Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.cer
File: T1vL-9AIRYoJuxTRrJ8DIXLjuQA.cer (raw, json)
Hash identifier: CxWefkZiTfi5MEXl0H/iNqj6f4MWY6VXuAxQuigm+1c=
Subject key identifier: 4F:5B:CB:FB:D0:08:45:8A:09:BB:14:D1:AC:9F:03:21:72:E3:B9:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797F0A188F9D3B29254CEEE812A4AF7F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39844
AS: 200940
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:0a:18:8f:9d:3b:29:25:4c:ee:e8:12:a4:af:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f5bcbfbd008458a09bb14d1ac9f032172e3b900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:f3:66:9a:32:5e:66:f6:00:3c:df:09:61:
e1:5e:b1:c0:81:c3:89:7e:26:c7:04:02:d3:cf:e2:
93:55:68:83:49:38:e4:d1:c4:4e:c1:3c:c4:36:51:
6e:7b:4b:34:e4:57:18:02:44:11:4d:b3:dd:7f:6c:
be:ac:99:cf:08:73:98:5d:a9:23:bf:9c:27:2d:8e:
08:0d:65:60:4c:be:04:08:75:65:8c:d3:b7:90:97:
dc:76:16:79:4f:56:a0:66:71:2a:e6:ea:a1:6f:7c:
27:be:c5:07:7e:26:f0:fe:e2:de:88:5a:7b:ee:72:
0a:5c:32:c0:a3:e8:3a:47:9d:18:de:4d:4c:77:2f:
00:ff:f0:96:3a:81:5f:61:a9:8a:68:b4:dd:49:f2:
d5:66:8a:c9:e8:b0:be:26:73:62:1c:a5:18:34:98:
2e:fe:91:6b:b9:c3:99:c0:64:5b:b7:eb:54:b4:cd:
cc:bc:97:ed:11:3b:cb:b0:27:9c:12:63:bb:b8:55:
9b:ee:bd:ec:28:54:6b:20:1f:b2:4a:5f:72:0b:6e:
73:c1:0c:69:02:48:76:57:fc:46:a9:eb:d1:3d:8e:
d2:d4:93:a6:81:53:62:20:c2:ad:f7:b5:21:08:10:
e0:68:1b:19:10:80:3b:32:cd:79:2c:cd:49:7a:c2:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5B:CB:FB:D0:08:45:8A:09:BB:14:D1:AC:9F:03:21:72:E3:B9:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39844
200940
Signature Algorithm: sha256WithRSAEncryption
40:ac:e0:67:25:34:a0:28:1f:dc:15:65:d6:54:34:02:5d:92:
42:df:a4:1f:92:d9:b3:80:b3:1b:b1:29:10:a4:c3:9f:c3:4b:
0d:4e:42:f2:62:8c:3d:fd:2a:14:dd:19:f1:c8:db:cc:32:3c:
34:70:36:4a:f4:f0:67:cc:00:c4:c3:3d:ce:75:df:e4:23:a7:
7f:e9:6f:da:7c:fb:d6:07:09:31:0f:d8:52:d2:d6:c3:48:34:
91:0c:3c:bc:1c:26:fd:a5:78:c9:5a:23:b2:68:de:a9:a0:fa:
9b:e3:cb:77:71:5a:95:b7:5f:6a:e9:10:e8:36:23:87:52:87:
8e:06:40:85:9b:0b:1f:f4:32:fb:b1:cb:50:05:cf:60:25:d7:
5d:25:52:10:a3:c6:93:38:91:47:56:96:e3:bb:e5:32:78:04:
45:e6:c0:f6:df:91:80:7a:f4:48:5e:98:4f:90:2e:44:34:53:
2b:41:e4:84:4d:52:db:ba:dd:37:a4:b5:5f:76:94:38:8e:75:
90:0e:cb:7f:e3:52:02:1d:8e:f3:6d:38:ef:ef:3e:fd:31:60:
8c:a0:d0:58:1a:4a:9e:f6:33:18:3e:a3:f4:13:07:11:ee:06:
3a:f3:b9:51:89:77:02:79:0f:d9:32:a2:7a:41:ed:a6:b9:79:
00:8b:ad:13
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZt5fwoYj507KSVM7ugSpK9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjViY2JmYmQwMDg0NThhMDliYjE0ZDFhYzlmMDMyMTcyZTNiOTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7vzZpoyXmb2ADzfCWHhXrHAgcOJ
fibHBALTz+KTVWiDSTjk0cROwTzENlFue0s05FcYAkQRTbPdf2y+rJnPCHOYXakj
v5wnLY4IDWVgTL4ECHVljNO3kJfcdhZ5T1agZnEq5uqhb3wnvsUHfibw/uLeiFp7
7nIKXDLAo+g6R50Y3k1Mdy8A//CWOoFfYamKaLTdSfLVZorJ6LC+JnNiHKUYNJgu
/pFrucOZwGRbt+tUtM3MvJftETvLsCecEmO7uFWb7r3sKFRrIB+ySl9yC25zwQxp
Akh2V/xGqevRPY7S1JOmgVNiIMKt97UhCBDgaBsZEIA7Ms15LM1JesLw1QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFE9by/vQCEWKCbsU0ayfAyFy47kAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2M4ZmYz
NC1lNmQ3LTQ3YjEtYmM2NC0xNGE5MDgxYjQ3N2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYzhmZjM0
LWU2ZDctNDdiMS1iYzY0LTE0YTkwODFiNDc3Yy8xL1QxdkwtOUFJUllvSnV4VFJy
SjhESVhManVRQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwCbpAIDAxDsMA0GCSqGSIb3DQEBCwUAA4IBAQBArOBn
JTSgKB/cFWXWVDQCXZJC36QfktmzgLMbsSkQpMOfw0sNTkLyYow9/SoU3RnxyNvM
Mjw0cDZK9PBnzADEwz3Odd/kI6d/6W/afPvWBwkxD9hS0tbDSDSRDDy8HCb9pXjJ
WiOyaN6poPqb48t3cVqVt19q6RDoNiOHUoeOBkCFmwsf9DL7sctQBc9gJdddJVIQ
o8aTOJFHVpbju+UyeARF5sD235GAevRIXphPkC5ENFMrQeSETVLbut03pLVfdpQ4
jnWQDst/41ICHY7zbTjv7z79MWCMoNBYGkqe9jMYPqP0EwcR7gY687lRiXcCeQ/Z
MqJ6Qe2muXkAi60T
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:19:50 2026 by rpki-client