Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
File: AhtowZzVXWul-GX7DdDW-MnZ49o.cer (raw, json)
Hash identifier: FNAUfhPpNDM14IEf5/LWrcHNU+ONuH8fwKOfvBbEec0=
Subject key identifier: 02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CED63A0E3D18F563893C6FC32F7E124
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:18:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210587
AS: 210620
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:63:a0:e3:d1:8f:56:38:93:c6:fc:32:f7:e1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:58:7d:4a:1d:43:82:f7:96:c7:d1:a3:63:
ce:e2:1f:47:f3:86:a7:f1:c1:f3:78:08:5b:ab:1b:
75:b5:a3:e4:2e:07:71:ea:30:70:bd:4c:73:79:e8:
1c:ad:c9:fd:56:d3:8c:29:e5:6a:ed:1b:34:91:b0:
91:cb:c0:32:fc:7b:8d:e1:47:4d:f6:b4:35:90:04:
27:25:01:46:94:a3:a0:c0:1a:a1:fd:97:9f:a1:2a:
43:2b:79:45:36:d0:5b:f2:a9:98:62:bd:ed:9c:3e:
61:39:93:c3:73:37:0a:4b:92:43:0a:c2:33:46:7c:
2a:05:f3:87:4e:49:c0:a5:4e:b7:cf:98:a9:74:ae:
85:ae:43:ec:1f:19:b5:20:2e:dd:7c:d4:f1:82:82:
9d:a8:e8:61:ee:e5:3d:72:2e:94:e8:23:2c:4a:91:
9a:d6:81:ca:6c:c0:35:d7:03:35:6e:c7:9b:0a:7b:
04:97:e3:87:33:b3:94:1c:3d:3d:52:01:01:c7:7a:
4e:69:cb:12:15:68:3b:b7:36:2d:6a:90:6e:02:f8:
53:71:7d:b8:81:0b:2c:ad:80:2f:22:94:8b:0b:ea:
1a:04:36:77:bf:d8:db:ee:a1:72:54:a4:73:48:71:
99:b5:60:bf:33:02:36:b7:8e:68:93:88:7f:c7:7c:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210587
210620
Signature Algorithm: sha256WithRSAEncryption
06:52:67:f8:09:8a:28:22:ad:34:e9:d5:ac:1f:27:5e:cd:ff:
0a:45:ac:db:78:34:43:74:63:99:43:20:2f:e7:66:ca:26:5f:
f1:2d:da:87:7e:a3:13:f1:e9:98:12:ef:06:48:c4:24:2d:b0:
4a:c9:d6:3f:62:e0:0e:a5:55:a0:9f:d7:f9:ba:fd:e7:45:97:
e0:e9:8e:7c:fe:80:b7:ff:54:77:34:59:a2:3f:74:5e:9f:45:
12:e8:21:f0:cd:27:17:d0:4b:ef:b2:d1:cd:d9:d2:79:8d:60:
21:d9:bd:24:bc:04:16:95:23:f2:a4:81:4c:da:02:ca:3f:c3:
a4:6f:79:71:2f:7b:cf:a8:71:10:1f:bd:17:d3:a0:f7:c1:6a:
ef:bb:5e:b1:5b:29:e8:3c:25:27:0d:c2:d3:e0:64:de:94:65:
0a:e0:4e:67:c2:28:68:7c:b4:ab:3d:b1:b8:24:b0:88:bf:9c:
0a:38:fd:16:e0:2c:36:56:02:85:04:3c:8f:63:2a:1d:95:4e:
37:0f:11:d5:1f:d3:6e:0c:88:b8:01:35:75:13:65:1f:94:10:
71:69:ca:ff:f2:62:f0:13:76:47:6c:0d:09:3e:f1:ee:16:06:
ce:8c:99:43:ad:89:37:0e:1f:1d:39:dc:ec:74:26:64:d2:08:
0a:18:05:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:57:37 2026 by rpki-client