Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aK8jteBWV7foypaQC_n6OP2SNJ8.cer
File: aK8jteBWV7foypaQC_n6OP2SNJ8.cer (raw, json)
Hash identifier: tEtfPTgZR1BCef2gENQW9w6Dxnek2+D+cl1kHuV13pw=
Subject key identifier: 68:AF:23:B5:E0:56:57:B7:E8:CA:96:90:0B:F9:FA:38:FD:92:34:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E7032C6B2289A1BB85593020ED02E98F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/aK8jteBWV7foypaQC_n6OP2SNJ8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 28 May 2026 20:07:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197194
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:70:32:c6:b2:28:9a:1b:b8:55:93:02:0e:d0:2e:98:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 28 20:07:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68af23b5e05657b7e8ca96900bf9fa38fd92349f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:1b:3f:bc:45:71:15:da:e0:e8:e5:98:c7:
60:90:34:b2:2a:b2:c1:68:b4:3f:41:6b:12:32:4d:
0d:1c:cf:de:56:6e:49:41:f3:0c:62:69:42:9c:e3:
ff:8e:4e:53:bf:fc:61:db:4b:ac:3a:d7:10:25:86:
4b:62:d8:66:09:4c:cd:b7:19:4a:50:81:ad:5d:cd:
7d:db:8b:a3:23:54:90:98:2c:71:6c:0a:1b:59:31:
7b:6f:4c:65:e1:b6:cf:80:7c:43:48:5e:a5:2f:66:
d9:9b:ea:dd:4c:a0:38:49:6a:ff:d6:85:1e:6a:9d:
13:66:c5:6f:04:54:4d:e3:84:cc:67:d7:bb:4a:a7:
8c:d7:37:f0:ae:4d:f8:42:8c:9a:58:54:93:35:da:
c1:19:e5:7d:bb:9c:33:71:2e:92:e3:90:09:81:15:
23:ac:96:67:9e:42:ff:10:2b:ed:5d:90:72:7a:86:
0a:f9:e4:14:e2:1c:89:8a:99:3f:32:07:87:8a:98:
bc:c1:80:67:ae:1c:3b:33:b8:af:4f:bc:4d:25:06:
1c:46:92:c2:e9:67:b5:94:24:94:2e:fc:15:e6:9e:
1e:de:dd:ba:85:73:82:96:3d:13:62:ff:28:40:98:
31:7e:4d:1a:5f:88:58:59:e3:14:83:1c:83:7b:84:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AF:23:B5:E0:56:57:B7:E8:CA:96:90:0B:F9:FA:38:FD:92:34:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/aK8jteBWV7foypaQC_n6OP2SNJ8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197194
Signature Algorithm: sha256WithRSAEncryption
18:be:71:21:71:33:eb:06:1c:fa:f3:93:09:2f:28:fc:d6:66:
0f:df:d0:33:f9:c9:cd:b2:1f:86:58:64:6f:71:1d:46:21:28:
aa:cd:a7:67:12:3b:36:ff:fe:4c:50:b6:df:46:a2:d5:60:50:
b7:5e:b9:29:c5:52:ef:b2:6f:02:3f:72:c9:e0:24:61:85:db:
b0:22:2c:ae:74:72:23:cb:ac:8c:c7:19:00:33:d0:1c:ce:b3:
c5:f7:3e:3d:d9:52:34:26:3d:3c:1d:f6:e7:fb:5d:c2:30:25:
86:e8:c3:9f:66:f6:ce:ca:cc:83:62:93:4a:62:e1:46:a8:d7:
f2:29:94:e8:49:af:55:38:d5:9e:e4:7c:2a:6d:12:1a:84:2e:
ce:26:4c:1a:f8:d8:80:81:4e:90:8b:86:10:47:66:44:59:57:
d4:0b:4d:cc:cc:06:0b:bf:fb:71:fe:5c:57:7d:4f:e7:44:ba:
6f:19:43:b7:86:0e:5a:0a:84:87:f4:12:93:6a:93:76:79:3a:
b2:0e:61:14:7f:e9:0d:9a:2b:dd:4f:87:13:69:7b:5b:e2:61:
76:39:d6:b4:dd:56:0e:ae:dd:62:a4:17:b5:ac:4e:21:9f:97:
e3:9e:bc:c3:b3:61:d7:c5:c5:8f:28:0e:16:38:10:96:39:4e:
79:df:60:83
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZ5wMsayKJobuFWTAg7QLpj1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNTI4MjAwNzE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGFmMjNiNWUwNTY1N2I3ZThjYTk2OTAwYmY5ZmEzOGZkOTIzNDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjQbP7xFcRXa4OjlmMdgkDSyKrLB
aLQ/QWsSMk0NHM/eVm5JQfMMYmlCnOP/jk5Tv/xh20usOtcQJYZLYthmCUzNtxlK
UIGtXc1924ujI1SQmCxxbAobWTF7b0xl4bbPgHxDSF6lL2bZm+rdTKA4SWr/1oUe
ap0TZsVvBFRN44TMZ9e7SqeM1zfwrk34QoyaWFSTNdrBGeV9u5wzcS6S45AJgRUj
rJZnnkL/ECvtXZByeoYK+eQU4hyJipk/MgeHipi8wYBnrhw7M7ivT7xNJQYcRpLC
6We1lCSULvwV5p4e3t26hXOClj0TYv8oQJgxfk0aX4hYWeMUgxyDe4TUZwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFGivI7XgVle36MqWkAv5+jj9kjSfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2VkNmYz
Yy1mYjI3LTQxNzktYWRlNi04Y2U0MWIxNzNmM2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvZWQ2ZjNj
LWZiMjctNDE3OS1hZGU2LThjZTQxYjE3M2YzYy8xL2FLOGp0ZUJXVjdmb3lwYVFD
X242T1AyU05KOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMCSjANBgkqhkiG9w0BAQsFAAOCAQEAGL5xIXEz6wYc
+vOTCS8o/NZmD9/QM/nJzbIfhlhkb3EdRiEoqs2nZxI7Nv/+TFC230ai1WBQt165
KcVS77JvAj9yyeAkYYXbsCIsrnRyI8usjMcZADPQHM6zxfc+PdlSNCY9PB325/td
wjAlhujDn2b2zsrMg2KTSmLhRqjX8imU6EmvVTjVnuR8Km0SGoQuziZMGvjYgIFO
kIuGEEdmRFlX1AtNzMwGC7/7cf5cV31P50S6bxlDt4YOWgqEh/QSk2qTdnk6sg5h
FH/pDZor3U+HE2l7W+JhdjnWtN1WDq7dYqQXtaxOIZ+X4568w7Nh18XFjygOFjgQ
ljlOed9ggw==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:43:23 2026 by rpki-client