Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
File: AclpL7GkCf800a87grjj2mRnXDI.cer (raw, json)
Hash identifier: 538306SJXLiPxTeXCyeWDE7po73BMmrNq75AGYeVjR8=
Subject key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5CE5973621E338364902E6899032DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:19:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44180
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:e5:97:36:21:e3:38:36:49:02:e6:89:90:32:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2b:5c:20:b9:32:10:17:e2:56:08:d3:39:58:
3d:fe:48:f8:fc:35:f6:37:47:94:42:94:25:7f:4b:
76:da:00:5c:f2:e6:c3:6f:ed:a6:9f:f2:ef:d6:e5:
9f:64:35:c0:93:a4:4a:0f:33:a3:fa:43:78:80:d9:
8a:a7:d2:c0:c2:12:29:c3:e0:a9:44:c1:57:11:3a:
6e:c1:95:35:67:d5:a9:54:8e:d3:d7:99:db:74:67:
54:fd:d5:58:67:ef:66:02:26:06:29:5b:e1:b9:65:
5f:15:e6:f3:cc:8e:68:35:0c:e9:0e:92:95:90:f4:
7d:aa:78:c0:d7:b9:61:0d:14:72:dc:3b:df:89:7b:
42:1e:bc:2f:87:9f:da:cd:fe:85:a7:2d:31:66:28:
ab:cd:1d:f2:7f:bb:d7:00:bc:88:03:e0:16:04:86:
05:0b:5c:f2:24:03:10:77:c4:68:3e:06:3a:8d:38:
41:9f:a3:47:7e:89:c9:5a:44:9e:89:9e:b2:9c:f5:
bb:be:3b:d4:56:a5:28:61:f7:41:f0:22:b1:0e:70:
63:42:d5:fb:49:5b:c8:b5:0f:5f:13:ba:ca:be:95:
36:e4:e2:0c:61:8d:35:bb:93:8f:3d:d1:7a:49:19:
5b:f8:0e:de:3e:61:ca:3b:3e:0d:9f:68:a4:3c:ea:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44180
Signature Algorithm: sha256WithRSAEncryption
5f:c8:63:a3:fb:e9:54:2d:a3:e7:c4:52:d2:0e:18:c2:8a:12:
70:9f:09:18:35:77:d0:65:1f:59:ef:5a:c7:ce:2b:8d:15:df:
05:94:74:6c:41:a6:b9:b1:01:95:7c:0e:af:21:be:37:54:2a:
dc:94:97:c6:b8:7e:0c:68:38:b4:8f:61:d2:33:d9:34:31:a0:
fa:9a:5e:e4:1d:0d:aa:5a:d7:25:29:d2:e6:96:23:32:34:85:
ea:09:8e:df:24:ea:5e:e2:2e:e2:b7:6c:87:66:4f:da:f4:d6:
f4:60:fe:74:5e:4b:41:43:05:3f:26:d8:e6:8f:20:89:83:e7:
94:e2:da:08:dc:ff:e5:1d:c5:0d:b0:db:32:8a:6d:38:11:65:
8a:91:04:67:bd:03:e1:a1:5f:58:47:7f:94:f7:eb:f7:69:8b:
06:a8:48:19:6e:11:05:1a:6f:28:1e:19:9e:68:80:1f:48:c6:
72:d3:e6:09:78:c7:d9:d6:9e:07:5a:cb:c5:ec:81:ba:bc:79:
ff:10:b5:3a:0a:9e:9c:9f:a1:d8:53:27:a1:d4:98:00:95:b2:
9e:c3:13:40:6d:8e:a1:97:30:6d:5f:34:1b:99:68:7c:26:60:
84:ce:7b:ac:3f:47:54:57:0a:e6:36:b7:9e:e6:ee:11:be:25:
20:1b:bd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:27:12 2026 by rpki-client