Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/S6fJoMZPbB33LdgBBdDmNvPDoC0.cer
File: S6fJoMZPbB33LdgBBdDmNvPDoC0.cer (raw, json)
Hash identifier: 4FJRzesW7tUWIa/aYxIs/GCYRZPYECpOjic2hnj1S9Y=
Subject key identifier: 4B:A7:C9:A0:C6:4F:6C:1D:F7:2D:D8:01:05:D0:E6:36:F3:C3:A0:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A067F67751D611740888957BAD78200B2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Sep 2026 15:50:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 157.249.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:f6:77:51:d6:11:74:08:88:95:7b:ad:78:20:0b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 3 15:50:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ba7c9a0c64f6c1df72dd80105d0e636f3c3a02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:a6:0f:af:7b:30:e9:43:50:18:3a:55:bf:
97:ad:f4:56:46:08:f2:12:77:69:88:73:8b:31:45:
9c:77:28:49:69:b2:32:11:18:7a:51:9a:a7:04:9f:
74:86:2d:9d:a1:57:ed:16:70:0c:7a:95:4d:59:fa:
e1:f4:5f:3b:a7:08:5a:04:67:74:a1:66:30:6f:c9:
58:dd:42:5c:40:8a:6a:0b:64:61:83:18:89:f7:eb:
cc:cd:ee:43:78:b1:f1:9e:ce:c4:0d:4f:de:f4:80:
96:99:90:05:eb:24:8b:bf:bc:f3:59:65:d7:09:30:
e0:08:0f:97:89:46:a5:a0:0f:49:52:a3:92:bb:97:
49:f2:5f:62:ac:8c:07:dd:cb:66:b3:4a:ac:3b:2c:
d8:9d:cd:69:b8:18:3d:cf:1b:53:cd:2b:7e:bb:80:
ea:7b:47:34:58:0e:5e:07:54:a4:38:f3:79:df:70:
2b:e0:78:de:ba:c6:d8:f5:96:8e:f2:5c:33:e1:88:
53:da:fd:cb:8c:d2:de:78:2a:aa:52:76:56:fe:82:
fb:90:e8:41:7a:b1:a3:fb:d8:7f:9b:28:35:6b:f7:
00:07:2c:9c:19:a3:cc:14:90:33:cd:0a:4d:14:47:
d1:e4:34:90:04:7d:f3:0f:5f:41:82:2f:c1:d4:76:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A7:C9:A0:C6:4F:6C:1D:F7:2D:D8:01:05:D0:E6:36:F3:C3:A0:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.249.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0b:a1:4b:a2:a5:ac:5b:0a:3f:72:f3:9c:22:25:f6:79:05:02:
7f:08:d7:b1:8a:48:c6:16:e4:6d:a2:ba:01:b7:57:d8:54:df:
0b:4c:f3:79:1b:97:33:56:39:4a:57:87:f4:bb:aa:99:12:7b:
e3:4f:43:fa:06:33:a1:e2:b9:fe:e3:11:85:ab:68:b8:66:63:
77:9f:c6:0b:15:4e:5e:1f:33:3f:cc:b6:5d:c6:f8:fd:cd:98:
55:b1:7e:75:9a:aa:15:e9:36:ad:8a:cc:91:41:ba:d0:d2:26:
cc:c7:11:ef:e9:6e:ee:69:2c:fa:14:88:e7:03:6f:0e:0f:1b:
3f:f5:9c:d4:90:83:27:4e:34:54:ac:86:17:9e:81:65:48:46:
d4:57:05:86:df:72:c6:54:09:c9:ce:d8:d1:9f:e4:68:94:92:
b1:fe:33:06:71:58:6c:67:75:12:47:88:6b:b5:ce:df:05:48:
85:c8:a0:0d:b0:02:20:ac:a4:f8:26:6b:fa:f3:74:b2:d3:ae:
e6:b8:47:c6:41:80:f0:a3:be:01:bf:53:57:48:73:ae:68:b5:
ff:49:26:f0:b6:a2:94:2d:9e:92:c6:2c:f0:ee:97:e6:7b:a6:
c9:04:e1:c8:03:fb:b6:52:da:b6:f9:5b:e0:c3:b4:0e:12:fc:
39:15:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:41:20 2026 by rpki-client