Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A8faYZwwdCdMsGlarsoJxTn-aGM.cer
File: A8faYZwwdCdMsGlarsoJxTn-aGM.cer (raw, json)
Hash identifier: ma2qp44zbWGWKSJypFfImwEjEPBFenWgHJ5ua3wSAdY=
Subject key identifier: 03:C7:DA:61:9C:30:74:27:4C:B0:69:5A:AE:CA:09:C5:39:FE:68:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBA928570A8FAF548E279F04642D67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/A8faYZwwdCdMsGlarsoJxTn-aGM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204443
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:a9:28:57:0a:8f:af:54:8e:27:9f:04:64:2d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03c7da619c3074274cb0695aaeca09c539fe6863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4a:52:af:77:12:e5:a9:cc:7f:d2:bd:b4:60:
fe:7a:89:6e:8a:d7:01:ed:d4:6a:d6:6a:0d:c6:9f:
a3:ea:ba:0e:34:e8:62:e7:74:a7:19:40:4a:b9:89:
7a:01:1a:9b:03:50:74:5a:c4:3c:81:ee:e8:a7:ee:
85:eb:7b:ea:14:08:74:fc:94:8a:d5:8b:ac:e1:80:
32:0f:32:e9:53:8b:45:80:a6:47:dc:ef:ab:7f:f8:
16:68:60:6c:8c:cc:21:2e:82:6c:e4:3f:5b:ac:8a:
b3:e3:48:05:2b:36:fe:fa:5a:48:3a:9b:64:b7:5d:
e0:47:78:c1:1a:e1:f1:06:14:07:a0:d0:83:49:8c:
c8:fc:fb:3e:57:b7:a8:05:63:a0:59:35:bf:f1:1e:
a2:45:6d:18:16:ae:d4:eb:f6:db:f3:03:31:d6:8f:
8f:52:59:11:46:76:ea:4a:6c:28:8d:82:e3:92:1c:
bf:0d:b4:20:52:dd:95:5d:70:94:87:f5:18:fc:40:
c6:76:a2:27:59:87:f6:2a:b5:ac:7f:01:84:cf:1d:
c2:fa:ad:e9:11:e4:3b:c9:05:23:29:06:9f:f2:d2:
83:ef:39:1a:58:be:02:b9:d4:ea:0f:1c:93:4a:95:
53:61:c8:60:fc:c4:d0:1c:59:f6:a8:7d:b1:de:59:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C7:DA:61:9C:30:74:27:4C:B0:69:5A:AE:CA:09:C5:39:FE:68:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/A8faYZwwdCdMsGlarsoJxTn-aGM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204443
Signature Algorithm: sha256WithRSAEncryption
94:a3:bf:ef:bc:04:8e:51:ee:94:32:48:22:e2:b4:4c:d7:87:
58:db:61:6e:77:52:ed:90:9c:47:8d:63:e7:04:91:1d:2e:aa:
69:75:d5:a8:ea:0e:64:3a:02:ea:79:55:b3:b3:4a:45:f7:74:
c3:75:9a:f7:25:5c:e6:56:e4:1b:01:1d:45:20:a9:2b:61:be:
d5:9c:09:18:3d:5e:99:e0:db:36:5f:eb:df:40:90:9f:b7:c9:
9d:ce:4f:a3:e1:ad:f2:92:02:d7:bb:de:6c:53:31:a6:20:ba:
07:61:65:22:86:0a:9c:09:ec:77:22:32:02:38:31:e8:ea:c1:
92:98:f8:f9:9a:da:03:c0:6e:20:97:d3:7e:d5:10:df:9f:ad:
84:8d:59:3e:71:1e:03:d6:b6:f0:70:96:82:34:52:73:5f:fb:
e6:49:12:45:aa:5b:80:7a:cb:fc:6c:86:54:bb:b0:38:c4:c7:
db:3f:36:b7:b1:c6:fa:bc:8a:9f:8c:45:80:15:ec:c7:be:50:
24:f5:78:49:84:cc:d0:e0:e1:f5:98:e0:6f:32:1f:ca:3f:95:
6c:cf:da:46:d5:c6:03:52:48:79:69:12:64:b1:31:43:90:d6:
ab:5c:53:0d:f4:55:c1:6d:7d:13:da:e1:a4:a3:dd:6b:32:78:
ca:98:36:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:16:58 2026 by rpki-client