Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Tg71tE8TMM10Sozex6Z2h2ay4H8.cer
File: Tg71tE8TMM10Sozex6Z2h2ay4H8.cer (raw, json)
Hash identifier: HemlG7UQkxB/feVx18r0ipCeDkqkgFTpU5TBMRgXTng=
Subject key identifier: 4E:0E:F5:B4:4F:13:30:CD:74:4A:8C:DE:C7:A6:76:87:66:B2:E0:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0E858D05A735C0864A2C4709F99A3102A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f960d-6eb2-445c-a822-a5c1782c9668/1/Tg71tE8TMM10Sozex6Z2h2ay4H8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f960d-6eb2-445c-a822-a5c1782c9668/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Sep 2026 14:08:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218569
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:58:d0:5a:73:5c:08:64:a2:c4:70:9f:99:a3:10:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 28 14:08:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e0ef5b44f1330cd744a8cdec7a6768766b2e07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:3a:a8:c8:9c:1d:99:e7:04:17:32:62:b0:
35:e6:3c:4a:a7:a2:00:f5:ab:0c:23:75:cf:ec:bb:
2b:dc:28:fe:6b:9c:d6:03:09:4e:9c:04:51:e7:e1:
6f:f1:cd:25:11:14:01:d7:e4:52:be:8e:ed:88:3b:
de:3a:66:36:3f:33:e7:ad:c7:b9:a4:01:b0:29:6b:
e9:d2:d6:87:37:09:24:eb:a6:ef:6d:e5:5c:c2:a6:
9e:43:db:cd:2c:a6:69:b8:b4:88:04:47:5c:29:dd:
05:a2:c5:d3:76:4b:87:87:93:a4:98:30:e1:72:50:
77:b6:2b:13:ec:89:db:b2:c7:e1:99:15:18:cc:3d:
fc:5e:bb:e0:51:a4:a0:ae:e8:7b:6e:75:da:38:77:
06:d9:0c:4f:17:85:17:06:c9:67:25:18:5c:57:b8:
95:c8:ca:47:70:8a:0e:0c:37:4d:da:29:ac:6f:81:
ba:08:e2:d6:d1:6d:f3:dc:72:71:78:44:52:c5:04:
4e:e6:f2:b2:60:a0:51:51:b6:40:d0:5f:f4:e9:38:
53:33:fc:94:66:8a:ff:a6:4d:2d:67:84:64:0a:c7:
5f:eb:17:07:60:64:26:2e:07:1f:79:8a:35:21:49:
6a:6c:15:56:61:64:e1:34:9d:51:48:da:85:84:7f:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0E:F5:B4:4F:13:30:CD:74:4A:8C:DE:C7:A6:76:87:66:B2:E0:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f960d-6eb2-445c-a822-a5c1782c9668/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f960d-6eb2-445c-a822-a5c1782c9668/1/Tg71tE8TMM10Sozex6Z2h2ay4H8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218569
Signature Algorithm: sha256WithRSAEncryption
3b:0c:a2:0c:e1:e4:60:bc:a5:2b:66:2b:8d:58:55:1f:c3:03:
d5:ef:17:62:ec:0b:d2:31:23:51:39:d1:26:f9:96:70:de:76:
89:03:08:94:e9:2d:41:0c:04:07:2d:10:df:19:cb:fe:d2:d4:
6d:5a:7f:2f:3b:c2:8f:9b:2f:d6:18:06:93:57:ce:c9:7d:44:
d6:ea:23:c6:44:a4:26:26:48:dd:24:4a:25:c5:38:fb:71:ac:
f8:d2:20:b3:57:75:af:ba:cb:8a:2d:16:c2:8d:79:41:1d:bf:
7d:44:cd:f7:de:9c:a1:f1:63:ec:e2:df:af:93:ec:99:de:d3:
b1:32:08:c4:d1:af:73:a7:49:09:76:0b:b3:54:54:0e:2b:a2:
57:7a:03:13:c2:67:ab:a0:a6:01:e1:d2:81:1c:83:18:ce:2c:
cc:fe:62:3f:b3:b0:8d:76:c8:26:ac:69:5a:e8:e3:e9:08:d4:
40:5c:9d:9b:44:e5:cf:2f:f2:95:bd:c4:79:e8:46:7a:81:0f:
ca:02:74:2d:4d:be:f1:6f:d7:9e:c0:67:96:5e:42:51:e4:d3:
2c:27:49:96:39:9f:ac:e7:a5:69:5d:c0:00:0d:01:c3:ad:11:
d0:19:33:ab:e3:dc:7f:a9:31:5a:5f:4f:4f:89:8f:09:1b:49:
de:11:37:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 03:08:39 2026 by rpki-client