Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer
File: ScKchYIxItOsfH9IBdWyQocNLeI.cer (raw, json)
Hash identifier: MWER0qApCs/QbvQiw+uHOl874U3jLiyKhIj6pUpIBJY=
Subject key identifier: 49:C2:9C:85:82:31:22:D3:AC:7C:7F:48:05:D5:B2:42:87:0D:2D:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797EFD7AD288A569EA7865B44973D1FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202269
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:fd:7a:d2:88:a5:69:ea:78:65:b4:49:73:d1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49c29c85823122d3ac7c7f4805d5b242870d2de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:77:ad:f4:f0:9d:0d:a4:28:0f:ef:7d:30:
78:ea:1c:35:57:66:4e:9a:bc:ac:3b:8e:a2:ea:32:
33:8d:62:30:02:7d:79:cf:50:12:a5:95:b5:6b:4c:
a3:01:be:95:9b:00:e8:de:dd:ae:79:ea:fb:71:c0:
bf:c1:ac:4f:1a:9b:2c:1e:53:0d:11:4f:4a:aa:a7:
46:a9:75:41:2c:00:eb:7e:c0:f9:e1:19:85:6a:71:
2f:cf:e4:3e:5b:11:d4:b9:7f:5e:05:80:b0:1a:1d:
4e:c4:f5:cf:17:d0:35:f3:85:7f:f5:63:69:fb:62:
9e:49:d6:e0:9e:cc:8d:da:0e:bc:dd:67:55:f2:20:
23:43:a9:87:00:74:73:b7:40:e3:af:b4:e5:a4:05:
56:7d:bf:ef:a0:67:e2:19:c0:95:64:32:c5:23:5b:
d8:3e:14:2c:5f:18:60:e6:c2:fb:da:4b:2d:5a:75:
f0:be:a2:55:82:73:cb:2b:8f:97:8f:71:77:2a:1a:
bd:58:c9:11:0b:af:47:8b:d0:c2:69:16:bb:43:6c:
70:c1:1a:c0:41:80:e2:1c:ce:ea:01:33:df:0c:88:
d2:44:8d:f1:da:6f:36:71:b2:fb:07:e4:74:27:45:
f5:7c:4c:15:3e:08:e8:ce:47:c6:4b:af:e8:64:e9:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C2:9C:85:82:31:22:D3:AC:7C:7F:48:05:D5:B2:42:87:0D:2D:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202269
Signature Algorithm: sha256WithRSAEncryption
56:27:0b:5f:67:7b:a5:7a:9c:cd:63:92:f7:6e:c0:9b:ae:24:
92:24:89:98:c7:0f:57:b7:3b:4e:a1:fa:6f:18:29:fd:82:71:
f1:95:ff:91:95:a6:db:c1:de:11:8f:e5:07:f9:e2:30:1c:2b:
16:3a:fd:9d:9b:7d:e8:e4:29:17:ed:93:c2:d1:3b:fa:89:d7:
64:ab:5a:a3:6d:01:84:6c:47:90:69:88:49:9e:f1:5f:27:8b:
06:dd:82:7c:c0:3a:fd:0f:da:f9:48:f8:00:5a:b0:4d:7a:29:
b8:ae:8a:72:fd:ec:ba:ac:7d:01:91:25:df:1e:34:1e:90:79:
5d:1a:8d:4d:0c:3d:2c:fa:55:c3:94:7f:91:1d:d6:1f:4e:0c:
09:e3:7f:1b:c9:3c:09:e7:76:1c:01:a6:da:cc:78:fc:ec:cf:
66:46:a5:34:d3:0e:0c:b2:5b:61:62:0a:e2:0e:c8:53:a6:39:
d9:b4:b4:29:77:e3:9c:a6:83:49:30:97:60:10:9b:00:c3:ee:
c9:2d:48:4b:6d:5b:74:1b:92:9d:d2:69:77:5e:9f:18:54:bc:
bf:ff:16:8f:6f:11:10:60:8c:89:1f:bf:ba:a5:01:a7:31:1d:
ff:b3:8f:55:ab:eb:ad:54:f8:f9:5d:72:cf:5f:40:50:8a:3f:
ca:5e:d4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:37:09 2026 by rpki-client