Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer (raw, json)
Hash identifier: Sfx6FS9YoWEGCnE0mEMV4XOAf8VO207e/OSyvn1vG0Q=
Subject key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A26B0820145DD71C68BD906EDECF1B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:17:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42985
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:6b:08:20:14:5d:d7:1c:68:bd:90:6e:de:cf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f0:af:32:bb:5d:5d:72:27:9b:f7:ad:0c:70:
19:04:f8:11:24:f7:2d:57:7d:be:6d:31:0d:31:1f:
92:dc:18:1f:ed:d8:c3:58:ec:0f:8f:9c:5f:eb:3d:
5f:99:23:ba:60:1a:0e:e5:9f:b4:b3:fa:41:81:0f:
92:c5:b1:9a:0b:d3:ba:7d:c3:1d:3a:dc:78:07:0c:
12:a1:39:40:e1:56:8a:18:64:1e:53:33:46:37:6e:
e5:30:5c:85:97:c9:52:19:dc:d3:d7:68:38:72:cd:
b0:9e:9e:20:2d:5a:aa:f0:12:7d:e6:fd:84:7b:b2:
0c:c9:83:5d:f1:cc:83:02:eb:c5:fe:a4:5a:17:65:
5e:d8:2b:12:46:b8:cd:5d:4d:79:70:24:8a:32:43:
b1:f7:40:25:f9:d1:ed:b6:59:d4:a6:e4:8b:67:fb:
f4:4e:0d:f1:7a:ce:8f:66:75:30:e6:5e:ef:da:20:
63:5e:5e:6a:c3:1b:f8:e5:e9:ee:e5:ae:9d:ee:7e:
a4:a3:40:8c:fb:dd:89:51:4a:79:3e:0d:cc:17:b1:
43:8f:2e:83:3d:2c:f5:df:fa:a3:18:ee:7b:53:f1:
90:a7:03:a1:ac:2d:2c:63:9a:59:91:69:a0:06:aa:
50:d4:fa:55:37:94:f2:9b:11:f0:eb:17:f0:ef:94:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42985
Signature Algorithm: sha256WithRSAEncryption
90:2a:03:09:c2:ef:35:e4:ac:34:e8:2e:b8:22:43:95:95:84:
8e:9d:04:33:32:81:63:25:12:d5:46:8f:da:4e:54:6a:7f:cb:
3e:37:a8:b7:53:aa:be:29:9f:16:af:0e:2b:52:1e:7b:15:6e:
aa:c3:72:bd:cd:41:aa:9a:7c:c7:51:2c:1a:c3:b5:14:c1:10:
a2:00:f9:d2:3e:65:9c:db:93:0c:05:78:82:56:9f:1d:e1:e7:
45:7e:d5:7f:56:d2:f2:1a:55:3f:d2:24:d5:74:eb:b6:b8:53:
61:93:ec:39:9d:82:a9:3c:ad:25:9a:a6:90:b9:f9:ab:3d:96:
18:0b:bb:6c:df:07:bc:69:f0:54:fe:04:73:16:95:af:cf:aa:
29:65:b4:60:0a:fb:39:b5:3a:fd:8e:af:4c:96:bb:dd:fa:5f:
2d:73:b4:b6:d2:7c:43:83:35:0e:51:3a:02:a5:d7:12:59:e5:
8d:75:e1:f9:61:88:f7:fc:f6:d2:88:54:23:8c:04:b1:4c:c9:
3b:34:7d:4e:62:49:62:86:94:8c:67:90:88:56:ad:45:87:d4:
45:72:9e:aa:be:e7:c0:66:72:9b:20:05:32:6e:3e:e9:1e:0c:
66:87:14:51:c7:2c:fb:31:07:be:2f:6a:9c:4c:53:58:63:db:
e8:6c:81:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:22:32 2026 by rpki-client