Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/TinfFJUjsDxG7tiggh1C8414SEE.cer
File: TinfFJUjsDxG7tiggh1C8414SEE.cer (raw, json)
Hash identifier: pOpHaGaQJ4EZ1u76vVO5n1guO8Qag/o3BxhRMErRgdI=
Subject key identifier: 4E:29:DF:14:95:23:B0:3C:46:EE:D8:A0:82:1D:42:F3:8D:78:48:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A141CD3A3B881A951036C3BC1AA69C663D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/TinfFJUjsDxG7tiggh1C8414SEE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 Oct 2026 23:02:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210880
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:cd:3a:3b:88:1a:95:10:36:c3:bc:1a:a6:9c:66:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 15 23:02:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e29df149523b03c46eed8a0821d42f38d784841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:e1:59:2a:a2:19:4d:6f:b8:9f:63:ac:27:
3d:e2:bc:29:76:97:ee:cb:5d:da:e9:f6:95:81:ee:
51:7c:3f:0e:fe:3e:5a:cf:52:36:96:28:be:d2:fc:
fa:94:dc:0d:2b:ff:c5:a1:af:52:c8:04:f2:e2:e2:
8d:78:db:a5:4f:4e:eb:d5:a5:81:36:11:a1:8f:72:
8f:fb:b5:e1:f4:5f:5d:ab:4d:64:f8:ba:ef:f7:fc:
42:bc:6a:15:fe:5b:02:af:c6:c7:bc:ef:11:08:85:
4c:68:94:84:2a:b8:3d:50:1a:9a:11:42:98:7d:33:
f2:53:d5:6b:2c:16:24:a6:12:86:84:c6:39:65:a8:
c3:6e:6a:0c:49:4e:fd:ac:42:38:22:77:98:89:cc:
cb:e1:2d:f4:bc:6a:4f:d6:0e:03:02:a7:f5:12:e5:
2d:93:9b:e2:e1:c2:69:71:27:c4:09:b4:4d:5b:66:
a8:59:79:5c:80:03:24:6b:31:8f:3b:d6:e8:c9:57:
07:8f:3a:a3:ee:c9:22:3c:cd:bd:95:69:cc:0e:6f:
6e:d9:86:87:15:84:9e:dd:04:94:7f:18:bd:cf:86:
d6:fe:75:8c:d9:4b:57:a5:23:14:e4:9a:12:6d:77:
66:7c:b3:c0:bd:7c:6b:e1:8a:5e:50:d2:96:9e:86:
ac:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:29:DF:14:95:23:B0:3C:46:EE:D8:A0:82:1D:42:F3:8D:78:48:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5adb71-10ac-4223-b36b-e5b9d6e6e47d/1/TinfFJUjsDxG7tiggh1C8414SEE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210880
Signature Algorithm: sha256WithRSAEncryption
6d:7c:4e:95:3e:f2:12:81:78:f3:17:4c:ef:75:82:6b:e7:70:
86:38:12:ae:1a:c8:94:af:27:68:7f:e0:bc:1c:e7:1a:8e:65:
d2:25:5e:10:e7:a8:18:64:15:ff:d6:b9:82:7a:b8:f1:bf:55:
b0:dc:7b:d3:17:a5:ca:87:5d:db:94:3b:52:50:9b:33:92:11:
f3:80:e0:2e:da:a2:28:b2:1d:96:46:2c:08:ad:8a:7f:37:72:
be:c2:20:44:34:65:c6:6c:eb:2b:de:00:60:9e:28:33:82:0f:
c9:7a:08:84:88:d9:7c:04:e1:42:54:f0:e7:f5:5c:e9:36:c1:
64:ff:a9:a8:09:d3:32:5f:cf:e6:ee:89:52:03:12:ec:05:00:
8f:89:47:7c:5b:db:64:16:53:2d:82:58:7f:72:a3:f8:f2:94:
84:8f:a8:47:c2:22:21:11:82:73:90:9c:37:75:b8:ae:c7:4e:
ca:83:6b:55:d4:70:36:d3:92:90:70:0a:5f:3b:0d:9c:1a:57:
81:ca:50:9d:a9:da:9d:c0:89:cb:ac:b5:c4:82:50:94:d2:24:
89:be:af:0f:27:9c:92:a8:2a:1a:6a:d7:d7:3a:b4:d1:2d:5b:
2d:0a:04:20:db:2b:28:40:0d:06:f3:cc:84:64:2d:d8:26:a4:
8c:99:df:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:20 2026 by rpki-client