Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
File: I6iatTI5OGO8sTkWPc9BWKV_G68.cer (raw, json)
Hash identifier: lPd4jOJ+lAUZFIaGQyS565DzUTZPYnw1mfKKGxR8+Ic=
Subject key identifier: 23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D2BEE27C64B493E9A97FADDE6CD1B582D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Mar 2026 20:55:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199742
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:ee:27:c6:4b:49:3e:9a:97:fa:dd:e6:cd:1b:58:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 26 20:55:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23a89ab532393863bcb139163dcf4158a57f1baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2e:a5:6a:76:4d:62:05:b7:b7:c9:71:76:17:
83:52:57:c2:b1:03:50:88:a5:27:72:de:90:65:7b:
e5:ff:7a:90:a1:6d:50:bc:d9:b3:48:69:a4:78:ec:
59:b0:4b:af:9c:ae:23:a7:ca:d4:55:b3:b9:b5:67:
0a:94:b7:d0:8b:8f:71:ee:eb:72:d6:41:6d:c4:76:
68:35:84:19:d1:e6:99:4d:24:cd:d1:a0:6e:7b:71:
7d:28:15:9d:3e:fb:2e:38:f1:20:15:87:74:75:fc:
eb:5a:39:93:9f:f1:6e:1f:26:64:10:66:f0:11:87:
68:08:9e:c7:af:7f:1d:3b:2a:e3:3f:64:90:53:50:
c8:b9:fc:8c:b8:9b:46:ee:94:0c:e3:9f:7f:5d:c6:
aa:e1:75:4a:91:88:b7:6d:62:a7:81:ff:f7:67:f9:
ac:51:76:9e:b3:34:73:e2:af:df:cb:48:05:ff:d0:
d5:9a:37:7b:e0:3c:77:ef:87:9a:6f:e4:15:ee:a9:
2e:99:c8:67:cc:01:c1:20:1d:e7:d1:86:1a:e5:f5:
48:fe:69:f3:9b:84:7e:bf:44:e8:d3:e5:39:e9:70:
e3:cd:02:93:34:98:d4:8a:20:6b:01:29:39:9e:ce:
62:fa:51:d5:7c:98:95:c6:d0:d9:ea:1a:0e:8f:aa:
c1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199742
Signature Algorithm: sha256WithRSAEncryption
34:e2:0b:c9:34:73:a1:35:4c:8c:1d:6c:54:34:a9:44:5a:be:
f1:9d:54:b9:4c:75:d6:a3:1a:3d:13:8d:72:7d:96:7e:e4:76:
d6:fa:f9:36:72:7e:e0:f2:26:32:b1:bf:66:e3:98:63:39:ec:
43:fe:96:7c:00:7c:e2:f1:b3:a4:6d:01:6e:52:43:8f:8f:3c:
da:cc:c6:d1:5e:a7:a9:24:98:1d:ac:95:5e:aa:a5:55:98:07:
d9:20:33:9c:f2:1d:d7:56:b5:75:91:2e:19:97:13:c8:d0:57:
cc:34:61:97:f0:74:57:28:08:10:b6:b7:a2:1f:c9:a5:9c:a9:
ad:df:68:93:81:d4:90:59:06:59:96:38:b7:a4:73:7e:ce:06:
4f:ef:d7:04:9b:9e:51:5a:9c:0d:a4:db:35:87:11:0d:93:b4:
6b:99:3b:ae:66:e2:37:10:42:89:aa:52:4f:1c:b0:2b:fa:8e:
1c:ce:40:a0:10:e3:04:9e:89:79:1b:c3:44:fc:ee:4d:ee:08:
b0:3b:04:15:d6:c8:22:59:8d:72:61:46:22:97:16:a1:dc:43:
6c:55:45:6a:8d:54:75:cc:fb:aa:2e:ac:4d:64:4e:40:18:36:
fc:02:ca:40:ad:62:c0:d7:6a:6e:18:b2:b6:04:1c:43:1d:94:
b0:ee:98:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:42:19 2026 by rpki-client