Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KmU0qslEKjlNE5oagwPcBJWcHaA.cer
File: KmU0qslEKjlNE5oagwPcBJWcHaA.cer (raw, json)
Hash identifier: 3Gx8hzDl3uOukT5sZuzrl27L4rxzZxN7TMBH33MrqZI=
Subject key identifier: 2A:65:34:AA:C9:44:2A:39:4D:13:9A:1A:83:03:DC:04:95:9C:1D:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CECC5BC89CF3BB4131D0FC7B6B89AEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/d2388f-f8a9-4485-937f-840fd5352dc0/1/KmU0qslEKjlNE5oagwPcBJWcHaA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/d2388f-f8a9-4485-937f-840fd5352dc0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:17:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200624
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ec:c5:bc:89:cf:3b:b4:13:1d:0f:c7:b6:b8:9a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a6534aac9442a394d139a1a8303dc04959c1da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:88:6e:21:38:12:6c:53:9a:3e:18:c4:3f:
65:26:50:45:34:fa:98:82:4c:2d:ae:4a:70:94:18:
b9:2e:f3:4c:68:2d:ab:0b:59:06:3f:1d:94:be:a4:
b3:dc:a3:82:a9:89:7e:a3:74:be:5b:6c:f5:50:82:
24:23:4a:17:d5:10:5b:b6:75:0b:94:84:b6:e1:53:
c3:95:73:51:8c:18:e2:3b:bb:16:8f:be:3a:ce:d2:
c6:27:86:0a:fb:9d:0c:6d:b1:99:48:94:39:63:19:
bf:93:07:9d:2e:b3:4c:d9:8b:4f:98:0f:26:a9:5c:
e5:03:c3:17:e1:ce:38:db:08:a8:e8:ef:bf:d5:b8:
e8:cc:7a:5a:7f:8a:48:26:02:c0:c2:bd:c1:04:b9:
57:89:ef:b7:e6:8c:9f:be:09:8f:0f:ba:bd:16:fa:
ee:0e:53:39:fc:ae:ff:3d:34:29:b0:94:b9:e6:4a:
f7:78:34:c7:07:82:b5:83:8a:21:76:13:b6:51:a2:
a1:81:dc:45:6f:58:f4:c4:e8:8e:21:12:65:3b:7e:
34:e8:9c:f0:6b:38:e0:f6:12:5e:27:98:54:b1:9a:
b9:13:c7:7f:01:db:bd:07:ea:61:b6:8e:e9:d8:54:
7b:36:4f:6b:2d:d5:09:78:ad:9d:2b:32:1a:23:12:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:65:34:AA:C9:44:2A:39:4D:13:9A:1A:83:03:DC:04:95:9C:1D:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d2388f-f8a9-4485-937f-840fd5352dc0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d2388f-f8a9-4485-937f-840fd5352dc0/1/KmU0qslEKjlNE5oagwPcBJWcHaA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200624
Signature Algorithm: sha256WithRSAEncryption
15:b3:c2:54:cf:6d:be:dd:b1:0c:2f:44:7c:9b:d7:b4:ab:e2:
9e:03:82:df:ac:36:e2:de:fb:c2:b1:cb:55:ee:5c:02:89:fa:
65:5c:46:8a:8a:f2:b4:9f:c5:47:67:82:45:d9:aa:90:fb:51:
76:3c:5b:9a:a2:2b:82:80:cf:a9:27:ab:6f:60:07:00:73:93:
08:2e:cd:9d:64:44:ef:83:97:15:37:c4:49:a3:29:1c:de:a8:
7a:9c:7d:8c:38:0c:2e:f3:d8:a8:60:5e:c9:a6:67:1e:8f:0b:
e5:23:4d:0c:61:77:9d:cc:32:be:db:e1:fa:7e:c3:9e:b1:0d:
ff:a3:c0:e0:d5:75:57:1a:37:e7:83:0f:f7:61:97:bf:d4:b5:
c5:c5:e8:05:2e:a3:d7:ea:39:b3:54:4a:6d:75:0f:7a:67:00:
8d:e8:f6:03:98:f2:f7:c7:44:0f:9b:93:87:f7:9e:0a:e7:5b:
fa:8e:ea:e2:46:9d:5b:fb:d1:04:53:74:9e:98:09:41:00:af:
98:89:fb:b7:54:72:be:c6:bf:d7:38:e1:49:ed:33:99:e5:02:
98:bf:78:26:0f:92:38:b0:ca:1e:07:8f:26:22:98:3d:99:14:
85:91:8c:05:79:6f:20:33:7d:b8:4c:6b:d0:2b:83:2b:50:22:
52:5b:1c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:16 2026 by rpki-client