Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
File: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer (raw, json)
Hash identifier: HYN2lkCAFOj6A4Xx73/qRT/JjvIkxgLvM6yGFHVZX2k=
Subject key identifier: 3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C11A69D9629D4164FC8006A30726A62
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:18:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215844
IP: 2001:678:9d8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:a6:9d:96:29:d4:16:4f:c8:00:6a:30:72:6a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:c1:f8:04:80:e6:ea:e3:9b:7a:32:b2:58:
17:ee:2c:a0:ba:5e:87:26:b9:52:16:97:08:80:5b:
41:a6:b2:91:38:4d:aa:ca:85:77:e9:9f:5d:c4:01:
37:1d:c5:e9:cc:82:a2:51:1f:e4:b2:f3:5e:5c:76:
cf:45:27:7e:9f:2b:6d:6f:58:08:82:57:3b:65:9f:
e2:bf:18:db:bb:d4:b0:6d:3c:98:51:0e:f0:60:fa:
bd:a0:a2:3b:2b:ed:84:82:de:54:f4:65:71:8f:54:
2c:48:34:0a:ab:da:85:74:ca:24:f4:3c:dd:d9:ad:
99:6a:fb:62:5f:3a:e3:67:c3:5f:fb:2b:c7:c7:f3:
c7:c1:1e:45:2a:87:f0:e8:c5:f5:c4:46:55:dd:d6:
95:2e:06:5b:bc:3b:a0:b7:4f:fd:a1:b9:aa:45:86:
f7:45:b5:fc:4b:81:72:6d:49:8f:bf:0d:f7:56:c2:
05:ca:87:30:3d:10:e0:b7:bf:a2:a1:7c:2b:df:15:
9b:87:fd:1d:e1:f0:85:f8:14:86:2f:1c:f2:f1:b2:
59:21:c1:6c:e7:4f:98:7b:5c:9f:2e:b1:27:7e:d0:
21:74:c8:f9:5f:93:3a:cf:ed:a9:9c:64:2b:5e:96:
58:c2:b1:5d:4f:5e:25:48:ce:71:9a:3d:b1:c6:e4:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:9d8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215844
Signature Algorithm: sha256WithRSAEncryption
17:a0:dd:53:8d:2d:f7:1b:30:6f:f7:c7:e8:b9:b5:05:8c:36:
2d:fe:3b:0d:12:00:35:81:c6:f6:a9:2a:50:47:52:47:dc:4c:
78:57:94:ad:c9:33:db:bd:e6:b6:48:73:24:94:f2:4a:b5:5e:
09:3e:cb:09:b6:d9:97:e1:2c:57:84:4c:62:d9:83:9d:fb:5c:
1d:4d:97:fd:67:3d:75:19:2f:42:60:df:c3:51:e9:bc:28:d1:
f2:4d:16:68:57:a1:5c:bd:a9:95:fb:e0:08:6d:e3:50:c3:51:
e7:d9:34:92:e2:db:66:63:bf:ef:2b:ed:5d:ae:52:79:dc:54:
81:21:49:53:38:26:c2:48:96:eb:4c:58:db:33:3c:28:22:fa:
09:5a:af:80:dd:32:cd:97:f6:55:c2:61:aa:20:fc:ec:35:a1:
9f:40:35:b3:80:04:0d:20:a5:5d:ba:72:d1:aa:7f:d1:5a:c0:
34:68:5e:4e:23:18:c7:e5:f3:09:5c:36:d1:fb:67:cd:90:4d:
88:65:bd:4d:cf:13:7c:70:d2:1d:44:7a:f9:92:89:b5:a8:50:
73:93:40:75:e2:2b:b1:46:63:fa:ee:98:56:5a:4e:df:d0:34:
74:6e:ed:70:81:d8:90:9f:d6:0c:2b:57:7b:7f:61:d4:75:f4:
8e:1d:a9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:58:52 2026 by rpki-client