Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aVHTpo9AAIrYxSB0XKDzCeqB6WU.cer
File: aVHTpo9AAIrYxSB0XKDzCeqB6WU.cer (raw, json)
Hash identifier: 8MTxDoZmoV66oJ2+6asRFz3d1AQJpC+eUqrvBluUhag=
Subject key identifier: 69:51:D3:A6:8F:40:00:8A:D8:C5:20:74:5C:A0:F3:09:EA:81:E9:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77592E251D37BD0E40DF57D7005CBEA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:18:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a04:b100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:2e:25:1d:37:bd:0e:40:df:57:d7:00:5c:be:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6951d3a68f40008ad8c520745ca0f309ea81e965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:21:9c:96:50:f7:f5:6e:08:f1:1e:e5:1f:
d9:6e:c6:e6:d9:28:2b:96:e4:a3:8c:a4:90:bf:58:
76:9c:12:f7:15:98:d9:0f:42:2c:49:a6:87:ff:8a:
b9:64:c7:d9:d1:03:77:c0:45:1a:4f:4f:3c:ad:38:
16:0f:47:40:65:62:17:84:d1:d6:d4:bd:64:25:a6:
e7:78:26:8a:c9:81:8b:88:7d:f2:05:73:45:fc:0a:
4d:69:32:97:20:37:52:72:d9:5e:42:0d:6c:e1:ff:
cc:d5:ce:37:90:5a:8b:f9:7a:aa:f9:1d:a8:25:eb:
aa:30:99:ff:fa:21:8d:42:47:07:6e:fb:36:30:ac:
3b:ff:06:f8:e8:84:34:3b:b3:29:a1:3d:ef:62:7b:
96:b1:4a:40:48:bc:fd:f0:49:03:39:6d:44:95:59:
05:8c:0a:e7:fc:7b:a5:9d:70:bd:17:3b:7b:9c:1a:
54:c2:47:5d:80:b6:f8:af:0f:7e:d1:0c:5f:06:b7:
fa:d5:f2:05:d1:12:cf:06:88:7f:99:48:5f:03:44:
15:43:4e:d4:da:44:1e:2a:67:5f:56:b7:de:9c:e5:
44:2e:b3:e9:34:e4:3e:f8:8d:cb:17:db:e8:bb:a6:
b8:e0:86:83:14:9a:ee:60:d9:af:e1:65:b7:9c:88:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:51:D3:A6:8F:40:00:8A:D8:C5:20:74:5C:A0:F3:09:EA:81:E9:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b100::/29
Signature Algorithm: sha256WithRSAEncryption
5e:3a:08:a7:da:ef:47:af:e5:4b:05:2f:15:7f:16:66:4c:b4:
f0:92:bf:6d:72:ce:10:e2:c3:0e:03:22:19:e1:e4:c6:2c:2b:
a4:96:aa:a5:8b:45:1d:4c:ce:3c:49:d0:33:e6:45:8c:0a:de:
44:1b:5c:f6:b9:c5:26:f1:9a:93:12:41:83:e7:f6:2f:43:f4:
3c:13:15:c4:84:e7:6b:38:46:5b:5c:24:3b:54:45:19:cd:46:
52:44:87:8b:3b:c0:59:56:cf:48:39:7a:4e:f0:08:69:dc:86:
23:96:fa:53:b4:22:9f:03:9a:7e:1d:64:30:8c:22:4b:d8:8e:
43:7a:8e:e4:6d:07:5a:70:c6:de:36:05:05:89:bc:3a:18:c0:
b9:6e:3b:46:00:4f:7b:12:e3:a3:25:2a:87:26:5c:a4:5b:7e:
11:b4:68:e7:6f:a6:6c:46:94:ff:ae:87:e0:17:b8:a7:d1:61:
26:7c:74:be:44:e9:af:8a:db:32:e3:8a:bc:6b:05:dc:5f:b9:
88:3d:0e:09:dd:2e:36:7f:bd:8e:33:6b:f7:7f:89:05:ad:f6:
e0:fc:27:68:19:37:97:ce:f9:f9:f8:9c:c5:cf:df:0d:ab:6a:
eb:25:27:70:9a:e4:ef:28:35:28:ed:33:1b:6c:30:fb:67:a8:
98:fa:f4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:19:27 2026 by rpki-client