Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M_PHSnWNqUu1mmZyrZAesl6SMWU.cer
File: M_PHSnWNqUu1mmZyrZAesl6SMWU.cer (raw, json)
Hash identifier: 02ISGJ+NhkTsNtSoVsfL/ka0EhLssw3AF0fDHoOArHE=
Subject key identifier: 33:F3:C7:4A:75:8D:A9:4B:B5:9A:66:72:AD:90:1E:B2:5E:92:31:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C9C62D7DD082556CCBFCBE32681442152
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/a236cf-444d-4c3d-b3ce-b63ea3418809/1/M_PHSnWNqUu1mmZyrZAesl6SMWU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/a236cf-444d-4c3d-b3ce-b63ea3418809/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Feb 2026 23:57:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200623
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9c:62:d7:dd:08:25:56:cc:bf:cb:e3:26:81:44:21:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 26 23:57:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33f3c74a758da94bb59a6672ad901eb25e923165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e2:67:40:54:cf:72:a8:e9:bb:b4:17:f9:ff:
9c:f1:22:eb:d2:80:22:ef:dc:7c:0b:30:80:95:58:
07:ef:51:51:a7:17:b4:16:f0:71:36:9f:e4:16:2f:
45:86:9c:7e:85:f6:c5:4d:04:fc:ea:e7:be:2e:b9:
fe:76:e8:68:05:7d:c8:3f:4a:27:73:1c:68:63:5e:
81:41:07:de:e4:e8:3e:ec:ea:c3:9a:de:14:87:9c:
fb:c0:99:ee:cb:84:1c:1e:27:0a:5f:9d:8b:ed:ee:
ce:7c:e1:33:eb:77:a4:f2:54:5f:e4:4f:e8:37:5b:
70:38:cd:26:8f:f8:43:17:5d:aa:89:bc:11:9a:d7:
88:4b:60:31:7b:8b:13:e1:3c:f2:70:6f:f0:de:f1:
e5:4a:fd:df:d0:a6:ba:3f:e7:5a:c8:2d:3a:82:63:
49:03:fb:fd:c1:80:bb:56:46:86:08:e5:17:8a:d8:
4c:dd:ea:3c:f7:59:27:1a:4a:83:60:72:3d:46:4d:
34:7d:4a:56:77:1f:4d:93:69:90:ce:f6:09:2c:b9:
9a:1c:96:05:54:c4:67:69:3f:ed:6d:88:5b:e3:e9:
ac:03:75:b7:65:ec:08:98:90:87:47:0b:0b:9d:4a:
a6:06:ce:83:8a:26:f4:34:c3:39:aa:07:a6:e7:cc:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F3:C7:4A:75:8D:A9:4B:B5:9A:66:72:AD:90:1E:B2:5E:92:31:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a236cf-444d-4c3d-b3ce-b63ea3418809/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a236cf-444d-4c3d-b3ce-b63ea3418809/1/M_PHSnWNqUu1mmZyrZAesl6SMWU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200623
Signature Algorithm: sha256WithRSAEncryption
b1:31:e1:ba:b9:e4:47:02:34:79:8b:b0:23:2d:12:fc:31:17:
e0:c5:e9:51:b9:00:41:b8:1b:c2:fa:ca:99:89:98:23:8f:d2:
7a:74:bf:29:27:e3:dd:1c:52:ce:b5:f3:d0:f2:01:41:03:f7:
2d:27:2a:b7:06:55:58:76:11:26:86:95:b8:0a:68:bc:e9:3d:
69:1b:9d:62:ec:dd:56:66:65:1c:46:7d:32:d8:79:dc:d6:8a:
1b:73:ce:04:82:3f:3d:42:fb:66:17:0a:79:fd:49:ce:91:27:
54:ec:16:c8:d5:2b:0f:32:33:58:f2:47:73:6c:4b:51:1e:8d:
49:fc:90:1c:78:00:e5:8b:4a:e9:d4:d0:b9:a3:30:e9:7c:0f:
ff:23:53:77:f1:73:c5:d1:b4:c9:7d:f7:e1:bf:f9:25:71:09:
88:7e:56:74:6e:1b:4f:4c:6b:61:e9:71:70:73:35:4d:d5:b4:
78:cf:c3:45:37:ae:9b:1b:46:27:80:01:d8:7b:86:55:7d:0d:
34:d8:4c:7a:16:e4:af:38:11:0e:c7:e2:ee:a8:49:0c:4e:32:
e8:2b:63:0a:5f:25:5a:67:27:a7:1d:cd:4d:fa:ad:c2:1c:62:
cf:e9:da:08:b0:18:14:e5:7e:d0:3e:20:f5:0b:91:e2:0a:43:
9f:52:0d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:31:27 2026 by rpki-client