Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lrrMW97hlpQXoUa8RYZbRascN3c.cer
File: lrrMW97hlpQXoUa8RYZbRascN3c.cer (raw, json)
Hash identifier: TiXbx1PScm7P62X0Pr3A3IK7Dl5D/vtQPELdROrtQy4=
Subject key identifier: 96:BA:CC:5B:DE:E1:96:94:17:A1:46:BC:45:86:5B:45:AB:1C:37:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FD72492A3F9086AAFE3D348D1E05051A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Aug 2026 12:55:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215097
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:24:92:a3:f9:08:6a:af:e3:d3:48:d1:e0:50:51:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 12:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96bacc5bdee1969417a146bc45865b45ab1c3777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:c3:1e:b7:5e:58:3e:8b:27:f8:ae:41:be:
fb:f5:d3:80:17:06:b3:7b:9f:43:e4:74:24:d9:cb:
24:dc:f7:fa:f5:78:2e:6c:c3:2a:15:6d:78:a1:a4:
46:7c:b3:5b:3b:7d:7d:cb:f5:ea:78:f0:7f:2f:17:
53:ec:08:51:62:05:c9:10:e8:76:29:d2:e4:8b:b0:
73:38:35:32:dd:80:b5:75:cc:60:f8:e4:a5:34:9f:
cd:bf:fb:96:d8:11:fa:4d:f2:e3:6a:72:53:18:d0:
7e:67:f0:2a:40:a3:1f:20:c0:80:7e:c4:8c:18:69:
67:76:5e:9f:08:8c:23:e7:08:16:e7:a3:44:41:56:
e8:44:5d:49:cb:77:e6:32:74:ee:65:da:14:4a:3d:
38:e5:19:d2:64:9a:17:25:b3:77:3b:6c:4e:43:a6:
35:c3:2d:2e:ad:71:98:01:0b:75:e9:ac:43:40:5d:
48:7f:c3:20:dd:31:0d:55:ed:14:c7:8d:20:8d:5e:
d0:57:95:9f:5b:43:e1:eb:4d:1d:31:35:85:b2:c4:
15:e4:65:1f:a8:c8:8f:1d:1b:d9:7f:ba:c2:2c:90:
0e:11:c7:25:9b:ec:e7:d2:af:02:c0:38:f8:9b:6f:
ca:2a:4f:41:70:4a:2c:86:fb:5c:2c:cf:54:e7:85:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BA:CC:5B:DE:E1:96:94:17:A1:46:BC:45:86:5B:45:AB:1C:37:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d38dca-0889-46d4-afe9-a429992d621b/1/lrrMW97hlpQXoUa8RYZbRascN3c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215097
Signature Algorithm: sha256WithRSAEncryption
29:2e:0b:46:64:fc:d4:93:4d:57:9b:42:f3:54:43:c4:7c:5a:
3d:0d:d7:5a:8e:65:e5:67:5b:79:ee:1c:ae:7c:46:5a:24:de:
cd:e4:a8:45:c1:26:6b:42:07:65:f9:8e:f2:d5:0d:31:95:ca:
41:6d:7a:48:e9:66:6e:4c:7c:2f:41:35:23:37:ce:d4:06:30:
1d:64:89:f6:6a:9d:fa:c7:0e:17:26:52:ef:a4:83:15:e9:98:
cf:22:1a:d8:eb:f8:a0:72:e8:6e:c5:56:00:17:34:0c:d4:9b:
85:a3:c1:b3:2e:1d:b5:4d:b8:7a:82:d7:e6:6a:1b:d2:a6:41:
d1:c8:49:f7:9e:b7:6a:0c:c7:3d:4f:9b:ec:03:bf:ce:90:7c:
ba:73:a0:b6:73:98:4d:93:53:38:ad:9b:41:e1:08:a5:68:d7:
7e:eb:8e:03:13:c0:25:cb:e9:cc:12:30:58:e0:4f:11:c3:0c:
14:65:fb:ac:65:92:36:09:ae:94:5f:a2:d2:57:2a:27:02:ef:
d1:7e:06:c4:e5:41:de:ff:08:c4:d7:b4:bb:a0:10:bd:3c:b5:
4d:ce:9b:7f:36:6e:c4:62:5c:f0:01:63:aa:c4:a8:53:be:8b:
03:c1:6c:76:53:bc:b4:b5:48:d2:8a:80:fe:74:34:39:58:35:
e3:6e:de:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:43:08 2026 by rpki-client