Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cCYdHor8gLy0Jkca0oq12kgp8MY.cer
File: cCYdHor8gLy0Jkca0oq12kgp8MY.cer (raw, json)
Hash identifier: burBEEScKWvgYQMcSodzHdVjX9423mA6gGvf+mV9KiU=
Subject key identifier: 70:26:1D:1E:8A:FC:80:BC:B4:26:47:1A:D2:8A:B5:DA:48:29:F0:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CC7EA7DDEDD24DD35C3399B93B4030CF1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/233113-a696-406f-9258-9cec6326e8a5/1/cCYdHor8gLy0Jkca0oq12kgp8MY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/233113-a696-406f-9258-9cec6326e8a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 07 Mar 2026 10:49:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213898
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:ea:7d:de:dd:24:dd:35:c3:39:9b:93:b4:03:0c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 7 10:49:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70261d1e8afc80bcb426471ad28ab5da4829f0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:92:12:cd:3a:75:42:73:0a:a6:f9:d6:c2:13:
0f:89:6c:a9:80:ad:c3:81:2f:a9:99:9b:c6:f0:86:
dc:04:c2:b2:f1:ce:cf:7e:3a:46:14:48:df:56:93:
7d:a9:f0:5e:a2:e0:b9:b4:77:cb:ad:3b:88:90:74:
aa:b0:ae:3d:1a:c1:56:33:10:e9:6f:56:ef:d1:63:
7a:b8:e5:d6:82:7a:25:dc:21:ac:2b:b6:2c:d8:e2:
15:a6:4c:43:13:aa:43:7b:02:25:92:c8:d5:13:b7:
c7:6d:be:77:33:fc:ec:bf:e9:12:42:4a:45:c9:8a:
d2:33:ec:9f:b6:78:05:19:d2:0d:4f:81:1d:8d:b8:
50:bf:ac:48:6c:1a:dc:ef:80:97:63:98:92:b5:48:
63:a2:64:7b:26:92:0f:87:9d:ba:b6:c5:0e:d4:cd:
74:2a:73:fb:d7:0b:69:25:f4:a6:ee:ce:d6:f6:a6:
06:55:6b:ef:4c:b8:f5:ad:2d:2f:36:8b:84:2b:b8:
6d:2e:b1:df:40:32:a2:f6:b4:a2:92:be:02:8e:fa:
c6:06:35:0a:10:9d:41:bd:12:1c:ac:32:38:6b:eb:
12:34:61:19:86:61:3a:d2:62:9b:8b:72:83:97:c7:
d4:01:52:ee:4e:85:fe:c7:42:3d:99:e0:da:6f:a2:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:26:1D:1E:8A:FC:80:BC:B4:26:47:1A:D2:8A:B5:DA:48:29:F0:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/233113-a696-406f-9258-9cec6326e8a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/233113-a696-406f-9258-9cec6326e8a5/1/cCYdHor8gLy0Jkca0oq12kgp8MY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213898
Signature Algorithm: sha256WithRSAEncryption
08:02:76:0b:24:58:4b:48:8c:46:42:7e:d9:31:dc:39:74:2b:
82:c6:49:7b:09:38:bc:5e:e7:18:66:6b:7b:37:a9:fc:1a:e0:
96:e7:ff:3c:cc:97:7f:3a:13:a7:ad:1e:ed:6a:6a:26:8a:43:
5e:7e:82:5b:f8:6c:d4:33:a3:d0:ae:8a:b3:2b:50:69:7d:1e:
16:48:f0:82:7f:36:6b:af:40:f7:57:27:76:73:5e:48:d5:b6:
fe:df:84:a6:a3:2e:03:1f:ae:69:6a:b1:24:fc:d0:ed:9c:26:
5a:8c:21:f3:6e:ac:36:06:7c:d2:43:3c:33:c0:ed:2a:2f:14:
f4:c7:43:15:29:e8:2a:72:22:c5:c7:05:ee:e0:7c:46:a0:1c:
36:31:c3:9f:3b:31:61:61:0c:f4:44:5a:bb:54:98:f9:e4:db:
76:ed:3f:4f:50:d3:4d:e7:a5:bd:6d:a4:dd:61:40:97:e3:5f:
b4:72:19:31:8e:59:f8:48:f6:e8:83:79:d7:48:29:f3:f0:b2:
26:bb:0a:d6:0b:63:14:cc:58:83:9b:9e:ab:94:a9:35:72:37:
01:02:a0:44:9a:7d:a4:b9:6d:45:49:25:ed:e7:82:43:bf:b6:
34:98:8d:84:d6:ef:b4:8a:95:ee:81:fd:9d:7d:63:dd:15:14:
ad:31:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:18:33 2026 by rpki-client