Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer
File: 9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer (raw, json)
Hash identifier: 68/Lq9YOuWBP0VvGQJrMHamqhP7sbSkMYkh7mF4p+8c=
Subject key identifier: F6:6C:6A:3F:A3:17:0C:25:16:E1:1E:E9:10:4F:ED:32:69:99:7D:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5B1E3970568B1AEEB9144EF4DC68EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:19:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 61142
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:1e:39:70:56:8b:1a:ee:b9:14:4e:f4:dc:68:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f66c6a3fa3170c2516e11ee9104fed3269997dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:77:be:50:ad:94:e7:a2:ff:0d:4e:1a:ae:
01:46:ab:52:40:07:2e:42:d0:01:b4:85:e4:18:b5:
9f:1b:43:24:ca:b5:55:b9:00:f8:f5:8e:05:e3:48:
57:f3:f6:d4:2c:c6:b5:6f:69:e6:77:29:1a:fe:4d:
42:51:03:9d:88:e8:71:ec:7e:b1:a6:31:de:90:12:
a1:24:f7:a8:a7:ed:96:aa:50:de:1b:fa:d7:56:b4:
f9:bc:b8:e4:72:f9:df:13:39:15:44:1e:ea:3c:4f:
fb:f1:ee:90:4f:9d:92:ed:13:56:df:58:31:5a:e0:
cb:a0:c9:34:93:ae:1a:9e:2e:81:f6:10:be:d7:77:
2b:07:96:6f:03:d1:55:cf:58:54:67:9e:b4:65:76:
a8:73:cd:e6:66:58:d1:27:2a:13:b7:b9:17:d8:f2:
26:35:4a:1e:91:3e:2a:80:c2:08:87:eb:18:7e:fe:
63:66:ff:72:7a:f1:65:5f:26:45:43:6f:73:70:1b:
d1:ee:d7:94:d7:38:df:ed:fd:58:c2:7f:c5:29:f6:
21:bf:97:48:6b:25:1e:96:0a:92:0f:75:81:12:1d:
1c:86:6c:4c:67:4e:15:f1:d6:3f:fb:b5:14:1a:27:
78:43:ea:8d:5d:ca:fe:be:be:83:14:2e:b7:50:dc:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6C:6A:3F:A3:17:0C:25:16:E1:1E:E9:10:4F:ED:32:69:99:7D:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61142
Signature Algorithm: sha256WithRSAEncryption
81:8d:88:c9:13:07:3b:4b:00:e0:cd:ad:09:37:7e:cb:ec:97:
dd:a6:26:28:71:1b:fb:a0:b5:b9:f8:0b:c3:68:0c:17:d5:71:
0d:a8:14:8b:54:14:34:56:07:08:03:5c:72:a5:77:1e:da:f0:
0e:de:b6:02:d8:40:12:18:d2:d0:db:24:db:36:17:39:7e:28:
75:b5:7d:2d:be:18:6e:4b:ab:49:0c:7e:50:70:c3:ad:2b:cd:
24:37:a7:c3:e2:6a:8c:52:72:a5:1f:0d:4b:94:77:4a:07:9d:
8d:ac:db:f9:db:eb:b6:88:0f:80:5a:52:55:5d:8e:62:53:36:
28:e6:fa:b6:13:c4:41:48:72:d0:e1:33:38:a1:e8:b4:59:99:
06:11:d5:6d:f9:34:05:66:70:34:8a:1e:38:6d:46:c7:4f:df:
80:6a:1f:f6:55:c8:66:76:02:ca:1a:b4:b4:63:4d:48:96:09:
25:53:d7:b5:99:38:17:18:9c:ce:93:c9:b6:1a:a3:fd:f0:da:
9a:23:b3:14:30:a7:a4:83:a2:89:64:e1:62:bf:88:29:c7:e0:
db:b0:6d:3a:79:e0:7a:2f:3f:75:25:50:24:da:91:cb:48:e2:
50:1e:76:d1:ab:4f:5a:97:10:cf:e8:85:7b:5b:c9:43:74:f8:
51:69:19:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:41:56 2026 by rpki-client