Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer (raw, json)
Hash identifier: Mu45OINcAAo8Bf4uBYwDuXhkpqBsTDMKVmgO0/Xn9Fc=
Subject key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA49CA29AA69EDB09EB621D9CDC4690
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:17:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212044
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a4:9c:a2:9a:a6:9e:db:09:eb:62:1d:9c:dc:46:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:14:b8:4f:15:de:7f:57:47:25:1b:a2:e2:
e3:34:a1:b2:cc:6c:39:5d:7d:70:d0:0e:6c:68:2b:
da:ee:43:7c:3d:2b:3c:81:1d:99:89:37:ee:09:58:
c5:4e:8a:79:01:eb:4a:19:e3:3a:0d:34:59:db:c7:
58:af:db:1c:01:89:f9:5d:fa:b2:b2:67:c4:70:cb:
74:8c:eb:78:21:67:dc:60:86:63:01:4b:2d:87:fc:
70:22:d8:1a:64:30:01:b4:52:62:e6:64:f2:56:8e:
15:0c:ea:2b:11:cf:1a:4a:4a:25:f8:f3:23:3d:c7:
e3:6b:ef:09:b3:94:9a:3b:d4:22:f6:41:25:c3:87:
99:8b:ce:73:6f:9e:a0:60:99:d0:06:ee:d9:ad:ec:
7e:d7:f8:0f:c3:fa:f1:d7:81:ca:f7:1d:18:97:01:
ec:f1:7e:2a:a7:ee:fe:03:43:53:67:74:d4:00:18:
9f:5b:6b:e9:41:a1:e0:ce:a8:d9:21:d8:8b:a4:e8:
ac:61:47:b0:99:18:c6:81:e5:ff:c0:32:b0:30:ae:
ec:f5:91:1b:c4:92:3a:ad:5b:94:15:37:a0:bc:1c:
8b:a6:d9:0d:44:a7:f2:43:d0:af:f7:bb:e0:af:64:
14:d5:fb:6b:fe:6d:fc:83:02:bf:f4:6b:d8:92:89:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212044
Signature Algorithm: sha256WithRSAEncryption
3a:95:1f:cd:fd:16:3d:02:52:2d:8d:68:fa:84:34:2e:79:fa:
0e:c8:81:31:3f:17:0d:09:c8:fb:45:d0:ca:33:00:63:de:06:
e6:28:c1:6c:12:75:25:d6:0d:19:f0:f1:f7:60:f9:65:28:4a:
3c:72:ca:1c:96:b9:bd:06:c5:52:aa:62:de:3c:1e:b8:59:ed:
d8:a0:de:3c:9c:9a:84:c7:b5:a7:82:77:c5:96:c7:bd:d0:b4:
49:8b:d3:1b:90:48:38:37:dc:9c:dd:d0:6a:e2:60:6a:0e:1c:
75:87:93:22:4f:90:7e:fd:0d:23:2c:b5:38:e4:5a:f3:4d:61:
f4:43:ad:e1:75:2a:6a:b6:71:03:9b:6b:56:ee:58:ef:fb:c7:
05:59:4c:a8:31:1a:fa:16:95:84:b3:2c:04:0f:96:ed:c7:c0:
06:4b:61:ec:76:bd:4d:2c:37:6e:7d:73:ca:84:fc:66:17:d5:
e9:65:0b:90:c4:2d:8b:2a:08:a6:89:74:31:cf:0c:b5:09:a6:
a7:a3:9e:c8:18:d3:6e:94:fa:19:ab:34:82:d6:c0:95:d1:df:
5e:eb:94:d6:29:5d:b2:ac:f9:98:9a:4d:22:f8:f6:d9:69:2c:
d1:9f:55:00:56:d9:9b:f5:c2:87:8b:eb:87:0b:99:de:de:4d:
35:03:76:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:52:15 2026 by rpki-client