Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KpKTnjuv_mq42aeWIFHYXOKjaLo.cer
File: KpKTnjuv_mq42aeWIFHYXOKjaLo.cer (raw, json)
Hash identifier: C+nBCHk0R0G2Vp2wjbkl0HRzkXig3gwobmaOjxvsTkM=
Subject key identifier: 2A:92:93:9E:3B:AF:FE:6A:B8:D9:A7:96:20:51:D8:5C:E2:A3:68:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D0BAA69565AA9EFC9981034D0D36A534C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 20 Mar 2026 14:33:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199282
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:aa:69:56:5a:a9:ef:c9:98:10:34:d0:d3:6a:53:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 20 14:33:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a92939e3baffe6ab8d9a7962051d85ce2a368ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:20:6b:1c:f5:6c:1e:81:6b:95:a9:4a:c5:
56:9b:5a:18:33:85:3c:c2:e0:ec:6d:0a:82:a0:4f:
f9:34:1a:95:8d:69:38:af:e2:c6:ca:8b:40:d5:ee:
5c:23:bd:1a:b1:9b:94:45:5f:ab:f9:08:8b:41:06:
c7:c5:5a:0a:9b:12:c3:54:5b:63:c1:42:e7:41:d8:
42:89:88:e8:36:dc:24:cd:ad:06:5c:30:79:29:5c:
84:45:7e:91:75:8f:83:14:da:21:8b:e6:5b:e4:80:
18:5f:55:f2:9b:59:72:3c:b1:92:c0:bf:fe:33:6b:
06:b7:d7:3d:f8:5e:b8:26:23:4a:30:f0:39:b8:9a:
92:f0:89:0b:53:9a:ef:01:ee:70:de:d2:68:56:44:
dd:2c:90:54:23:ab:68:55:73:3d:10:8b:82:5d:33:
bd:00:f5:ec:1f:6f:3b:95:a3:29:e0:59:f6:3d:14:
e4:76:9c:a5:78:c2:9e:f3:5c:9e:0f:a7:41:16:54:
ff:b4:8c:29:20:4b:ae:13:fc:c3:2f:0d:9d:68:7f:
83:da:4a:65:e5:86:4b:78:01:ad:ad:92:df:97:10:
07:f1:41:58:07:cb:34:ec:5e:39:5c:e7:f1:e9:da:
8a:55:5f:b3:7e:45:63:d9:c1:7d:d6:a7:0f:11:fb:
7c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:92:93:9E:3B:AF:FE:6A:B8:D9:A7:96:20:51:D8:5C:E2:A3:68:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199282
Signature Algorithm: sha256WithRSAEncryption
80:3c:3c:9b:18:0f:35:4f:53:49:74:8b:f5:35:cc:d6:75:7d:
4f:d0:d3:7b:3b:96:15:5a:22:e7:ee:ea:3e:63:8a:e9:c3:d3:
b1:1b:4d:34:5b:4d:7b:cb:1b:94:6e:1c:6e:1a:c2:0d:a3:75:
78:ac:da:f0:e7:70:6b:5c:b6:7b:c1:a1:5c:14:49:90:d2:73:
55:f0:8f:4c:f9:d4:3c:04:f8:98:c9:46:26:5d:08:fd:82:21:
4e:15:3e:ff:db:b4:2e:3a:f1:c9:8f:be:38:5f:32:9f:c0:aa:
df:ac:a9:8b:28:f8:cc:c4:7a:c3:9d:75:82:20:b3:0c:b9:11:
d7:c2:91:64:f3:2a:9e:c8:d4:1d:e9:69:59:ea:66:c3:28:86:
17:4e:25:0f:ad:4f:8b:f4:30:e3:71:b5:23:8e:bd:b9:8b:d3:
35:d8:9e:2f:36:82:34:17:e0:26:e5:61:02:cb:c4:35:ca:28:
9d:39:5a:0f:91:8c:26:4e:e9:5c:62:c5:4e:f1:cd:82:85:75:
3c:82:96:be:f7:68:0f:47:4a:d4:00:50:f5:97:c7:fb:e4:5f:
73:54:2d:14:11:d2:55:b3:d4:92:02:a5:46:1a:a7:dd:3d:4a:
38:f9:e1:88:3c:ed:b4:18:76:12:63:e9:8a:05:5e:15:cf:f2:
7a:c3:76:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:39:38 2026 by rpki-client