Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/AymfovJMg4iMLP64vwBMgbonVmI.cer
File: AymfovJMg4iMLP64vwBMgbonVmI.cer (raw, json)
Hash identifier: ljB0tlly4hBylRQEMIHWJEpYF7vvLsb74rpMHAIYttM=
Subject key identifier: 03:29:9F:A2:F2:4C:83:88:8C:2C:FE:B8:BF:00:4C:81:BA:27:56:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0CE2FA42B58B69466FDF502BEE9660800
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/965342-4da2-47c9-88b9-b1beda4c0c86/1/AymfovJMg4iMLP64vwBMgbonVmI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/965342-4da2-47c9-88b9-b1beda4c0c86/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Sep 2026 12:13:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218600
IP: 64.255.44.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:2f:a4:2b:58:b6:94:66:fd:f5:02:be:e9:66:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 23 12:13:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03299fa2f24c83888c2cfeb8bf004c81ba275662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:2a:05:07:68:4b:47:d4:fd:ad:c9:35:74:
2e:d3:2e:e3:f4:a1:da:5d:e3:9c:b9:ef:ca:59:a7:
4d:5b:57:19:ff:aa:49:62:19:37:83:0a:ac:2c:ed:
7f:3c:a4:a2:d2:bc:04:a3:05:4c:0f:e9:27:d9:8f:
3f:3a:6b:9e:29:f2:f1:0a:61:04:45:8c:f5:10:11:
06:87:24:b0:57:ff:cd:29:e2:30:0d:1f:ea:b9:cb:
a6:72:2c:e3:6d:56:4f:7d:e2:a1:af:f1:b8:67:5a:
b3:0d:1c:c0:5a:4d:f7:42:c5:99:3c:bb:f5:66:a2:
d9:37:38:4f:d4:d1:89:3e:58:f6:ee:26:4c:c9:9f:
4f:5e:19:77:f8:9c:10:d4:77:0f:a0:dc:86:ba:62:
f9:89:16:7b:7c:fc:34:de:78:f5:6d:4d:28:b5:cd:
6c:0f:39:cc:27:07:e5:b4:4a:31:99:9f:f7:be:dc:
c6:ee:d6:2e:2b:6e:1e:3e:45:a7:d2:fe:d8:d1:fe:
aa:ec:a0:38:06:81:84:1d:4d:c0:81:ce:ed:be:02:
f2:b7:ad:7c:84:19:3d:e9:23:58:5d:07:e9:76:ad:
77:b7:97:0b:e2:58:b5:1b:c0:0b:06:8e:3a:89:7e:
c9:ed:8e:a6:d0:7c:87:92:aa:44:6b:4d:b7:5d:96:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:29:9F:A2:F2:4C:83:88:8C:2C:FE:B8:BF:00:4C:81:BA:27:56:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/965342-4da2-47c9-88b9-b1beda4c0c86/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/965342-4da2-47c9-88b9-b1beda4c0c86/1/AymfovJMg4iMLP64vwBMgbonVmI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.255.44.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218600
Signature Algorithm: sha256WithRSAEncryption
60:e2:65:05:94:91:ce:70:de:69:17:4e:07:6f:a4:99:47:a2:
6d:de:08:2f:00:6f:67:fe:5f:09:b8:09:df:3c:a2:21:87:41:
5f:dc:39:80:83:fe:f9:22:45:fd:d3:f3:e2:c6:52:ab:b6:54:
7a:07:d6:54:00:32:96:f7:b8:d9:b3:9e:f7:1d:45:36:a0:ea:
06:f4:f1:1b:39:bf:61:39:2a:83:41:43:9f:06:92:6a:08:bd:
03:bc:76:80:f4:92:95:54:d4:4a:ea:b7:51:90:58:13:90:b8:
14:f9:e1:8c:7a:38:ba:15:9c:43:a0:95:39:58:38:03:8b:31:
a6:76:eb:59:f8:3a:3a:ce:d8:b4:bc:f9:4e:ed:a8:4a:4b:eb:
66:7e:33:fb:e8:94:74:bb:00:c4:b7:0f:c7:f2:b7:f9:51:69:
09:0e:1c:27:0e:88:7f:f8:98:47:43:30:75:fd:e8:a8:8b:c1:
8b:55:9e:e0:4f:13:d6:39:5a:16:01:5c:3e:37:2e:65:7d:84:
c5:2c:be:70:9c:dd:87:0a:eb:98:07:af:3a:67:45:e4:ef:cd:
3e:84:72:69:86:cd:39:21:fe:15:5a:23:a9:a0:94:39:7d:ae:
a3:5f:ca:1e:09:31:89:4e:de:e9:be:5f:94:87:af:3d:f4:66:
c5:a7:be:03
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAaDOL6QrWLaUZv31Ar7pZggAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTIzMTIxMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzI5OWZhMmYyNGM4Mzg4OGMyY2ZlYjhiZjAwNGM4MWJhMjc1NjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylkqBQdoS0fU/a3JNXQu0y7j9KHa
XeOcue/KWadNW1cZ/6pJYhk3gwqsLO1/PKSi0rwEowVMD+kn2Y8/OmueKfLxCmEE
RYz1EBEGhySwV//NKeIwDR/qucumcizjbVZPfeKhr/G4Z1qzDRzAWk33QsWZPLv1
ZqLZNzhP1NGJPlj27iZMyZ9PXhl3+JwQ1HcPoNyGumL5iRZ7fPw03nj1bU0otc1s
DznMJwfltEoxmZ/3vtzG7tYuK24ePkWn0v7Y0f6q7KA4BoGEHU3Agc7tvgLyt618
hBk96SNYXQfpdq13t5cL4li1G8ALBo46iX7J7Y6m0HyHkqpEa023XZZnIwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFAMpn6LyTIOIjCz+uL8ATIG6J1ZiMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzk2NTM0
Mi00ZGEyLTQ3YzktODhiOS1iMWJlZGE0YzBjODYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOTY1MzQy
LTRkYTItNDdjOS04OGI5LWIxYmVkYTRjMGM4Ni8xL0F5bWZvdkpNZzRpTUxQNjR2
d0JNZ2JvblZtSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBQP8sMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwNV6DANBgkqhkiG9w0BAQsFAAOCAQEAYOJlBZSRznDeaRdOB2+kmUeibd4ILwBv
Z/5fCbgJ3zyiIYdBX9w5gIP++SJF/dPz4sZSq7ZUegfWVAAylve42bOe9x1FNqDq
BvTxGzm/YTkqg0FDnwaSagi9A7x2gPSSlVTUSuq3UZBYE5C4FPnhjHo4uhWcQ6CV
OVg4A4sxpnbrWfg6Os7YtLz5Tu2oSkvrZn4z++iUdLsAxLcPx/K3+VFpCQ4cJw6I
f/iYR0Mwdf3oqIvBi1We4E8T1jlaFgFcPjcuZX2ExSy+cJzdhwrrmAevOmdF5O/N
PoRyaYbNOSH+FVojqaCUOX2uo1/KHgkxiU7e6b5flIevPfRmxae+Aw==
-----END CERTIFICATE-----
Generated at Wed Nov 11 23:14:16 2026 by rpki-client