Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
File: i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer (raw, json)
Hash identifier: sC0X2JQp7ykGfhYyEdkZfOTiJKRG//r1jwmYH07NP+U=
Subject key identifier: 8B:DD:30:3C:24:58:C3:64:9A:D5:68:4E:16:E2:09:60:35:15:F6:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A00ECE14ABD35D9CE3BB6D449A2C5AF75D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Aug 2026 08:19:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212510
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:ce:14:ab:d3:5d:9c:e3:bb:6d:44:9a:2c:5a:f7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 17 08:19:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bdd303c2458c3649ad5684e16e209603515f6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2d:a2:f9:a4:80:75:45:0f:d3:11:f3:f9:a8:
da:e4:8c:78:86:5b:6a:b5:6f:df:e5:d3:ae:0b:2d:
b6:54:40:d6:16:f0:9e:5b:de:b3:63:c4:b9:34:51:
65:b3:b0:9f:7e:69:b9:70:6b:c0:91:d2:72:cf:ee:
bd:ec:d6:2d:21:e7:db:25:1a:58:cb:b2:39:df:58:
13:80:17:cc:d7:a2:2f:72:c3:5c:bc:92:44:fc:a7:
84:64:03:8b:b7:bf:52:ab:4b:5b:a7:07:ee:2b:36:
4b:eb:57:20:41:78:6b:20:59:21:15:15:b5:55:07:
ed:6b:17:7c:ce:61:ec:64:2f:35:a3:8d:36:56:74:
08:16:af:91:8f:f1:f5:1b:41:cc:7f:98:4a:9e:d6:
1e:4f:d0:9e:59:48:39:15:02:3f:6d:f2:96:e1:1c:
c5:ee:f3:28:90:73:09:bb:06:fa:43:59:2e:01:37:
32:c0:11:31:b5:4f:27:57:32:bc:54:1f:91:0a:ee:
e4:a1:a0:63:7d:ef:06:83:43:7c:43:02:2e:0a:f5:
07:6f:a1:8e:f6:4c:47:e8:f0:20:bc:a1:77:4f:84:
44:85:1f:30:68:be:a8:2e:03:46:8e:4d:96:2d:22:
b3:24:5a:8c:44:bd:2f:ce:40:8d:4c:12:b4:7b:43:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DD:30:3C:24:58:C3:64:9A:D5:68:4E:16:E2:09:60:35:15:F6:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212510
Signature Algorithm: sha256WithRSAEncryption
26:c1:54:02:4b:93:bc:e4:e6:44:73:d2:b3:f5:65:f8:09:55:
8e:f6:d8:50:ef:ff:d8:75:46:7c:da:05:dd:6e:20:33:92:11:
27:fc:98:0d:e3:08:be:11:1f:02:33:6a:87:98:33:2c:72:aa:
0d:e7:2f:2f:6c:69:4e:78:17:0e:a9:cd:bf:c8:1c:5e:a1:60:
a2:b1:2e:67:91:63:90:fd:a9:ef:32:99:9b:d5:63:b5:cb:14:
39:1a:f3:88:04:7e:11:92:5e:e3:8f:69:45:d2:9d:ff:64:65:
99:80:ec:50:17:e2:c3:b2:f1:59:da:1e:72:c1:42:95:07:45:
00:46:57:83:7e:9a:96:13:5b:c4:df:c8:af:76:42:8c:a7:3f:
00:62:58:07:06:a0:d0:5a:10:2b:c9:20:5e:a3:95:ec:10:db:
05:fa:b5:24:cc:a1:2f:4d:ad:f9:23:4b:59:c6:6c:c6:71:32:
78:1e:c2:73:51:05:3d:54:2b:9d:f9:eb:65:4f:df:24:84:5d:
cc:cc:c3:33:dc:62:04:c3:9c:be:04:25:a2:8c:44:aa:ef:02:
3f:0e:ab:0d:d8:cd:c8:1f:4f:bb:42:08:02:99:0d:68:ae:00:
2e:fd:18:86:e2:68:bf:2c:3b:ea:30:c0:fa:ef:af:cb:50:e2:
11:14:a3:a4
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAaAOzhSr012c47ttRJosWvddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODE3MDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmRkMzAzYzI0NThjMzY0OWFkNTY4NGUxNmUyMDk2MDM1MTVmNmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5i2i+aSAdUUP0xHz+aja5Ix4hltq
tW/f5dOuCy22VEDWFvCeW96zY8S5NFFls7Cffmm5cGvAkdJyz+697NYtIefbJRpY
y7I531gTgBfM16IvcsNcvJJE/KeEZAOLt79Sq0tbpwfuKzZL61cgQXhrIFkhFRW1
VQftaxd8zmHsZC81o402VnQIFq+Rj/H1G0HMf5hKntYeT9CeWUg5FQI/bfKW4RzF
7vMokHMJuwb6Q1kuATcywBExtU8nVzK8VB+RCu7koaBjfe8Gg0N8QwIuCvUHb6GO
9kxH6PAgvKF3T4REhR8waL6oLgNGjk2WLSKzJFqMRL0vzkCNTBK0e0PkAwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIvdMDwkWMNkmtVoThbiCWA1Ffb5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzJlMzk0
OS00YmY4LTQ0MjAtYmIzMC0xMDk5YTg5OWZiNWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvMmUzOTQ5
LTRiZjgtNDQyMC1iYjMwLTEwOTlhODk5ZmI1Yi8xL2k5MHdQQ1JZdzJTYTFXaE9G
dUlKWURVVjl2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM+HjANBgkqhkiG9w0BAQsFAAOCAQEAJsFUAkuTvOTm
RHPSs/Vl+AlVjvbYUO//2HVGfNoF3W4gM5IRJ/yYDeMIvhEfAjNqh5gzLHKqDecv
L2xpTngXDqnNv8gcXqFgorEuZ5FjkP2p7zKZm9VjtcsUORrziAR+EZJe449pRdKd
/2RlmYDsUBfiw7LxWdoecsFClQdFAEZXg36alhNbxN/Ir3ZCjKc/AGJYBwag0FoQ
K8kgXqOV7BDbBfq1JMyhL02t+SNLWcZsxnEyeB7Cc1EFPVQrnfnrZU/fJIRdzMzD
M9xiBMOcvgQlooxEqu8CPw6rDdjNyB9Pu0IIApkNaK4ALv0YhuJovyw76jDA+u+v
y1DiERSjpA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:04 2026 by rpki-client