Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
File: PRKXkoZrFiE7VsW_pr66x8YYsVA.cer (raw, json)
Hash identifier: ECiDwXay/ebs4i2wb5eZIREUuROy6hC9JhtHWdT1MEw=
Subject key identifier: 3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C735A8833E0B11CE3B691EA0B9B015
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:18:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208714
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:35:a8:83:3e:0b:11:ce:3b:69:1e:a0:b9:b0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d129792866b16213b56c5bfa6bebac7c618b150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:85:85:9e:50:59:2e:0d:74:bf:3d:6f:74:
e2:6d:74:61:71:2d:25:b3:d7:fe:96:e0:d2:1a:33:
ee:de:0d:17:c8:b8:be:7a:97:76:fc:d8:f7:8e:3a:
2f:40:82:88:77:1f:9e:0f:a7:6b:42:d6:8e:29:c4:
0e:4e:e4:32:1d:80:b0:86:e2:43:b4:0f:3a:8e:e8:
7c:e7:bd:39:1b:4f:51:78:b0:60:eb:a1:84:f2:ec:
72:33:91:18:ee:bd:77:b6:52:38:7f:a5:a8:e3:72:
af:07:a3:2d:4b:ef:42:13:e2:44:5e:48:13:74:98:
dd:e6:78:98:b9:10:05:bc:b2:41:03:cc:2f:ee:e4:
30:88:91:08:05:43:0a:19:ae:87:35:c2:9a:61:43:
7b:6a:af:69:30:92:88:a8:45:26:40:8c:10:17:6c:
a8:a5:72:13:00:1d:60:62:5d:d5:e2:1d:fe:de:a9:
21:d1:dc:43:38:bb:c4:3e:2a:21:e0:1e:98:c1:69:
05:ee:5c:14:bf:88:6a:13:5d:f3:fb:bb:7d:a4:6e:
3c:d2:07:29:ff:00:20:2b:03:76:03:f9:2e:d5:3e:
52:0e:d9:9c:7d:a7:d9:16:42:c9:57:85:06:69:55:
a9:b3:4f:01:c1:9b:46:08:08:20:66:16:45:06:30:
99:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208714
Signature Algorithm: sha256WithRSAEncryption
50:5b:85:8b:4d:2d:92:1b:f2:3b:34:3a:d0:98:a5:c3:c8:a8:
98:90:55:af:a3:77:76:9c:24:30:7c:9b:ed:3c:7a:1d:b0:74:
56:59:b8:0d:51:89:c7:d1:78:72:22:36:2a:a7:23:c1:d4:fa:
2c:ab:e1:f3:a9:b3:af:bb:36:b3:8b:3e:e6:b4:d7:82:c2:9b:
1e:00:56:49:a0:bc:2c:a2:bf:71:8c:a3:93:e6:cb:5b:b2:2c:
eb:9e:cc:a2:f1:37:2e:4e:24:cf:75:1b:59:9e:73:97:78:0a:
30:d0:f0:b5:f4:18:e1:78:e2:07:29:65:02:b6:1b:1b:fb:3d:
6f:02:a1:57:88:57:07:d9:bd:de:9d:33:42:58:9b:79:9e:9f:
4b:a7:7e:50:0b:9c:eb:4f:f9:cc:e4:8f:38:53:b6:14:d0:0e:
1f:71:ba:60:da:d7:55:64:7d:d0:9d:f4:bd:48:65:28:22:79:
71:61:9d:47:ea:a9:dd:26:fa:64:2b:8a:5e:dc:42:62:e3:ba:
6c:ac:4c:fb:ba:a9:86:da:8b:02:33:11:a0:62:0a:7f:4a:c6:
ce:77:31:89:a8:be:d0:8e:0b:b1:6e:ee:58:a2:9a:a1:4d:d9:
50:67:74:c8:ce:aa:bd:a3:fe:b7:92:ce:f0:33:55:7d:b7:b6:
30:1b:29:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:48:39 2026 by rpki-client