Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
File: RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer (raw, json)
Hash identifier: q6Mp5dtPNBoXWYMNGMd2G7gUkx2cs6Yi1dKzVXu6CTk=
Subject key identifier: 44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A28CEAC80CFB1CA33039227459B4BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:17:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199680
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:8c:ea:c8:0c:fb:1c:a3:30:39:22:74:59:b4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=440586c54614b96edb84709524a334b31c9999fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:c5:a5:07:6f:dd:e1:99:36:99:67:1f:2c:
8b:fc:a6:70:28:57:fd:06:f1:64:5b:cb:ac:6a:75:
7d:d1:87:d7:66:cd:fd:57:b9:4d:5f:6a:40:14:74:
c8:c0:fc:8b:c7:de:74:d2:fc:15:10:8f:68:73:98:
91:8e:2c:28:97:1d:8f:88:6b:17:8a:ff:a1:ab:5f:
ee:21:7a:79:40:35:97:33:30:1c:c2:91:88:32:76:
7b:96:a7:31:3b:9b:13:9f:e0:dc:02:fb:35:be:d0:
83:23:93:b0:ae:46:2a:a4:c9:8a:21:89:85:d2:ef:
e7:01:3e:67:e6:2d:c4:72:b1:11:8d:59:5b:00:7a:
31:bf:7b:33:e4:9d:d5:fb:a5:ee:36:60:e8:30:ab:
0e:fe:5e:ef:1c:d8:75:f7:0f:db:d5:c6:3a:ce:b0:
24:34:b2:62:85:5c:8c:48:60:af:eb:21:2d:ba:3d:
21:53:78:1e:bf:25:3f:80:2a:37:83:65:7c:37:72:
9f:94:82:87:83:ed:01:df:d9:b6:81:ee:ad:d6:ca:
04:7a:d5:68:78:50:d8:f3:c0:5f:ef:ad:7e:5a:92:
83:36:68:d0:ac:7c:4b:0f:e5:d0:0e:83:1a:cd:36:
fc:3c:43:0b:47:bd:c3:c1:8b:e7:8f:93:ea:db:78:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199680
Signature Algorithm: sha256WithRSAEncryption
98:72:2b:48:2a:d4:90:72:ed:65:0e:08:02:c5:89:05:70:2e:
80:20:cc:7a:f8:81:de:b5:cb:3c:0d:c0:92:0a:6d:51:91:ea:
f2:9e:5b:04:6a:5d:15:ef:e7:84:20:88:0f:33:86:33:95:a1:
2c:5c:03:18:55:da:18:c1:09:ea:84:8e:81:71:95:fc:42:17:
43:61:4d:77:24:cd:58:50:b5:28:2d:49:2e:03:36:42:ad:cf:
47:21:23:ae:68:44:d5:ea:a6:80:ef:c6:25:23:3d:fb:04:ca:
c7:c5:8b:c5:c0:9c:63:71:8c:f5:93:99:03:70:e9:4d:71:a2:
88:7a:7c:df:39:0d:41:e4:bd:21:10:80:24:1f:e9:11:d6:0f:
8f:07:a2:9d:f9:a3:53:fa:9f:92:4a:eb:e9:77:bd:6d:86:7e:
89:74:a5:aa:2f:8b:a4:54:a8:3a:78:14:96:2c:e7:3e:b7:97:
6b:26:a6:71:89:68:41:b4:87:0d:57:c7:f1:47:87:52:62:d6:
3b:fa:ca:b9:80:f9:70:22:96:fb:5a:79:79:96:ae:92:01:16:
c5:69:47:3a:97:68:50:13:97:04:20:a1:ec:21:55:aa:65:10:
49:65:b1:89:24:0f:c4:a0:be:84:e1:ef:d0:60:10:ef:bd:54:
98:57:f6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:08:13 2026 by rpki-client