Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.cer (raw, json)
Hash identifier: AHIAnHSZhUzuDOgmIHhyq37vv9Em5QgDZyBXcwcsAMo=
Subject key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C8075E479DA8D80FAC675FB0FEBE4BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:19:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 64406
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 22:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:75:e4:79:da:8d:80:fa:c6:75:fb:0f:eb:e4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:56:1e:a6:78:dd:7a:e5:48:3c:02:42:f0:
6f:42:c6:cd:d8:47:ad:8a:87:f8:ca:19:9b:91:a6:
63:cf:eb:73:f7:53:23:82:21:ac:82:f1:48:43:5c:
47:3b:35:dc:e8:b1:fe:b5:a4:e0:09:5a:31:6b:fd:
47:4a:6a:c1:f4:a8:67:df:c3:88:b3:72:76:af:62:
0e:b3:0c:17:99:0c:bd:57:b4:59:35:50:ae:3e:18:
60:a4:d8:aa:9f:d3:a6:87:3e:c5:dd:d0:c7:46:f1:
b0:28:ca:98:7a:bb:40:d4:18:d0:89:a9:db:c2:c4:
f3:43:44:33:cf:12:4b:f0:9b:a4:a3:49:eb:f3:c1:
97:d5:ae:89:53:99:e3:74:c8:08:2b:33:18:3e:cb:
67:09:89:6a:34:ff:73:66:35:a0:eb:4a:59:cf:b1:
38:c5:64:a4:c7:21:47:75:40:5c:54:ea:1b:ec:4f:
a5:02:92:ff:7c:57:2d:54:7d:c5:28:1e:76:e0:bb:
88:cf:42:0a:14:23:94:16:41:0d:57:fb:d3:4f:40:
dd:d6:8d:c7:d3:55:fd:e6:32:70:ef:30:87:03:04:
27:62:d5:6d:a5:04:9c:22:1b:48:09:37:44:51:4a:
9b:37:78:89:e2:be:d0:ac:f5:35:a0:5e:94:40:79:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64406
Signature Algorithm: sha256WithRSAEncryption
27:84:a7:08:69:e0:61:21:ba:1b:0f:9d:18:da:a8:98:5f:b6:
45:b2:6b:0a:88:50:67:95:e4:63:b2:69:70:8a:be:10:a7:6d:
da:ac:9d:53:04:0e:ad:6e:5e:8b:69:f3:28:d8:2b:43:23:93:
78:bf:45:85:8b:a2:81:a8:21:71:83:1b:f9:80:1e:0e:7b:b6:
bb:92:e8:f3:a4:f2:f9:45:61:75:f0:fa:c4:f0:aa:cb:ed:2b:
cb:a6:bf:00:7e:5b:7e:01:66:46:d9:51:4b:59:f7:d8:a3:f4:
72:76:54:a3:df:b9:8b:2e:83:bb:b0:f3:4f:f0:33:e1:f1:f0:
28:e0:99:4e:74:44:ea:b5:5a:4e:9b:93:66:57:ef:da:14:d8:
4f:2d:37:f0:4b:36:37:d8:ce:20:73:f7:3c:53:e8:04:8b:94:
51:72:ae:2e:5d:39:56:05:c4:77:e5:9b:5b:a7:16:ee:4c:01:
b1:a8:dc:36:f7:4b:fc:0f:c8:4f:a4:b2:86:3f:58:63:fc:f8:
21:ec:d0:a8:c6:2d:c1:06:a1:ac:94:07:76:5a:a2:57:2d:1f:
4d:8a:fe:6e:6b:e1:88:96:9b:4e:ac:89:02:ce:56:3b:ea:08:
94:03:a3:7c:01:57:62:d1:54:76:95:1b:03:91:e2:ae:63:3c:
ca:ea:02:7e
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAZt8gHXkedqNgPrGdfsP6+S8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTFhODNmYmIzZTFiOWI2MzgzMWE2ODFmNmI3MjJhMjY1MDE2YzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o9WHqZ43XrlSDwCQvBvQsbN2Eet
iof4yhmbkaZjz+tz91MjgiGsgvFIQ1xHOzXc6LH+taTgCVoxa/1HSmrB9Khn38OI
s3J2r2IOswwXmQy9V7RZNVCuPhhgpNiqn9Omhz7F3dDHRvGwKMqYertA1BjQianb
wsTzQ0QzzxJL8Juko0nr88GX1a6JU5njdMgIKzMYPstnCYlqNP9zZjWg60pZz7E4
xWSkxyFHdUBcVOob7E+lApL/fFctVH3FKB524LuIz0IKFCOUFkENV/vTT0Dd1o3H
01X95jJw7zCHAwQnYtVtpQScIhtICTdEUUqbN3iJ4r7QrPU1oF6UQHlllQIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFPoag/uz4bm2ODGmgfa3IqJlAWycMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzU5MmQ0
My00MGQyLTRkZWItOTZiNC1kMDEyNmE1ZTM3MzMvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNTkyZDQz
LTQwZDItNGRlYi05NmI0LWQwMTI2YTVlMzczMy8xLzEtaHFELTdQaHViWTRNYWFC
OXJjaW9tVUJiSncubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMA+5YwDQYJKoZIhvcNAQELBQADggEBACeEpwhp4GEh
uhsPnRjaqJhftkWyawqIUGeV5GOyaXCKvhCnbdqsnVMEDq1uXotp8yjYK0Mjk3i/
RYWLooGoIXGDG/mAHg57truS6POk8vlFYXXw+sTwqsvtK8umvwB+W34BZkbZUUtZ
99ij9HJ2VKPfuYsug7uw80/wM+Hx8CjgmU50ROq1Wk6bk2ZX79oU2E8tN/BLNjfY
ziBz9zxT6ASLlFFyri5dOVYFxHflm1unFu5MAbGo3Db3S/wPyE+ksoY/WGP8+CHs
0KjGLcEGoayUB3ZaolctH02K/m5r4YiWm06siQLOVjvqCJQDo3wBV2LRVHaVGwOR
4q5jPMrqAn4=
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:54:44 2026 by rpki-client