Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k2wlHaPujjr0MZWo-Amao8bOLHw.cer
File: k2wlHaPujjr0MZWo-Amao8bOLHw.cer (raw, json)
Hash identifier: izP2jVtdQI6BlrN6seEz9rX/EtugKlyfDwnob4EvN/w=
Subject key identifier: 93:6C:25:1D:A3:EE:8E:3A:F4:31:95:A8:F8:09:9A:A3:C6:CE:2C:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA4DB07F2EE988586C99AE6A8BF88B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:19:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44948
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:db:07:f2:ee:98:85:86:c9:9a:e6:a8:bf:88:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=936c251da3ee8e3af43195a8f8099aa3c6ce2c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:35:7e:c7:5c:70:90:f8:fd:ab:1e:85:a0:57:
7e:25:4e:48:1f:73:e6:6a:f9:2f:7c:4a:03:13:fa:
ef:2a:dc:86:fa:b2:9f:38:fb:b7:04:ae:4b:f6:0a:
8e:82:db:af:6f:f3:10:2a:83:1c:11:56:46:07:41:
3a:c1:ff:a0:2a:16:60:9d:da:ec:33:95:9a:37:ba:
67:13:95:de:91:98:5d:c8:6a:db:a1:ab:bd:5a:64:
29:f7:60:bd:b1:d0:0e:b8:eb:73:35:30:ad:fb:b7:
5f:9b:c9:7c:7b:e2:e2:cf:3d:59:72:ba:3b:89:30:
f6:1f:26:87:33:4f:55:6a:25:eb:8c:0d:56:d2:5a:
14:23:3b:28:b6:83:ea:51:de:8e:18:08:0f:83:03:
03:4c:4d:50:85:41:57:0d:c2:99:d6:44:26:3b:17:
9f:75:44:ec:a8:67:4b:03:e5:8a:20:81:b1:09:e4:
2b:d5:65:e4:b6:5a:49:c5:f0:5a:37:fa:1b:e1:07:
dd:55:62:61:e5:41:94:8e:4c:f6:34:91:33:6a:66:
d5:9d:d2:29:91:c8:69:2a:f8:34:0c:e6:c9:5f:d6:
26:bb:25:2a:c3:2c:6a:76:24:a7:b0:03:1e:18:e2:
c7:d2:b6:b7:c8:2f:d1:0f:97:f7:ef:98:e2:2e:e4:
4f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6C:25:1D:A3:EE:8E:3A:F4:31:95:A8:F8:09:9A:A3:C6:CE:2C:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44948
Signature Algorithm: sha256WithRSAEncryption
21:47:0a:e0:a4:b8:10:d8:94:58:3d:8a:fa:62:fa:54:dd:43:
e8:a7:67:5e:8d:76:6d:c8:af:98:62:a4:2b:7b:5a:bd:9c:00:
a2:b8:ca:7d:ca:97:51:d6:41:00:aa:84:44:c0:83:bf:ab:c5:
f1:1c:f6:6c:7a:56:76:9f:e3:fc:70:1b:6f:3b:08:be:4b:4d:
9e:8a:93:e9:37:03:46:e8:e9:f5:52:fa:77:5f:cb:88:e3:17:
c0:d1:d6:3c:df:74:40:22:04:8d:e2:7e:3a:4d:d0:a5:71:1e:
06:a3:96:2e:75:77:e6:43:5a:fc:fd:91:80:79:24:4e:f7:22:
27:72:04:cb:e7:01:fb:1e:f4:e8:02:0c:33:3a:00:cf:8e:ef:
19:ce:41:a6:3d:59:33:29:d5:ef:9e:a2:8c:3a:f2:dc:f5:f2:
a5:b8:a8:1b:f8:30:3b:69:4a:e8:43:1b:da:a4:42:50:cf:25:
8f:b2:bd:c3:a5:df:06:69:9b:05:1e:50:b2:1f:20:84:c2:15:
fd:28:b4:5e:c9:8f:cd:ed:7f:4f:a3:fb:91:52:11:56:15:9f:
70:bf:c3:46:a9:ab:09:83:6f:0d:94:48:ed:6c:59:e0:3f:3b:
97:6c:f7:9b:d7:70:b1:2b:e1:d8:0c:35:74:f4:92:e5:7e:d3:
a7:3b:71:87
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZt7pNsH8u6YhYbJmuaov4iwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMjIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzZjMjUxZGEzZWU4ZTNhZjQzMTk1YThmODA5OWFhM2M2Y2UyYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zV+x1xwkPj9qx6FoFd+JU5IH3Pm
avkvfEoDE/rvKtyG+rKfOPu3BK5L9gqOgtuvb/MQKoMcEVZGB0E6wf+gKhZgndrs
M5WaN7pnE5XekZhdyGrboau9WmQp92C9sdAOuOtzNTCt+7dfm8l8e+Lizz1Zcro7
iTD2HyaHM09VaiXrjA1W0loUIzsotoPqUd6OGAgPgwMDTE1QhUFXDcKZ1kQmOxef
dUTsqGdLA+WKIIGxCeQr1WXktlpJxfBaN/ob4QfdVWJh5UGUjkz2NJEzambVndIp
kchpKvg0DObJX9YmuyUqwyxqdiSnsAMeGOLH0ra3yC/RD5f375jiLuRP5wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFJNsJR2j7o469DGVqPgJmqPGzix8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzBmMWVk
OS0wOWExLTRlMTQtOWIxNy04YmMzN2E2NGU2YzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvMGYxZWQ5
LTA5YTEtNGUxNC05YjE3LThiYzM3YTY0ZTZjNy8xL2syd2xIYVB1ampyME1aV28t
QW1hbzhiT0xIdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCvlDANBgkqhkiG9w0BAQsFAAOCAQEAIUcK4KS4ENiU
WD2K+mL6VN1D6KdnXo12bcivmGKkK3tavZwAorjKfcqXUdZBAKqERMCDv6vF8Rz2
bHpWdp/j/HAbbzsIvktNnoqT6TcDRujp9VL6d1/LiOMXwNHWPN90QCIEjeJ+Ok3Q
pXEeBqOWLnV35kNa/P2RgHkkTvciJ3IEy+cB+x706AIMMzoAz47vGc5Bpj1ZMynV
756ijDry3PXypbioG/gwO2lK6EMb2qRCUM8lj7K9w6XfBmmbBR5Qsh8ghMIV/Si0
XsmPze1/T6P7kVIRVhWfcL/DRqmrCYNvDZRI7WxZ4D87l2z3m9dwsSvh2Aw1dPSS
5X7Tpztxhw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:21:59 2026 by rpki-client