Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w6cK1_MmhXM1l8Zj4CziijMG-SM.cer
File: w6cK1_MmhXM1l8Zj4CziijMG-SM.cer (raw, json)
Hash identifier: jsjv2Gk97JGkYgwZEEglDqCayKzT4Nndnif4ZrAr8HE=
Subject key identifier: C3:A7:0A:D7:F3:26:85:73:35:97:C6:63:E0:2C:E2:8A:33:06:F9:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B8CEC9364BE641407BF1DF5F0BF06F6AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 05 Jan 2026 06:51:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 59449
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:8c:ec:93:64:be:64:14:07:bf:1d:f5:f0:bf:06:f6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 5 06:51:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3a70ad7f32685733597c663e02ce28a3306f923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:77:9d:66:15:3f:0e:ea:86:1f:d1:a1:20:
d6:00:47:6d:aa:0c:e5:3e:0b:55:12:f5:94:45:ca:
a1:39:96:26:44:d4:8e:99:9e:e5:6e:41:ed:83:fb:
f7:2a:e8:b3:5e:fb:0d:f5:98:9a:2b:1a:55:89:f5:
d9:25:99:ff:11:7f:ca:ce:82:b2:c1:6e:3d:c2:eb:
1d:8f:c2:4a:ca:95:45:41:6e:ac:4c:2c:03:95:e1:
c4:02:e6:b9:24:bf:3c:54:4a:43:40:9d:fd:84:4f:
46:65:0d:33:3a:34:5c:9d:32:f3:38:1b:9b:df:dd:
cc:93:d9:2a:84:50:a3:83:ee:63:34:b5:71:a6:8d:
86:bc:b5:c4:7a:01:7c:59:6b:6c:8e:88:dd:14:04:
fa:0c:ad:45:af:18:51:f3:fd:51:21:e0:10:72:93:
26:de:7d:5a:32:96:7a:7c:d7:79:ff:12:12:7d:1d:
9a:e1:cf:27:07:98:1a:4b:35:5c:bc:de:b0:c0:5f:
ae:a7:ae:fd:90:fc:5c:a3:3c:80:71:c4:db:2c:a1:
d8:d1:6b:d0:d8:05:60:e7:df:23:35:66:67:b1:36:
d3:b5:75:83:b9:df:f0:2a:2b:96:37:42:85:e4:da:
c9:80:8f:b8:47:bb:2e:0a:9d:0b:07:b5:40:84:59:
82:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A7:0A:D7:F3:26:85:73:35:97:C6:63:E0:2C:E2:8A:33:06:F9:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59449
Signature Algorithm: sha256WithRSAEncryption
5e:1b:aa:8e:e5:6d:fb:c2:df:58:0f:fb:8a:10:77:53:3e:58:
19:4d:b5:b1:1a:f9:e0:0a:82:85:8c:df:b0:f8:ac:3f:16:fd:
d1:5e:cb:21:14:d4:74:50:99:60:39:68:e3:c7:2e:95:aa:ca:
49:47:d5:bc:52:da:56:f0:e7:b3:5f:6a:b1:39:c2:80:9d:84:
99:54:4e:0f:50:ee:7e:91:8a:48:8a:96:3e:ea:d8:de:03:83:
0c:d3:a5:9f:f3:3e:a5:5d:ae:d8:4a:27:ee:db:48:12:0c:34:
b5:90:0b:39:68:23:c6:69:1e:a6:27:ca:43:d8:aa:82:8f:6c:
de:7d:b4:eb:5b:17:1d:64:e7:3c:4b:62:db:5b:2d:b2:b9:a9:
90:01:e3:0f:cb:5a:71:d8:c7:7d:2e:01:df:17:96:bc:dd:ee:
bb:f1:a5:d9:d5:0e:3e:15:d5:b4:24:99:38:32:1d:8e:bb:7a:
38:e7:f9:cf:aa:bb:8b:69:5c:f7:34:cf:21:15:85:6b:4c:c8:
e7:c3:14:69:bb:c2:93:56:24:23:b1:5e:7c:21:8e:c2:23:55:
79:69:3e:57:c0:3f:a8:d3:ae:be:e0:b1:ff:60:22:67:69:2f:
18:7c:ec:28:f5:2c:3a:dd:27:11:72:63:fd:53:d1:f4:82:90:
87:b3:0e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:05 2026 by rpki-client