Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.cer
File: 1o9K_Wwjrdy1TdzJhNVUOJqjmXM.cer (raw, json)
Hash identifier: 4+Tp2ZPmlyU9W7ubaqquremD0kw3zQvJgiVWeey1MbY=
Subject key identifier: D6:8F:4A:FD:6C:23:AD:DC:B5:4D:DC:C9:84:D5:54:38:9A:A3:99:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FFFBD6842833E5CCDC055F2081A9D0869
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 14 Aug 2026 10:07:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a09:9140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:bd:68:42:83:3e:5c:cd:c0:55:f2:08:1a:9d:08:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 14 10:07:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d68f4afd6c23addcb54ddcc984d554389aa39973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:c0:e3:06:72:31:f5:1d:a8:46:f7:33:be:
df:77:56:3a:80:e9:4a:88:e4:fd:20:f4:e6:f3:eb:
fe:83:ad:01:fe:e9:ae:b7:b3:c0:4d:e0:19:fa:63:
5b:8c:5b:d3:1e:65:52:68:ce:5c:62:e4:5a:8b:be:
61:d1:1c:f4:4e:de:13:bc:68:3c:b1:b3:32:20:8c:
1d:42:98:84:ab:41:f2:83:fc:36:ec:64:a9:f3:b3:
70:68:ff:80:27:97:87:76:b5:f0:92:1e:35:e3:7b:
f2:da:e3:3e:09:83:2b:ac:e2:b9:39:5f:b7:d2:4b:
29:66:a9:95:e3:68:7c:44:04:33:8b:74:f8:a3:06:
22:b3:e4:c7:ba:0f:de:02:80:12:6c:74:24:69:eb:
4b:4a:47:87:a3:ef:de:f6:d0:36:29:92:de:74:3b:
2d:17:76:25:d2:51:ad:22:61:e7:98:34:45:3e:c7:
51:ef:87:f6:1b:5a:b2:d7:6a:82:55:0c:29:f2:aa:
e1:49:b9:c8:b3:ea:a8:45:d8:a2:56:e4:29:f9:a2:
93:5e:1b:e4:f0:b0:12:9e:02:c7:50:8c:4f:ba:fb:
e9:e0:26:5a:09:62:6d:f0:e9:1d:99:28:22:9f:2b:
83:a9:10:29:0a:7d:8b:53:53:a8:b5:7f:72:11:c0:
36:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8F:4A:FD:6C:23:AD:DC:B5:4D:DC:C9:84:D5:54:38:9A:A3:99:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9140::/29
Signature Algorithm: sha256WithRSAEncryption
a9:da:c6:48:06:e7:26:d8:8b:c2:db:28:fa:8f:09:02:38:2c:
50:8d:a6:d7:a9:5a:2e:d2:92:71:c1:12:14:5d:14:cc:0a:d1:
c7:5e:65:79:a4:6d:43:5f:03:e5:a7:2a:31:de:bc:f8:65:4b:
64:8f:64:f5:a4:56:2b:8e:bf:da:0b:b0:50:24:b2:9c:68:d7:
96:12:aa:9b:6e:95:6a:78:f6:10:dc:ad:18:d2:70:e9:df:d9:
3e:6b:d1:3b:7f:67:3d:bf:f2:33:b0:a0:5a:43:3d:70:6a:31:
d0:d7:9d:07:de:e5:b8:62:5e:fc:ce:7c:89:e4:a7:53:d2:c6:
4a:80:9c:57:91:e4:d7:62:2e:c0:c5:b5:e5:c9:9f:ae:e2:93:
a3:c4:93:c8:ba:2a:c7:e4:f6:1d:d4:06:01:80:a8:18:52:17:
12:2c:6b:77:d2:75:cb:e9:58:a3:c8:14:77:50:06:fb:2c:25:
fc:f7:06:47:67:24:3a:12:f2:f4:b4:3b:07:34:81:1f:79:4f:
ce:64:5c:73:cd:99:26:f8:70:88:25:b5:0b:c8:dc:84:d9:da:
b3:2a:c6:68:ad:14:b9:e1:cc:65:4c:7a:c0:a6:b3:96:d7:61:
26:ce:5a:ab:62:d6:85:be:97:c3:b7:c3:90:ae:40:e9:d7:c4:
38:64:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:12:16 2026 by rpki-client