Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aPgE6F8ICkuVFSbfi3IwEAe37es.cer
File: aPgE6F8ICkuVFSbfi3IwEAe37es.cer (raw, json)
Hash identifier: z9dXD8t35zPcx/q8yBdhhPhK5EZKyIOA08vhSoFf50s=
Subject key identifier: 68:F8:04:E8:5F:08:0A:4B:95:15:26:DF:8B:72:30:10:07:B7:ED:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ECB12708544DFF03423E2FF4293934
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/e6b0ca-fd49-4889-a92e-89af1f2628e6/1/aPgE6F8ICkuVFSbfi3IwEAe37es.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/e6b0ca-fd49-4889-a92e-89af1f2628e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203458
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:b1:27:08:54:4d:ff:03:42:3e:2f:f4:29:39:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68f804e85f080a4b951526df8b72301007b7edeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:7b:ad:6e:be:b6:7e:71:78:52:04:ff:02:
27:19:41:3a:23:ee:1d:79:95:91:5b:e8:c5:3e:a5:
db:e6:ed:fa:1a:f4:e9:23:c9:cd:82:f2:bc:73:7a:
eb:1b:99:0a:49:93:a9:96:e5:38:80:5d:cc:67:c3:
2d:8c:3f:76:cf:47:c5:68:c4:ed:08:3d:5f:fe:ee:
14:ee:36:79:4d:0f:ac:95:4a:c2:fc:77:ca:b7:27:
8a:77:ed:d9:38:24:a6:13:ac:f8:9f:72:e2:71:ee:
25:6d:5a:9d:47:93:55:2f:2a:fe:22:cd:2d:fc:9f:
a5:ba:5f:ec:fd:10:42:40:b7:bd:5c:eb:7e:e4:84:
f9:6e:5d:2d:36:29:6c:3e:50:33:5a:56:d1:0e:f8:
b8:1c:65:ce:f5:c9:f1:36:56:fe:58:45:08:2f:63:
7b:49:f7:3a:ab:d6:db:47:ce:be:c7:86:b3:7e:65:
3b:2d:2c:57:e6:e6:b5:01:6d:c8:3e:18:9a:ed:03:
01:1a:d3:70:f7:fc:c6:57:67:1e:1f:d3:cf:96:83:
5f:00:65:8f:54:c3:60:ad:42:a7:7f:64:65:8d:b7:
f6:a0:a0:32:8e:4b:af:45:94:15:1e:ed:08:44:c2:
4d:7a:ae:7c:c7:1b:b4:6f:ab:14:0b:6a:3d:b3:43:
99:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F8:04:E8:5F:08:0A:4B:95:15:26:DF:8B:72:30:10:07:B7:ED:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e6b0ca-fd49-4889-a92e-89af1f2628e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e6b0ca-fd49-4889-a92e-89af1f2628e6/1/aPgE6F8ICkuVFSbfi3IwEAe37es.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203458
Signature Algorithm: sha256WithRSAEncryption
41:47:37:6e:c6:9c:e5:10:f1:f6:d8:d6:c8:7a:8b:32:9b:79:
5c:09:11:09:04:68:df:68:c5:d5:4f:6d:31:55:66:da:bf:63:
8a:a0:17:fa:1a:cb:37:ff:a0:40:9d:f2:a7:d7:b5:60:9d:56:
4c:b3:ee:83:ce:46:85:cc:ec:72:b2:3a:c4:17:94:a2:b6:57:
f0:64:23:1f:8a:94:50:57:44:f3:e0:2f:e4:4a:3a:81:f0:28:
46:13:45:75:25:4a:34:86:8e:24:de:78:c3:4e:be:e3:b3:8a:
ee:21:d1:60:ea:0e:52:de:3b:86:cf:b0:86:82:a7:e8:1d:22:
64:f2:1c:e0:62:21:33:42:73:da:fd:aa:09:6e:79:66:70:1b:
30:35:5f:ee:64:72:72:16:cd:e1:bd:af:c8:b3:1d:d9:d0:a3:
35:4b:e1:54:0a:4c:5c:87:b4:ca:20:23:c4:dc:39:0f:ed:8c:
a2:93:9c:fa:13:91:51:fc:bf:17:40:a6:46:30:bf:d4:91:58:
9b:84:71:cc:ca:fb:71:aa:bc:0e:c5:76:55:19:db:0d:fc:85:
97:fc:2d:c3:73:cf:43:60:64:d6:58:07:94:28:f8:97:64:29:
0d:df:92:bd:46:f8:86:1a:02:83:7d:42:30:48:32:09:57:1d:
45:b0:e5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:58:05 2026 by rpki-client