
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m_RXG73K1sGXqwWraa_s_yq0M94.cer
File: m_RXG73K1sGXqwWraa_s_yq0M94.cer (raw, json)
Hash identifier: YwFx/a2YMtDV1R8b12x2hdlwaSX7L7NgQImNhSHAK7U=
Subject key identifier: 9B:F4:57:1B:BD:CA:D6:C1:97:AB:05:AB:69:AF:EC:FF:2A:B4:33:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FE1E885762148408EA4F704916AAB9C1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 08 Aug 2026 15:05:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 47509
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:e8:85:76:21:48:40:8e:a4:f7:04:91:6a:ab:9c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 8 15:05:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bf4571bbdcad6c197ab05ab69afecff2ab433de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:50:7b:ae:49:3b:e6:7e:47:21:31:18:c0:
d5:4a:0c:85:87:32:84:ce:49:a8:37:53:64:f3:97:
f1:fd:c2:2b:54:a3:d1:fd:78:85:e5:c4:63:ba:0a:
e2:d0:c0:33:87:2b:b2:de:cf:6e:53:eb:01:af:cb:
fc:b9:0e:62:1e:8b:3f:2e:eb:55:48:29:1c:31:73:
21:d7:29:1a:9b:16:7c:39:40:73:c6:25:23:76:18:
9e:12:c8:46:01:c4:27:56:47:1e:5f:c2:d2:da:1a:
98:b9:8e:e2:e2:3e:36:88:19:77:ed:bd:bb:9c:0f:
5f:a5:3b:c5:4f:a8:34:da:ed:93:29:ad:90:18:25:
ae:0f:90:19:29:31:bf:99:56:45:35:18:11:4b:d9:
e8:58:ad:54:e6:39:9d:86:87:83:45:5c:e3:3f:ea:
e7:a2:78:54:9c:2d:85:fb:e9:c2:4d:ef:34:cf:57:
34:5f:3c:2e:4f:3b:7b:a4:47:96:3b:e8:16:0a:6d:
2d:3e:6b:19:42:e3:33:b3:1b:aa:52:d4:54:2a:5e:
ca:8e:85:ee:89:ad:bb:2e:1e:69:a4:6c:90:05:bb:
14:eb:bb:ac:e9:c0:17:a4:5c:a0:5e:36:f2:2e:1d:
79:97:80:4f:66:b3:f6:39:af:da:4d:90:37:d5:1c:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F4:57:1B:BD:CA:D6:C1:97:AB:05:AB:69:AF:EC:FF:2A:B4:33:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/50edf1-ccaa-4d3a-86d9-4dd2441c2cb2/1/m_RXG73K1sGXqwWraa_s_yq0M94.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47509
Signature Algorithm: sha256WithRSAEncryption
34:ac:10:b0:b5:3f:1f:8c:a3:9f:1e:35:3c:d8:58:15:b9:93:
64:34:1d:b1:87:14:d2:20:aa:c3:85:48:97:c0:bf:ac:d0:41:
15:21:bd:7e:d5:96:97:82:d5:68:0d:89:8d:5d:a2:09:ac:82:
44:1f:a9:99:2f:23:0c:99:c2:d6:a6:61:54:f4:d4:30:67:ad:
db:b4:ef:49:a0:b8:95:6c:85:d0:fe:91:fd:b8:8c:67:59:c4:
92:f1:50:aa:3f:ae:b1:bc:b2:bb:31:36:63:7d:15:fa:63:5d:
11:d1:50:3c:48:76:8d:f6:22:9f:2d:f9:8f:9d:4e:fd:6a:51:
c0:6e:36:9e:16:1b:4e:83:d7:a0:ac:ae:fc:d1:88:15:7c:06:
ba:f0:f1:df:4e:9c:69:db:92:15:ed:ba:45:c3:ca:15:e1:34:
d1:11:9b:a8:6a:60:81:1e:74:fc:b1:96:16:37:df:1d:b1:33:
df:43:cb:79:b5:46:57:f2:7c:0e:53:43:6f:2b:b9:fa:0a:43:
ed:47:39:59:5a:f5:41:28:14:6c:96:f4:03:fd:62:43:9f:6b:
31:be:5d:d9:64:f1:85:6d:36:46:60:86:e3:3b:bc:4d:31:96:
62:55:53:ab:be:2a:1d:13:78:75:f6:86:3d:d7:7d:a6:0a:16:
79:dc:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:42:59 2026 by rpki-client