Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
File: TkJsh9-8xVLceQ_sPtHN56j4huk.cer (raw, json)
Hash identifier: Nu60oRQqzosQmtD/7Y3BPMVAYPxULEXuSr22BSO/9MY=
Subject key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA6FD1BD2858C3EEC3EE40AB9B55FFC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:20:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48197
IP: 94.127.152.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:fd:1b:d2:85:8c:3e:ec:3e:e4:0a:b9:b5:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:20:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:fe:85:bd:c7:27:9c:f8:52:a7:60:7b:67:
60:2c:5e:6d:dc:e7:4e:9c:ca:16:b9:a3:54:29:34:
47:8a:59:68:ab:8f:0e:2a:71:9c:4d:ca:cd:e1:c3:
4a:e9:68:1b:5d:ee:b4:76:fa:66:81:8b:48:7e:49:
3b:cd:2e:49:35:f7:d4:d4:39:c4:4a:56:ac:d9:ed:
a6:eb:2f:03:43:37:54:4d:dc:9b:25:f7:3f:2c:6e:
ee:8d:33:d1:3b:48:ef:99:58:92:a4:01:e1:9a:4d:
0d:fc:d4:23:33:56:01:bf:89:ef:e1:2a:ab:77:55:
7b:24:f6:77:ff:8f:bc:9b:78:c9:c9:70:7b:4c:8a:
5d:80:0e:46:55:0c:ff:4e:23:17:64:0d:49:55:80:
8b:39:4d:26:b5:c0:fd:4e:31:b6:63:18:c9:b3:ac:
df:e2:d8:bc:3e:b6:5c:cb:bf:bc:03:cf:1f:d6:1c:
2f:cb:9b:88:e0:6e:e6:b8:1e:2f:35:1a:b1:2b:7d:
8e:f4:0a:96:f2:a0:da:42:f5:3c:a7:40:78:e4:5a:
71:6f:ea:5a:28:19:52:39:5d:14:7c:e0:62:57:72:
8d:7b:b4:0b:7a:2e:a9:69:f9:8c:bc:f2:23:49:19:
0c:1a:2c:e7:bc:68:0c:7d:e7:18:c9:40:43:b6:59:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.152.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48197
Signature Algorithm: sha256WithRSAEncryption
8e:54:30:6d:1a:a9:0b:29:a2:5e:e8:ea:b5:b1:61:a4:01:67:
14:da:7b:6e:34:49:79:91:39:cc:91:9a:6b:63:07:1d:3b:0e:
25:0d:39:ac:c7:3f:00:2c:ac:5b:48:a5:0b:2e:ab:d6:db:f7:
1f:ff:15:14:f9:00:82:b8:69:7f:c8:5f:85:5e:d3:2d:75:8d:
06:d6:ec:8c:dd:6e:f4:78:e7:3a:20:6d:e3:12:14:d6:3b:9b:
b8:8d:63:51:4d:ef:ab:fc:80:ba:5e:73:4d:41:25:ac:54:3d:
3c:0d:16:e6:16:21:2a:79:c4:7b:8f:91:3a:0e:26:9b:b9:37:
0c:b2:49:39:29:2a:06:9f:ab:00:0e:7b:28:0e:71:76:ba:af:
6e:d7:64:3a:47:a8:4b:bd:2e:c0:bc:76:96:81:74:b3:f0:2f:
08:51:73:56:32:fe:a7:b5:76:9b:3b:1a:d2:eb:74:e9:73:ce:
a3:76:bd:9d:65:dd:99:cd:b8:0c:16:17:ab:bc:c5:f0:8b:20:
90:b0:61:bd:4d:ef:ef:d3:49:20:2f:f5:ff:c9:1f:7a:f6:c3:
cc:e7:03:20:c9:a6:72:10:a0:48:ca:f8:c7:f2:5e:61:53:42:
7e:39:53:47:fa:68:f4:a4:76:8a:09:c5:39:26:a6:dc:3f:d3:
0f:88:e5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:30:01 2026 by rpki-client