Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer
File: nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer (raw, json)
Hash identifier: reI+F4LrwEnYi1HYC55EjnvWHbwJC4qHNIKxk+fNobs=
Subject key identifier: 9D:76:50:E4:53:B9:8F:6F:4D:D3:33:63:3A:FF:AB:BA:2C:0C:8F:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7834E0AF4A0631983504819080DDD572
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208723
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:e0:af:4a:06:31:98:35:04:81:90:80:dd:d5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d7650e453b98f6f4dd333633affabba2c0c8f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:52:32:91:6d:4a:d0:60:ff:a3:37:39:ce:1d:
03:1d:c9:70:d3:19:dd:08:d5:46:20:c9:06:78:e5:
bb:17:65:65:59:d2:60:e0:50:91:ce:ce:f8:a8:d5:
21:3e:e7:3f:8a:e1:64:c0:08:f6:c4:2e:1b:03:1a:
b3:c3:e0:58:97:6f:68:9a:f5:9e:cd:95:62:39:76:
e2:e8:d8:71:d6:d3:38:42:05:47:78:9f:2b:67:3e:
12:cd:f7:bc:cf:c1:9b:4d:b5:8c:34:04:2d:eb:13:
d5:21:8e:3d:a9:61:26:e0:8f:75:77:01:4c:61:0c:
41:92:65:e3:ab:a5:67:36:07:02:b0:92:27:20:95:
f6:46:cd:76:4e:f2:4c:f3:b4:71:0d:0b:bc:d3:24:
9d:32:3c:bb:94:16:e8:ca:32:3b:fb:df:3c:f8:8c:
4b:4b:af:20:00:52:0d:e0:13:e5:63:4c:f8:19:da:
07:01:0f:b1:ec:c4:50:02:fb:ee:09:a8:5e:1e:38:
78:b0:19:86:b6:5d:1f:b4:51:6d:f0:60:23:d4:0a:
c2:3f:73:b3:06:e4:91:7d:b7:dd:a9:73:c1:84:45:
da:75:d9:1c:9c:83:e6:8f:cc:f7:be:20:aa:68:e1:
7c:4c:26:3a:ba:31:fd:6d:57:83:67:65:d1:73:4e:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:76:50:E4:53:B9:8F:6F:4D:D3:33:63:3A:FF:AB:BA:2C:0C:8F:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208723
Signature Algorithm: sha256WithRSAEncryption
5c:ea:be:82:df:d0:cf:1c:89:56:c1:b4:c8:a5:d9:ad:8b:16:
6b:9a:05:2d:59:e1:66:62:f4:46:d9:ff:06:20:9b:1c:e7:74:
3e:65:54:bb:4c:ae:d7:b1:c2:b6:77:3c:06:0d:5c:2e:ea:b4:
62:1a:4f:b1:e1:b4:04:02:40:18:ff:b7:be:6e:60:7f:96:4f:
84:52:c6:1a:d1:32:ee:68:fc:19:ae:b8:5c:43:e8:21:8f:11:
30:06:23:2c:17:df:42:31:49:a2:2a:8a:59:a9:9e:0e:d9:d5:
89:39:6a:1f:a1:56:15:fa:be:85:04:63:55:05:69:cc:24:bf:
ab:81:f9:47:73:5e:f2:0f:0e:2f:8d:2c:b1:de:59:50:c2:3c:
18:2c:0e:a9:a4:c6:e3:ae:94:50:55:8b:17:fc:e4:59:b5:c7:
34:91:c1:f7:98:fb:47:10:1e:4d:7a:00:ea:20:28:89:ca:d7:
91:37:89:0c:da:84:24:b5:b0:f1:58:f6:85:20:e2:96:dd:e5:
4e:89:75:bf:5c:31:84:c9:72:f4:97:60:9b:b6:45:84:f9:d2:
9a:76:9c:92:a6:0c:fc:e7:f9:aa:ce:22:4c:41:6a:fa:27:1e:
6a:9c:b0:9a:25:d2:50:46:92:cd:58:d5:74:59:83:e2:fe:40:
a5:2f:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:44 2026 by rpki-client