Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
File: K6cIjjnnrYgXt9EOoqW4oJikegs.cer (raw, json)
Hash identifier: MTvblyWPxPOqeKj313N/Po/v+lPjqnDoYIAA4QHDeNc=
Subject key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C69B840826E63584A1DEDD3A4087FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:17:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202113
IP: 185.52.244.0/22
IP: 2a04:c9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:9b:84:08:26:e6:35:84:a1:de:dd:3a:40:87:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:26:44:c3:51:96:89:08:12:3d:72:96:93:e2:
3a:b1:a7:47:8d:40:f2:ea:1f:8a:2d:ae:15:eb:ab:
79:c2:e0:f8:23:1b:ce:d3:34:9c:12:85:0e:a4:46:
2b:4b:d3:d1:bd:a2:09:6b:30:84:37:f0:ff:f8:a7:
1a:94:29:79:6d:4d:89:85:4f:a3:8b:84:26:06:0a:
3c:bb:92:7f:7e:30:ca:c4:2b:bc:1b:8e:b2:34:80:
1c:a9:79:3d:7a:89:5f:b6:f7:45:91:10:e0:53:f9:
0c:c9:03:d1:42:d9:67:de:46:3b:83:d6:ab:01:85:
d1:77:3c:d5:a0:03:79:52:d3:70:43:52:6e:13:88:
26:ab:e0:c2:25:84:f1:04:a0:8a:10:cc:d6:23:25:
fe:ba:da:4f:36:94:e4:e6:5f:c3:18:06:9d:de:8d:
d0:96:67:33:c5:09:6c:95:4c:13:07:8c:52:9b:c7:
09:66:02:fc:67:7f:e3:f5:f5:d6:28:16:d7:22:21:
4b:72:16:ab:05:48:7d:5e:d9:2d:27:68:b6:ea:ca:
dc:d0:78:49:fb:f2:38:35:fd:54:78:88:32:61:b6:
46:83:ef:cd:31:52:b3:f5:3a:37:f0:79:9f:6b:6b:
25:6d:9a:5e:af:2e:95:1b:0b:1e:73:76:c9:f8:ba:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.244.0/22
IPv6:
2a04:c9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202113
Signature Algorithm: sha256WithRSAEncryption
86:21:75:70:a1:a3:63:05:8a:0a:9c:80:e8:c3:5b:08:ae:c9:
e6:99:f4:ea:c6:0f:7a:39:ba:2d:dd:6b:37:c1:7c:76:84:35:
e7:2b:6c:9e:04:ea:b6:49:b5:83:0c:e3:ee:9b:c0:24:b1:96:
6d:2c:80:0c:66:6f:d7:fa:60:c5:48:8e:93:d6:d3:62:bb:26:
9b:df:98:ee:15:f6:e6:64:64:c5:60:fd:58:43:97:50:d6:06:
57:4f:e8:cb:ab:c1:86:a4:f3:1f:e9:33:41:2b:f6:b2:45:2d:
3e:99:45:da:79:3d:01:22:c7:eb:a6:77:7c:3d:44:8d:c3:c2:
d2:74:0f:6c:42:d0:79:75:c0:99:4e:69:dd:9c:2d:2a:eb:fb:
1b:bf:e7:a1:79:df:98:6a:0a:b7:05:1d:3d:13:f8:f8:f1:e7:
65:00:09:01:99:b5:f1:10:c1:f9:05:31:c2:44:65:44:fd:20:
bd:42:fb:11:93:cd:c9:6e:e5:dd:8c:43:c1:c5:37:46:4c:55:
ec:3b:5e:9f:67:d7:0d:f5:ec:3d:95:c7:01:95:5f:d8:78:f7:
f7:99:af:5b:86:fa:26:01:0b:13:44:aa:22:5d:11:57:52:f9:
2d:c9:60:d2:c8:24:67:d3:3e:8a:47:49:c2:9c:7d:45:95:ab:
e5:5c:d3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:35 2026 by rpki-client