Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
File: RI63RgCeGCwI7YT4F30ACKZIWD0.cer (raw, json)
Hash identifier: BISSqoJ1/WiSjxlbtM+t8apI9xeDjxXRMCOohX0uCNE=
Subject key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CCD10008A31E37B912B1B6F413A91870C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 08 Mar 2026 10:48:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200625
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cd:10:00:8a:31:e3:7b:91:2b:1b:6f:41:3a:91:87:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 8 10:48:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=448eb746009e182c08ed84f8177d0008a648583d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:8b:a0:5a:17:f5:54:a2:b7:11:09:4c:0b:
7a:4f:a8:52:98:bf:45:e2:9b:82:56:9b:e5:93:8b:
2c:6b:f9:8c:1a:5e:da:d9:6d:ab:04:47:9e:62:93:
03:15:cd:a0:a3:e7:3b:1e:ab:88:03:ea:3f:d4:52:
1a:db:95:b3:22:fa:5f:1e:2e:c0:76:7d:c9:12:21:
d1:a0:f0:77:45:33:f5:06:06:be:e6:da:5d:7e:cb:
6e:4c:c0:b8:f3:30:36:b7:c7:a4:42:d5:d1:a3:c4:
91:31:54:99:ac:12:b7:0f:ce:15:b3:4d:51:98:a0:
a0:a6:0a:df:4b:75:cb:88:11:d6:3b:42:f5:3e:4f:
b8:4b:cb:36:61:3c:62:f9:3f:df:23:b8:e7:e4:b4:
13:48:ee:35:d1:10:b8:4a:df:d1:f0:af:d9:19:a8:
0f:98:94:dd:56:ab:b7:82:69:49:54:ac:d7:58:6c:
eb:85:c5:40:31:e3:80:37:6f:6c:f7:03:2c:2c:8b:
75:e6:93:e5:bd:0d:78:93:02:5c:b2:80:81:4e:b9:
74:8b:8c:74:53:76:5f:8b:7b:2b:a8:6f:ba:9d:b3:
99:24:ac:6d:b6:c8:d6:e6:aa:ec:5c:74:e5:71:39:
ef:8e:0b:0c:ad:04:15:18:cf:8b:20:1e:a2:47:d6:
45:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200625
Signature Algorithm: sha256WithRSAEncryption
aa:49:6b:dd:9b:4e:33:b4:a9:9b:dc:78:e7:77:d7:eb:cb:cd:
d1:76:68:03:04:81:66:32:5e:8e:57:71:52:37:c7:31:74:07:
e4:7e:62:f6:25:9a:88:4b:3e:1f:35:9e:b9:9c:8a:31:7e:e2:
37:ac:21:68:8c:a0:3e:12:a8:cc:40:01:b8:be:69:dc:2a:4a:
16:c6:a5:37:8f:ea:d2:ac:39:90:26:bf:3e:f8:a5:c2:f9:23:
aa:17:f7:10:fc:dd:80:84:af:94:84:f2:91:51:4a:da:ec:45:
be:7d:dd:67:01:2a:fa:59:02:38:f5:bd:63:20:99:2e:fb:42:
e0:37:1e:14:9e:be:d8:c4:df:5f:c6:58:88:ab:2c:2a:53:df:
56:b1:84:e1:f5:8e:bc:27:19:96:1b:0d:a4:d3:bf:54:f5:20:
d8:9e:48:b5:cd:67:c5:13:7d:fb:c0:ee:60:2e:77:f2:28:dc:
07:81:96:60:e5:60:f1:67:ad:7b:07:8e:aa:fa:43:9d:ef:e7:
2e:8e:dd:9c:02:ff:61:c8:db:15:96:af:c0:a3:83:26:e8:eb:
dd:69:f3:e3:a3:e0:32:ba:33:13:c3:47:81:26:5f:b1:f2:4b:
9c:04:2a:75:5f:a9:02:1c:a9:23:72:99:7a:35:49:f1:01:12:
a8:8f:a5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:36:22 2026 by rpki-client