Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eHwL6eYlPfv2gjHGdH_MzFDdp9M.cer
File: eHwL6eYlPfv2gjHGdH_MzFDdp9M.cer (raw, json)
Hash identifier: 500efo5MX8CO+6P1NpFMJy0NIS6t7rA4wwyK76fRTAU=
Subject key identifier: 78:7C:0B:E9:E6:25:3D:FB:F6:82:31:C6:74:7F:CC:CC:50:DD:A7:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CC74A4E5EF3765D2A4D739884CE6D09AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/50e340-982e-4f6d-a271-bf89b9aa9202/1/eHwL6eYlPfv2gjHGdH_MzFDdp9M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/50e340-982e-4f6d-a271-bf89b9aa9202/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 07 Mar 2026 07:54:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201061
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:4a:4e:5e:f3:76:5d:2a:4d:73:98:84:ce:6d:09:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 7 07:54:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=787c0be9e6253dfbf68231c6747fcccc50dda7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:97:10:0e:29:6f:e6:0a:4a:98:a6:09:be:
4c:76:96:e9:63:c7:9c:bd:98:a5:8d:fe:66:40:85:
c6:e2:cc:6d:c1:11:e3:9a:a0:17:36:2f:73:69:77:
96:df:00:62:c2:70:fe:3b:b6:85:e2:37:6d:d9:13:
24:0f:d0:ff:5a:ce:80:16:85:0e:f0:96:b1:d0:3e:
ea:ed:0e:04:43:d8:48:97:3e:74:c4:71:d4:9e:b5:
8c:75:1b:00:5a:e3:ac:55:2d:c7:68:4c:32:5d:12:
94:d4:14:0b:f4:c6:03:57:5a:95:8d:1a:48:f3:ef:
db:ee:f7:22:21:02:0e:ad:1c:d5:d6:1a:27:46:a4:
bf:a5:3f:71:37:c9:a9:aa:fe:79:9e:a7:51:53:ed:
2a:c9:be:d2:ff:e0:5c:fe:57:4c:1e:c8:aa:76:b0:
f2:7c:55:e7:49:4e:4a:84:8d:7b:be:1d:db:74:46:
f2:43:af:ce:28:ae:ad:23:da:19:5b:ef:ec:ed:47:
0a:87:cb:10:4b:98:35:7c:86:ae:37:f2:49:cc:82:
d2:08:81:67:fe:8e:95:5b:c7:3b:ca:04:b4:4c:ef:
89:9c:60:2c:d1:9d:a2:33:31:51:b9:c2:34:0e:44:
f4:fe:0a:11:16:59:c6:89:46:af:a4:b5:d0:5a:7b:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7C:0B:E9:E6:25:3D:FB:F6:82:31:C6:74:7F:CC:CC:50:DD:A7:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50e340-982e-4f6d-a271-bf89b9aa9202/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50e340-982e-4f6d-a271-bf89b9aa9202/1/eHwL6eYlPfv2gjHGdH_MzFDdp9M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201061
Signature Algorithm: sha256WithRSAEncryption
92:8c:e0:f1:bb:fd:71:1f:81:67:03:be:e9:59:04:19:88:a2:
23:c6:6e:85:f8:37:7a:3a:ed:e0:5b:17:d7:25:69:48:8a:6e:
35:65:97:9e:7c:20:56:2e:cf:f1:30:85:74:d9:90:ad:24:1e:
f0:8f:e0:0e:98:da:fc:9e:3d:48:57:84:fd:b6:00:29:46:32:
a0:46:d4:33:53:47:62:7a:42:af:4c:cb:c9:36:72:23:8d:d2:
77:9b:40:7d:4e:ae:85:8d:41:80:bc:58:eb:44:9e:eb:bd:b0:
ac:1e:be:f2:69:0d:85:53:31:86:81:fd:93:d3:08:64:cc:d2:
86:91:92:ba:9a:b0:c5:0e:96:a1:5c:7c:90:8e:81:c2:a8:e0:
0d:25:7b:d7:1d:fa:15:b8:48:5c:ab:96:1f:25:dc:a8:f1:36:
3b:66:9c:86:84:e1:04:41:a7:5b:7b:d4:26:ed:70:cb:c2:11:
5f:36:6a:3c:f1:9c:b1:de:56:9d:d6:8e:8f:86:59:6e:76:ec:
9a:68:2e:c0:4a:1f:03:0a:25:44:be:84:69:cc:28:ba:7a:ce:
5a:8d:12:54:a1:a4:e8:2f:a4:20:4e:fb:45:88:c3:a0:e6:e8:
1b:21:a9:b1:09:b6:21:58:06:e5:c2:e5:e7:82:ad:05:80:91:
d0:d6:27:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:13:28 2026 by rpki-client