Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
File: 1-dhnzCTQvonwX8hyWOCHemAVgLk.cer (raw, json)
Hash identifier: vuau1tDussQeIKPEkx+2FRkLqdYhjFCUMoz7VQ3jHRc=
Subject key identifier: F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FD24657B6A8C232E61CBAB4B75019CE47
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 05 Aug 2026 14:14:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200105
IP: 2a0c:3480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:46:57:b6:a8:c2:32:e6:1c:ba:b4:b7:50:19:ce:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 5 14:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9d867cc24d0be89f05fc87258e0877a601580b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:c1:00:63:64:0c:e8:6b:37:f2:96:0a:02:
79:a6:37:64:66:c8:b7:6d:31:90:73:1c:fe:12:f7:
7e:60:62:7f:05:fd:17:85:0b:ae:9a:ec:7c:a6:cc:
ef:e5:84:4c:f8:14:e3:cf:25:15:e2:6b:50:7d:7a:
5c:67:0f:f8:f3:f7:5d:68:8d:20:88:8a:86:28:f9:
81:cd:10:2e:81:ec:b3:3e:b3:bf:83:af:c6:4d:43:
98:7c:85:d3:dd:f2:ca:a3:6e:3b:7d:d0:b0:28:9b:
22:73:2d:03:57:b5:d0:5d:df:b0:94:75:1f:26:d7:
ef:15:66:b0:f5:fe:5c:8c:ba:ec:74:e5:cd:ab:53:
27:f9:1b:22:00:18:72:4b:82:47:c5:4f:b1:92:d9:
8d:cd:bc:b0:87:b7:38:b9:de:2a:11:cd:94:0f:1c:
2f:d7:10:67:79:47:02:f0:3b:d6:38:71:af:99:0c:
4c:be:f4:b8:e4:6a:f1:c5:0e:bb:f3:40:9a:fb:d2:
dd:ff:2b:b2:c5:3b:6e:7a:de:e4:5e:c3:7b:a6:7d:
3b:40:a3:18:99:ff:1f:e9:d5:11:07:67:91:84:b6:
50:86:22:ee:d0:6f:22:30:d4:f8:68:1b:7c:92:47:
4e:02:5e:e1:be:11:d4:50:ee:29:3c:34:57:9c:7f:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200105
Signature Algorithm: sha256WithRSAEncryption
72:73:9f:69:e2:ea:fe:39:c5:eb:88:cd:b4:e6:2e:bc:cf:8c:
e6:30:da:ad:99:2d:42:f9:ce:bc:3f:47:ce:f9:ad:12:65:3e:
53:51:d3:02:d9:55:be:6b:48:2d:b1:63:32:9f:ac:b9:0b:dc:
0d:29:9d:24:d3:9d:f6:b5:43:3c:bc:61:d9:e1:99:42:80:3e:
9e:30:87:38:30:86:b0:07:44:ab:6c:04:90:20:0d:a6:cd:02:
9d:d5:01:d7:8e:d5:90:4f:95:19:5c:23:ec:e8:ea:2e:cc:86:
a1:ec:9b:bf:12:2d:38:16:bf:3b:92:23:46:b5:46:76:5f:3c:
3c:cb:b9:3e:f3:06:57:e8:8d:d2:4f:58:a4:f6:de:5a:d6:71:
39:7b:54:41:83:c2:17:1b:66:e3:76:ac:aa:42:79:04:1e:40:
0b:44:30:1f:e0:55:98:d3:2e:b5:64:f6:4d:7d:54:d7:63:12:
65:82:f0:90:fa:35:d6:84:e2:4a:7f:ee:97:d3:05:e9:b1:2b:
c6:f6:75:85:3f:d4:c0:9f:26:0d:05:a8:ed:5c:06:de:49:b4:
5b:3b:6a:d4:10:92:3b:fe:51:ac:d7:13:ad:b7:5e:2f:f9:a6:
a2:6c:0b:af:41:4c:22:fd:ef:49:b4:24:49:08:de:1a:06:32:
5a:cc:f6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:40:57 2026 by rpki-client