Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
File: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer (raw, json)
Hash identifier: nVuFetuOKE4InzZE5+9QKHv4cuWKgaRljSGYHRW1ar0=
Subject key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B35B1E66894B7BDC786F7CD4343CEB7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:17:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57009
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:b1:e6:68:94:b7:bd:c7:86:f7:cd:43:43:ce:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:03:f9:d6:bc:5b:c8:38:f4:8c:22:f8:69:
a7:3b:9e:00:ae:95:0f:c0:4e:87:22:04:63:2b:71:
68:57:9e:91:16:03:b6:50:50:73:34:a0:4a:85:b7:
87:ce:70:24:8f:9f:33:5b:80:49:f9:b9:4d:01:ed:
97:1a:8f:c3:29:a7:20:f2:89:5f:a2:73:59:ae:13:
f4:85:05:f3:df:55:b0:85:8c:20:0a:b1:ce:2f:3b:
e7:19:5f:66:ed:9a:40:b0:ea:34:a7:b2:fa:fa:f1:
a2:d7:02:da:b0:d7:83:4d:39:14:64:7c:1c:9d:12:
b1:2e:85:1d:20:7e:b9:15:dc:f9:41:fb:61:d8:00:
92:d4:29:2f:91:33:66:47:95:14:eb:60:48:eb:a9:
6c:1e:f5:18:3e:9d:7f:62:a8:90:d4:0a:21:45:6a:
8f:c9:1d:37:d2:f3:62:a3:77:7a:b5:ae:d7:1b:07:
54:8f:b7:06:ac:f0:85:46:73:81:5f:9e:b5:61:f5:
f5:8f:ae:0a:bb:53:df:e3:c8:b9:13:27:d9:70:48:
b9:f7:65:76:b3:bf:18:81:b5:c4:29:5c:4c:bf:02:
77:bb:e4:1e:30:35:43:d0:a1:8d:ae:17:be:19:1c:
ef:92:01:6b:ac:98:bc:e0:30:20:24:62:4b:5a:d6:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57009
Signature Algorithm: sha256WithRSAEncryption
69:30:11:7e:09:b5:c9:b3:bb:b5:a4:46:f7:f7:07:5b:4f:16:
9d:b7:cd:a1:7d:11:d0:fc:48:50:5b:63:91:5f:1f:5b:28:56:
0b:55:4b:a9:80:52:43:4b:8b:3a:a1:d9:4c:5c:9e:27:9e:8d:
a9:5c:47:cb:a9:17:33:ca:a0:01:12:ce:6a:6d:48:80:93:61:
bf:ed:59:41:df:97:ee:62:25:e2:6e:fc:8f:1e:cd:44:21:d5:
0c:45:eb:ec:a0:12:3b:bc:e6:be:af:76:6e:fd:07:96:94:f6:
ce:eb:ac:c1:74:1e:16:7c:97:6f:18:46:71:5a:7e:f5:aa:f5:
02:64:83:7a:a4:0a:89:0f:66:33:66:b9:0a:20:e7:b3:64:99:
6d:e3:15:3d:e5:f1:25:c3:08:12:da:72:6d:d8:b1:cb:10:e1:
d3:f2:86:3d:00:b6:2b:3c:39:15:88:90:cd:87:f9:34:a5:65:
f0:04:e9:f4:83:5b:85:f4:a2:1e:00:f1:af:26:99:4b:13:77:
53:ab:e2:ed:64:0f:db:48:2d:21:f2:49:ea:36:93:47:eb:89:
0f:07:8e:d0:cb:43:29:8e:41:12:30:e7:42:30:bf:69:74:ed:
90:80:cb:92:b3:aa:09:c4:6e:09:f9:c1:d3:17:5c:0a:4e:e7:
8e:ec:59:ef
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAZt7NbHmaJS3vceG981DQ863MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMjAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGZmOWRhNDMwYmZmMjY4Yzg0M2EyZTU4NjA5OGM4ZDcwMjFjYTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHoD+da8W8g49Iwi+GmnO54ArpUP
wE6HIgRjK3FoV56RFgO2UFBzNKBKhbeHznAkj58zW4BJ+blNAe2XGo/DKacg8olf
onNZrhP0hQXz31WwhYwgCrHOLzvnGV9m7ZpAsOo0p7L6+vGi1wLasNeDTTkUZHwc
nRKxLoUdIH65Fdz5Qfth2ACS1CkvkTNmR5UU62BI66lsHvUYPp1/YqiQ1AohRWqP
yR030vNio3d6ta7XGwdUj7cGrPCFRnOBX561YfX1j64Ku1Pf48i5EyfZcEi592V2
s78YgbXEKVxMvwJ3u+QeMDVD0KGNrhe+GRzvkgFrrJi84DAgJGJLWtb01wIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFPj/naQwv/JoyEOi5YYJjI1wIcoGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzMxYTc4
Zi1jMzFiLTQzODEtODYzMS02ODI5YzBmYzczOGUvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMzFhNzhm
LWMzMWItNDM4MS04NjMxLTY4MjljMGZjNzM4ZS8xLzEtUC1kcERDXzhtaklRNkxs
aGdtTWpYQWh5Z1kubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMA3rEwDQYJKoZIhvcNAQELBQADggEBAGkwEX4Jtcmz
u7WkRvf3B1tPFp23zaF9EdD8SFBbY5FfH1soVgtVS6mAUkNLizqh2Uxcnieejalc
R8upFzPKoAESzmptSICTYb/tWUHfl+5iJeJu/I8ezUQh1QxF6+ygEju85r6vdm79
B5aU9s7rrMF0HhZ8l28YRnFafvWq9QJkg3qkCokPZjNmuQog57NkmW3jFT3l8SXD
CBLacm3YscsQ4dPyhj0Atis8ORWIkM2H+TSlZfAE6fSDW4X0oh4A8a8mmUsTd1Or
4u1kD9tILSHySeo2k0friQ8HjtDLQymOQRIw50Iwv2l07ZCAy5KzqgnEbgn5wdMX
XApO547sWe8=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:04:07 2026 by rpki-client