:df:52:b4:0f:ba:
d5:23:2b:5c:48:75:a5:0e:bf:d8:af:28:e6:2b:3a:
94:09:2f:8a:74:a1:5c:68:5c:30:19:bf:85:02:99:
4b:06:26:6c:b8:cc:84:90:22:60:44:da:fd:20:17:
e2:4c:1a:de:fc:84:f0:60:1c:35:a6:e0:75:20:0f:
f4:56:6e:62:09:60:ee:08:72:83:75:e2:e1:9e:08:
34:38:a7:4e:ba:34:78:6b:9f:a2:99:cf:1e:fb:df:
f2:c5:04:3e:1f:51:3d:81:92:17:19:44:bb:44:63:
4d:b3:6b:93:92:87:d4:77:8b:16:fd:db:35:b1:65:
04:0a:a7:ec:03:1c:7e:57:e8:8a:46:92:0d:22:22:
f9:19:22:56:ca:ef:59:88:59:f8:45:9c:24:65:03:
8d:3f:86:76:78:8f:89:8e:1c:29:1b:ef:ed:ab:81:
ac:25:95:a1:98:7e:1f:cd:ac:bb:fa:f2:ab:f5:fc:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C1:6D:F7:51:BC:7C:71:B0:03:96:E8:EC:A7:86:9F:16:1F:6D:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/57dbdd-c7c0-4f97-8bce-65b7f1bc7293/1/9cFt91G8fHGwA5bo7KeGnxYfbTM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.105.160.0/19
IPv6:
2a00:cac0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39555
Signature Algorithm: sha256WithRSAEncryption
a8:5e:78:37:aa:37:5d:14:27:a9:17:b5:d9:09:7d:ce:c0:0f:
7f:12:d1:6b:2d:b9:87:31:20:90:1c:dd:42:fa:e5:40:67:a3:
94:b5:60:73:79:53:6d:ad:28:58:52:00:1c:84:22:a1:45:8f:
90:97:3b:ec:16:0f:98:02:be:41:08:d0:6e:30:49:81:fb:03:
4b:92:2c:a7:dc:7f:ad:2c:96:0c:b8:50:c9:bc:fc:ec:23:ff:
02:e1:cb:5b:6d:74:ee:25:a5:14:26:30:53:fc:43:3a:8a:02:
82:c8:8f:ab:ed:94:9c:2c:b9:2b:dc:4e:17:27:a0:e3:04:87:
ac:31:07:b0:b3:68:de:c9:b5:ce:5b:e8:e6:f8:26:11:5f:3f:
97:7f:81:5c:15:76:17:c3:67:58:c0:dc:a5:2e:25:27:90:a4:
9f:0f:5d:05:45:2d:ae:c3:f5:24:05:4d:a4:43:3f:6e:a0:81:
50:62:4d:da:80:71:e1:1c:7e:b0:2d:b6:2b:2b:01:67:52:b1:
2b:1b:a4:a5:2a:3e:88:dc:3e:b3:82:62:06:a5:ed:ce:ca:30:
2c:59:f3:5f:b3:69:1e:f9:fd:bb:1f:a3:f6:72:8c:8c:36:ff:
5e:05:65:2b:3f:38:ef:3c:28:44:e5:aa:66:e2:46:0b:2c:1a:
3c:14:52:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:09:21 2026 by rpki-client