Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Jc4XpFtzRdc84uWX8Mq_zA85CU.cer
File: 4Jc4XpFtzRdc84uWX8Mq_zA85CU.cer (raw, json)
Hash identifier: ooAEYD0w/e3F3Fl4O41GnbBgtRZg1jdFQkgKgZPvG4M=
Subject key identifier: E0:97:38:5E:91:6D:CD:17:5C:F3:8B:96:5F:C3:2A:FF:30:3C:E4:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EB19AA2DEED69D6EF023C9988D12229F4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Jun 2026 12:56:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219488
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:9a:a2:de:ed:69:d6:ef:02:3c:99:88:d1:22:29:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 12:56:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e097385e916dcd175cf38b965fc32aff303ce425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:42:86:25:26:92:d9:f0:99:08:df:f4:a8:60:
c3:5b:d4:94:b7:41:a8:c0:ca:da:bb:69:48:15:74:
8e:0f:e3:d2:02:b1:82:cc:de:48:cb:df:49:70:7e:
6e:29:3f:32:3b:11:47:d1:5a:d5:a6:72:4d:ac:6e:
8d:f7:9c:9c:75:71:dc:08:bc:1e:82:41:41:63:c7:
27:66:8b:ff:80:d2:e6:78:f8:d5:aa:fe:e0:79:fe:
69:f3:98:23:5a:ae:cb:00:e2:5f:0b:8d:7d:a1:d4:
92:c1:af:61:5a:40:7a:aa:6d:a3:e4:ab:c4:78:73:
55:74:9a:c5:d9:d2:a9:c3:45:7e:c1:db:b4:27:c1:
4c:1e:c6:08:ca:dd:54:7e:45:0a:fc:e4:91:d0:f4:
61:16:dc:f5:4b:af:13:6e:c4:2b:72:1d:15:21:c7:
7e:b1:bc:a0:40:2d:0b:87:2f:8e:4c:17:65:f9:75:
c2:43:0d:ab:d6:a1:7e:46:8a:5d:6f:84:1b:39:03:
77:66:f7:70:c6:24:bf:bc:33:fd:69:01:3e:18:2f:
2a:fd:c6:b0:f7:13:6c:62:13:33:13:25:9e:d4:5d:
ec:f7:b0:e4:f4:2d:84:57:a5:49:40:f6:20:eb:cc:
b6:7e:96:c7:13:27:2f:23:e0:dc:90:11:3c:3b:8e:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:97:38:5E:91:6D:CD:17:5C:F3:8B:96:5F:C3:2A:FF:30:3C:E4:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219488
Signature Algorithm: sha256WithRSAEncryption
37:5b:60:aa:a9:52:0a:a6:4a:f6:80:bd:dd:f1:b5:d3:03:d4:
a7:a5:d6:b8:a1:e0:c7:7d:25:97:fd:0b:28:6d:42:53:f5:0d:
ac:99:cf:83:34:07:40:b8:78:5d:aa:03:1d:c0:07:a3:97:e3:
dd:ee:5f:b8:71:d0:12:fc:f0:55:e6:ac:80:68:5b:c6:a3:3d:
92:6e:8c:31:28:84:5f:ff:5f:58:6c:ca:c9:c6:4b:4e:c1:1d:
06:46:08:bd:b6:a4:d9:ef:ac:2d:53:1a:4d:6a:01:05:32:23:
c5:b0:06:c3:a8:5d:7d:ea:b9:71:be:3f:f1:41:6a:bb:aa:1b:
17:19:51:26:2e:db:16:a4:ec:31:9e:be:86:51:62:79:ee:2a:
3c:1c:5a:2f:51:30:c0:a9:64:86:71:69:94:27:8c:b1:58:71:
3c:a9:ba:63:67:3c:e0:e3:60:1f:33:27:b6:3b:c6:c7:4f:b3:
68:2f:d9:68:6a:77:f5:4f:2a:19:c0:a2:14:f2:0e:78:41:c1:
50:aa:4f:6f:87:5a:39:93:1a:32:c5:a1:67:63:0f:30:57:95:
65:38:eb:70:5d:59:e7:89:67:54:f1:06:d3:af:56:eb:40:39:
df:d4:18:54:90:7e:a4:d6:e6:53:0a:6c:fd:ee:82:e1:51:c4:
6c:cb:79:e8
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZ6xmqLe7WnW7wI8mYjRIin0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjEwMTI1NjAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDk3Mzg1ZTkxNmRjZDE3NWNmMzhiOTY1ZmMzMmFmZjMwM2NlNDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EKGJSaS2fCZCN/0qGDDW9SUt0Go
wMrau2lIFXSOD+PSArGCzN5Iy99JcH5uKT8yOxFH0VrVpnJNrG6N95ycdXHcCLwe
gkFBY8cnZov/gNLmePjVqv7gef5p85gjWq7LAOJfC419odSSwa9hWkB6qm2j5KvE
eHNVdJrF2dKpw0V+wdu0J8FMHsYIyt1UfkUK/OSR0PRhFtz1S68TbsQrch0VIcd+
sbygQC0Lhy+OTBdl+XXCQw2r1qF+Ropdb4QbOQN3ZvdwxiS/vDP9aQE+GC8q/caw
9xNsYhMzEyWe1F3s97Dk9C2EV6VJQPYg68y2fpbHEycvI+DckBE8O47hiQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFOCXOF6Rbc0XXPOLll/DKv8wPOQlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2Y3NTFi
Ni01ZDg2LTQ3ZWUtOGZkMi00YzQ5NzA0NTY1YzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvZjc1MWI2
LTVkODYtNDdlZS04ZmQyLTRjNDk3MDQ1NjVjOC8xLzRKYzRYcEZ0elJkYzg0dVdY
OE1xX3pBODVDVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNZYDANBgkqhkiG9w0BAQsFAAOCAQEAN1tgqqlSCqZK
9oC93fG10wPUp6XWuKHgx30ll/0LKG1CU/UNrJnPgzQHQLh4XaoDHcAHo5fj3e5f
uHHQEvzwVeasgGhbxqM9km6MMSiEX/9fWGzKycZLTsEdBkYIvbak2e+sLVMaTWoB
BTIjxbAGw6hdfeq5cb4/8UFqu6obFxlRJi7bFqTsMZ6+hlFiee4qPBxaL1EwwKlk
hnFplCeMsVhxPKm6Y2c84ONgHzMntjvGx0+zaC/ZaGp39U8qGcCiFPIOeEHBUKpP
b4daOZMaMsWhZ2MPMFeVZTjrcF1Z54lnVPEG069W60A539QYVJB+pNbmUwps/e6C
4VHEbMt56A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:41 2026 by rpki-client