Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
File: PbFMaRiItK2KbwDzMFGE-jxkgz8.cer (raw, json)
Hash identifier: QX8cYGEKrTJGkOXc1GPYLAqx7DTtwF1T0FLWECi6Iwg=
Subject key identifier: 3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F70372862E4DE1A770C64C861D4A877C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
caRepository: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/
Notify URL: https://krill.clnexus.dev/rrdp/notification.xml
Certificate not before: Fri 17 Jul 2026 13:14:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214420
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:37:28:62:e4:de:1a:77:0c:64:c8:61:d4:a8:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 17 13:14:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:fe:ec:a1:63:06:3a:ca:0b:72:2f:18:a2:
45:e1:00:a0:92:bb:dd:bd:6c:cc:99:fc:8d:99:ee:
25:e5:6b:62:f0:99:2f:22:0c:c1:9c:64:62:8a:b9:
83:68:68:79:c9:97:e7:89:3e:9f:d8:94:0d:c9:25:
d9:01:b5:e4:3f:a5:a2:5a:17:07:34:14:98:04:3a:
35:4c:f1:6c:21:e3:55:fa:52:81:44:6e:cc:33:90:
fa:f5:10:9e:da:43:69:fa:b2:c3:70:31:74:06:9c:
f4:60:6e:63:eb:0e:75:76:38:a4:70:82:55:8a:e1:
48:18:ff:96:86:92:35:eb:fa:c2:35:be:8c:d3:73:
30:dc:29:a8:2a:77:c8:5d:46:6f:6e:a4:41:87:d0:
ad:41:15:0e:15:d2:ba:9c:92:8b:c4:2e:88:0d:d9:
24:b8:5b:e8:b8:03:45:17:88:f4:c7:44:de:48:88:
7b:4f:63:ef:57:c0:57:c0:15:07:cc:15:56:96:ae:
2d:97:7f:59:7c:3f:c0:f4:fa:24:43:06:31:8a:85:
93:d2:b2:f7:b1:6c:c8:e8:ea:5f:0e:3e:6f:d0:10:
90:ba:5b:8b:5e:36:05:0b:91:90:f0:67:b5:da:76:
d6:8b:c5:c4:c0:04:0c:9a:9b:92:b4:c9:cc:56:fc:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/
RPKI Manifest - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
RPKI Notify - URI:https://krill.clnexus.dev/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214420
Signature Algorithm: sha256WithRSAEncryption
11:b2:e3:54:fb:b7:d0:d7:0a:43:4f:d6:f1:9a:20:1f:29:53:
48:a3:ba:30:e3:ee:e2:48:20:41:46:50:84:c7:79:49:09:5d:
dd:ba:0d:e9:24:17:82:a3:a5:bb:f5:95:4c:ef:58:6e:f4:74:
41:2c:30:0b:28:5a:b3:60:fd:62:20:ef:0d:64:f1:9a:71:9f:
11:4a:cf:98:87:1a:28:67:ea:1b:b4:c1:57:f4:10:66:05:3e:
58:e7:b2:39:0f:9a:a1:14:a1:7b:87:08:28:71:eb:7e:c4:f7:
b5:20:43:b1:18:96:a8:59:69:f7:06:4d:70:cc:ab:2d:a5:fc:
1b:b4:51:4a:32:f0:f0:76:5b:da:af:98:10:d2:7f:36:34:28:
90:56:fe:4a:06:37:51:55:3e:c6:49:95:e6:06:77:51:19:78:
19:61:12:64:d0:f1:a7:31:3a:c4:c4:0b:e3:9b:c5:e7:5a:7c:
07:3f:11:96:6e:b6:b9:77:91:e3:82:fc:b5:64:fe:62:ca:ef:
12:24:34:f1:d8:a8:99:68:e1:68:59:2c:66:f0:11:06:cf:fb:
ac:3b:82:b4:86:05:16:d5:79:1d:df:b3:c1:62:5b:9f:22:a6:
2d:2c:0e:b9:6e:6c:d1:ec:20:81:22:5f:67:0b:7d:b9:50:21:
f3:33:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:42:02 2026 by rpki-client