Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
File: XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer (raw, json)
Hash identifier: 4L33DT/4FHDsY/J+8u4Obp4KkMzcYXg/9lVnbKBotz8=
Subject key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C43CF9B53A5C10C62E522710ADB28F10D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 09 Feb 2026 19:10:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207994
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 15:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:cf:9b:53:a5:c1:0c:62:e5:22:71:0a:db:28:f1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 9 19:10:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d41d330dc8c7293e729451db2646383838e3f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:ee:07:f3:ca:a2:f1:40:a2:db:b1:43:90:
fd:c2:9e:42:27:37:52:97:ef:db:a0:93:a5:56:a4:
69:18:0f:21:26:a9:0e:58:ca:df:73:20:38:32:43:
f2:e4:92:ed:69:3e:85:0a:4f:10:cf:70:a6:59:9c:
eb:78:25:3c:8c:96:c8:6d:8e:30:4d:f2:d5:ca:d5:
45:0f:82:7b:3b:61:5d:84:8c:d3:a3:35:c2:0e:85:
3b:45:aa:08:72:2a:02:ea:25:92:a0:2b:71:a6:49:
ef:85:2e:8d:f2:7e:43:93:26:e4:4f:37:a7:6e:e3:
c1:82:3e:7d:0c:9a:0b:da:c8:e6:af:62:4f:77:b3:
8b:83:8b:cf:11:65:45:2b:34:08:e6:a7:95:b1:08:
d2:bb:15:c6:0a:0b:5a:d4:66:98:2c:54:4a:f5:4e:
93:e0:5e:9f:d3:02:c4:ef:3f:b9:70:59:27:42:16:
21:6a:7d:e6:7d:e4:db:c2:06:6d:c1:5a:eb:01:45:
d4:87:ac:0d:8a:ef:2f:92:50:ce:1e:6e:f5:49:41:
54:5b:1f:4a:2b:7e:b3:1a:93:1d:da:f8:0c:10:ac:
99:ec:d9:ed:41:78:dd:7e:02:ef:ec:d0:f5:07:42:
b3:d6:3e:25:d9:ba:34:98:4b:85:56:18:4e:5d:6e:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207994
Signature Algorithm: sha256WithRSAEncryption
22:f1:4a:09:22:58:41:f6:51:c7:eb:fc:80:d8:23:3e:34:70:
73:68:c0:52:47:80:50:c1:d7:64:19:7f:65:20:97:7a:93:ec:
21:39:e3:f5:85:ed:06:cc:67:58:f8:9d:15:78:8f:1c:8c:88:
62:b1:5c:13:cc:d1:bf:6f:ce:c2:2e:0f:65:c8:37:a4:01:e4:
1e:02:07:cd:f7:df:63:50:8a:4f:ab:07:9c:4d:38:f3:24:73:
23:4b:4d:8a:27:61:af:94:b1:c1:83:12:96:da:4b:e1:70:7d:
38:26:6f:da:ba:64:48:8b:83:c2:7e:8a:d5:b1:f6:e8:a8:23:
e3:8e:dc:ce:5d:cd:e6:b4:cd:72:e5:60:ac:50:13:37:f4:89:
7e:18:cc:33:7a:c0:c4:93:da:d6:6c:66:ed:8c:b1:e9:a9:06:
5a:46:e2:99:53:d4:c4:55:ea:79:51:9a:64:c7:46:b0:91:9d:
76:45:67:9a:f7:55:1e:40:df:85:13:58:cd:97:a0:c0:bc:ae:
2d:60:f1:be:7e:1c:4d:ec:b9:6f:ac:86:61:d2:2d:c3:97:96:
6f:55:68:07:1a:dd:73:96:1e:87:ad:5b:40:a3:f5:4a:bb:66:
e8:07:2b:54:b2:70:64:d0:e2:3b:d3:b3:60:20:06:1e:a3:84:
d5:f9:92:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:23:43 2026 by rpki-client