Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lDtAu3g8rJRU59VL3l5tjiGiMZQ.cer
File: lDtAu3g8rJRU59VL3l5tjiGiMZQ.cer (raw, json)
Hash identifier: p8Jed0p6e9y2tVEUoblI1fHLLx8oddqbG3CTjPGvAyI=
Subject key identifier: 94:3B:40:BB:78:3C:AC:94:54:E7:D5:4B:DE:5E:6D:8E:21:A2:31:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F6BC9047561ECD6AE05942A87A6A1D617
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/lDtAu3g8rJRU59VL3l5tjiGiMZQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 Jul 2026 16:36:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219192
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:c9:04:75:61:ec:d6:ae:05:94:2a:87:a6:a1:d6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 16 16:36:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=943b40bb783cac9454e7d54bde5e6d8e21a23194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:4c:a4:d5:3e:98:11:7e:99:26:f4:93:83:
e7:6f:0c:0a:d8:c2:74:e6:2c:73:98:80:00:db:2b:
fe:c3:42:37:c0:e9:33:62:f9:a3:c3:33:fe:20:04:
30:8c:6a:39:09:91:01:04:e2:dc:84:64:bc:b8:aa:
54:48:00:13:e6:4a:6c:3e:67:2e:61:5c:96:bc:25:
6b:e4:4e:5d:16:c0:cd:17:d3:d6:24:32:65:0c:77:
b7:a9:4f:a9:39:bd:a7:b9:17:e1:d5:c7:86:e3:f6:
85:f7:c1:c9:7e:55:71:f9:6f:34:c3:64:b7:da:fd:
c5:6c:6a:08:28:fa:2a:b5:17:fa:aa:ea:30:85:a8:
6b:bb:e8:4a:61:ff:4d:36:e4:bd:82:8d:1e:fa:10:
6e:96:5b:3b:20:61:ca:32:39:3d:20:dd:5c:4e:57:
cc:63:99:77:88:6a:d1:0f:9c:41:9f:b8:b2:53:d4:
0d:d4:f2:df:b2:83:fd:55:0a:a3:88:41:1c:88:55:
2e:a8:0a:c5:40:89:c6:81:5d:15:a5:d4:cb:e5:95:
8c:f5:ba:8b:02:e0:da:68:a1:5d:b1:46:2c:0b:be:
63:57:94:f3:dd:38:d2:b4:e1:4d:2a:47:2d:ab:0a:
ca:a5:2c:91:0f:cd:7d:56:10:1f:f5:d9:36:5f:bd:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3B:40:BB:78:3C:AC:94:54:E7:D5:4B:DE:5E:6D:8E:21:A2:31:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83644a-3bb3-4295-8dc5-80a1575d7c17/1/lDtAu3g8rJRU59VL3l5tjiGiMZQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219192
Signature Algorithm: sha256WithRSAEncryption
a5:ad:9d:de:93:e9:8e:66:ad:fd:41:ac:44:ce:f6:d0:79:b0:
45:1e:a4:63:d6:b0:e3:2d:ee:11:74:14:2c:1b:04:5c:da:e1:
20:5a:40:a8:83:7c:3b:be:47:7f:2f:39:a2:a8:83:ef:a9:22:
b2:d8:a1:a0:75:54:c9:7e:36:23:36:a9:31:97:9e:6f:57:c1:
46:c2:a4:89:e5:e7:fe:54:39:2f:a2:71:fc:41:f8:98:dd:7f:
34:ed:30:08:f5:16:c3:ff:e0:44:be:6e:55:68:f9:dd:6c:e1:
b9:49:7b:40:c3:14:c3:a6:14:eb:9d:17:1d:2e:d3:67:64:10:
3e:60:bf:29:e2:14:4f:f5:63:fe:89:52:8d:19:cf:86:6d:3c:
50:dd:f6:7d:42:5e:78:34:8b:dd:85:27:08:6f:ee:8b:3c:06:
e6:e2:ef:a5:78:84:bf:fb:38:fd:d6:92:0d:5e:5a:c0:0a:23:
db:bb:79:bb:13:83:3c:4f:58:e1:18:c7:29:53:a5:48:f8:c5:
d4:c1:f8:01:de:ab:17:af:e4:b6:30:cc:a9:f2:6c:5a:8b:69:
cf:51:62:42:03:2d:fa:a5:99:20:13:30:25:89:95:dc:ea:cf:
df:73:5d:ac:0f:17:6c:f6:c6:36:5d:f3:2b:92:c8:78:17:d0:
62:c6:7d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:59 2026 by rpki-client