Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer (raw, json)
Hash identifier: 5al7JiAvUhTLFBSVjFXAgq66+h1ARSS29UdFzeOBMnI=
Subject key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5CE68499EA4EC438A11B95308B2CDA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:19:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2f50::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:e6:84:99:ea:4e:c4:38:a1:1b:95:30:8b:2c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:9d:7b:65:20:a9:45:d2:a5:95:91:de:77:
b8:23:ed:99:35:4c:2d:ef:fc:83:de:e7:a2:85:7a:
5b:5d:a4:eb:bc:ba:ae:b1:b0:d2:ad:f0:2e:51:2b:
f6:a5:ef:77:d9:35:99:25:0e:82:55:7b:28:79:bc:
c6:8f:d4:04:ef:15:9e:db:42:49:27:6e:5c:3b:68:
83:d9:ca:bc:e6:b9:a6:7c:08:a5:17:f3:3f:a0:2f:
33:3f:15:8b:19:e6:94:28:d2:5e:24:71:0f:38:01:
33:9d:31:af:60:08:1b:79:fd:db:2b:fa:ff:79:c8:
cf:cf:79:30:b9:d1:54:a3:86:aa:25:70:21:8f:5b:
6d:35:5b:2a:74:a4:86:ba:71:05:a3:55:4e:00:3c:
e7:cd:cb:1e:a5:c2:1a:51:75:66:9f:f8:98:18:38:
52:74:f4:e7:e7:ae:27:0b:98:09:7f:7e:aa:39:93:
b7:4e:c3:6f:e4:fb:7a:1c:a2:fb:12:73:d8:7e:09:
31:9a:31:2c:5f:e7:b7:3d:b0:f3:0b:a7:69:ed:67:
b1:fe:a4:05:a2:b8:7e:ed:39:01:66:db:f7:ef:18:
de:5b:70:a1:f7:af:f8:67:83:17:18:a6:a9:2e:6f:
50:52:79:74:0b:25:f7:26:69:e7:54:06:8d:81:d9:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2f50::/48
Signature Algorithm: sha256WithRSAEncryption
21:7e:13:b8:c4:e2:8d:00:61:64:d0:2e:47:21:d3:6e:3b:a5:
8b:0a:e1:ba:4a:15:b5:b8:4d:28:fb:43:c1:1e:2c:c4:72:ea:
fb:bf:5c:51:1d:18:e1:9c:e2:6c:70:0f:2f:c2:70:bb:f6:a5:
a7:42:94:4c:c3:85:a3:66:28:77:7a:ff:ad:49:1e:2c:6c:4e:
18:5e:ac:27:5f:d9:f0:c7:66:6a:5d:54:d3:d2:91:ae:d9:df:
72:5c:27:3f:6d:b5:5f:65:1c:4f:6f:db:f8:98:53:76:bf:e3:
73:45:79:76:93:25:52:f7:b9:d6:09:21:b1:6a:f1:77:98:25:
a0:23:3d:02:ea:2c:7e:b1:fd:fd:34:9a:f9:28:e3:70:32:6a:
93:be:ed:92:38:94:dc:17:a2:b0:b1:2a:08:a7:84:e8:68:11:
38:76:9f:35:31:b7:2c:81:fd:bb:9f:6c:02:6b:05:86:a7:ec:
fe:03:f7:11:d5:b1:2a:69:06:e2:8b:d8:1d:ef:83:c7:bf:12:
75:27:05:93:25:6a:59:be:bc:f0:ff:6b:80:73:08:a8:df:e2:
5c:32:8a:ab:60:74:df:4c:7c:83:a7:ba:de:07:34:4f:4e:25:
9e:3c:35:34:db:8c:05:a4:80:b3:65:43:d7:18:8d:20:6d:ff:
24:e0:5b:f8
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZt9XOaEmepOxDihG5UwiyzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDNmNTRmMzA0ZTZiODUxNjA4YzI5Mzk3OGIxNmJhNTFhYzAzNTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2Wde2UgqUXSpZWR3ne4I+2ZNUwt
7/yD3ueihXpbXaTrvLqusbDSrfAuUSv2pe932TWZJQ6CVXsoebzGj9QE7xWe20JJ
J25cO2iD2cq85rmmfAilF/M/oC8zPxWLGeaUKNJeJHEPOAEznTGvYAgbef3bK/r/
ecjPz3kwudFUo4aqJXAhj1ttNVsqdKSGunEFo1VOADznzcsepcIaUXVmn/iYGDhS
dPTn564nC5gJf36qOZO3TsNv5Pt6HKL7EnPYfgkxmjEsX+e3PbDzC6dp7Wex/qQF
orh+7TkBZtv37xjeW3Ch96/4Z4MXGKapLm9QUnl0CyX3JmnnVAaNgdkEqwIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFE0/VPME5rhRYIwpOXixa6UawDUOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2I3Mzdm
Ni0zMDRiLTRjNGYtYjg4Ny03MTEwODI1OGYxYjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvYjczN2Y2
LTMwNGItNGM0Zi1iODg3LTcxMTA4MjU4ZjFiOS8xL1RUOVU4d1RtdUZGZ2pDazVl
TEZycFJyQU5RNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC9QMA0GCSqGSIb3DQEBCwUAA4IBAQAh
fhO4xOKNAGFk0C5HIdNuO6WLCuG6ShW1uE0o+0PBHizEcur7v1xRHRjhnOJscA8v
wnC79qWnQpRMw4WjZih3ev+tSR4sbE4YXqwnX9nwx2ZqXVTT0pGu2d9yXCc/bbVf
ZRxPb9v4mFN2v+NzRXl2kyVS97nWCSGxavF3mCWgIz0C6ix+sf39NJr5KONwMmqT
vu2SOJTcF6KwsSoIp4ToaBE4dp81Mbcsgf27n2wCawWGp+z+A/cR1bEqaQbii9gd
74PHvxJ1JwWTJWpZvrzw/2uAcwio3+JcMoqrYHTfTHyDp7reBzRPTiWePDU024wF
pICzZUPXGI0gbf8k4Fv4
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:05:43 2026 by rpki-client