Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
File: zKHmc221NHzajyJPDIVynFD9CRw.cer (raw, json)
Hash identifier: CL/R4dj+sMKvEuT54tfeiZbGyLJKZrSmL9FyVR+vqZM=
Subject key identifier: CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A34BAFE1DF362DEAAD475005DC8C0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199763
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:4b:af:e1:df:36:2d:ea:ad:47:50:05:dc:8c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:aa:a7:18:24:e8:da:81:5b:2d:8e:d7:b7:
20:a2:b4:bb:ea:69:cc:57:8c:13:b8:90:dc:20:63:
d6:28:b3:ba:7f:f1:ba:84:da:26:c6:dc:73:85:e5:
a6:03:0d:c0:5a:c4:c8:eb:7b:eb:54:97:5b:5f:ba:
a2:5e:26:ce:51:d1:cb:3d:52:c1:94:2f:2d:72:1f:
f1:b7:82:b2:3f:4c:b6:4c:f3:ac:6f:f0:0d:ef:25:
99:6f:7a:38:32:a5:f6:13:61:a6:63:25:c8:7e:27:
58:4b:39:0b:e0:d9:ea:87:74:5e:e8:3d:0e:73:8d:
14:2f:87:1d:75:06:52:64:29:8c:66:d4:ef:2d:ea:
74:04:3a:b7:67:65:2f:58:46:91:44:45:5b:ce:0d:
8b:e5:ea:1d:8f:e3:d5:1a:b6:62:86:e8:9e:c9:7c:
53:51:12:17:51:03:69:58:23:fd:d6:a7:b2:fe:95:
03:e2:af:c6:0c:28:38:11:f4:11:9d:b4:db:c3:d0:
b6:e4:ca:3e:41:cc:3f:aa:60:c5:ee:c0:a0:31:e9:
bf:2f:70:22:1b:7a:35:00:3b:ec:88:47:94:e0:f1:
b9:b8:f4:15:d7:74:fd:70:58:e2:a8:f5:aa:dc:22:
a6:e5:5e:fa:d8:de:2d:e6:55:80:c3:39:8e:ca:89:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199763
Signature Algorithm: sha256WithRSAEncryption
78:b5:89:68:2e:db:9d:db:16:fd:bb:01:ea:37:7d:66:5f:d3:
60:37:d6:d2:c8:99:5c:e5:1a:2d:6e:0a:de:d4:45:7c:e4:30:
4e:2f:e2:f2:1c:2d:9c:f9:f6:65:95:cf:99:30:bc:14:23:46:
e0:f0:23:13:77:3a:8f:22:bc:28:03:60:b3:33:e3:bd:74:2e:
e6:12:50:ba:55:e8:62:71:42:f4:76:f8:71:cb:d7:2f:1c:05:
6b:6a:86:04:c7:91:a5:58:fa:c5:cf:df:56:1b:fd:d6:98:1e:
14:2d:8a:6e:e6:90:59:0c:19:a7:a5:8a:94:f1:8b:f6:34:86:
92:0f:1a:52:10:9c:ea:44:a5:a3:01:8f:b2:a1:d9:6d:5d:48:
8e:c1:8a:55:8f:9f:f1:03:83:16:0f:33:83:d4:4a:8f:b0:5b:
72:ca:15:f4:f2:ff:4f:94:9b:38:f6:32:45:73:60:96:ef:de:
ed:a4:1f:e1:41:e0:af:2d:61:3c:41:9f:d3:97:8c:b5:72:4f:
fd:d1:3f:aa:b3:af:a5:db:1f:9b:ce:28:0f:3f:b7:e1:1a:be:
c7:49:a6:58:03:f4:90:b1:97:54:b4:57:57:14:12:1b:aa:1b:
ca:d4:5a:da:f9:f1:ec:d8:f7:4b:45:f5:a4:5a:9d:70:47:39:
3f:12:53:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:25:43 2026 by rpki-client