Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9ffGz7jHWxG31BX3mS0AZKRV6FA.cer
File: 9ffGz7jHWxG31BX3mS0AZKRV6FA.cer (raw, json)
Hash identifier: LUHkv++C/WYK+yRxLYHPNUHYldjLHtuBvokDIQu31g4=
Subject key identifier: F5:F7:C6:CF:B8:C7:5B:11:B7:D4:15:F7:99:2D:00:64:A4:55:E8:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0B434E82E9E27EC314292274D42DFA7A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 18 Sep 2026 11:09:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212532
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:34:e8:2e:9e:27:ec:31:42:92:27:4d:42:df:a7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 18 11:09:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5f7c6cfb8c75b11b7d415f7992d0064a455e850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:cf:c7:f0:c5:fb:e5:be:c2:ff:04:73:6e:
1a:00:dd:e6:f0:3f:8d:be:50:4a:dc:e0:15:c5:d4:
4f:c1:29:40:de:ab:cf:7d:e9:76:59:c6:fb:f0:ba:
4c:17:7f:56:17:bc:15:27:5d:6f:85:23:f6:9c:d0:
a8:02:c6:08:5e:62:e6:7b:42:e5:8c:8b:8b:3b:50:
c1:ae:30:67:ec:05:cd:b4:16:19:a1:d9:65:f6:ed:
df:34:c4:17:e3:e8:2e:15:23:18:50:b5:4d:01:e1:
d7:d0:84:3f:e4:5a:ff:51:76:b9:36:50:f8:14:aa:
83:8f:db:72:30:a1:c4:ca:af:04:cd:e6:54:06:e2:
7b:5b:86:67:ee:70:32:16:df:7f:09:2a:47:7d:28:
ed:de:a8:47:22:65:6e:4b:07:6f:f2:92:de:02:88:
1d:5f:d1:87:31:b2:b1:48:fd:10:98:b5:68:c1:42:
28:ea:2b:53:b2:3a:32:4c:6d:09:05:7d:8e:4f:fa:
f1:85:25:8a:29:b8:52:e2:10:ed:f6:4c:3a:88:0b:
65:74:44:fd:c3:27:b3:45:be:03:9a:b2:d6:13:a8:
c3:45:b5:7e:e1:c8:d1:6c:aa:f8:e2:6e:b4:b1:0a:
5d:f0:ad:47:bd:b3:b1:34:20:ed:eb:41:d9:25:f0:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F7:C6:CF:B8:C7:5B:11:B7:D4:15:F7:99:2D:00:64:A4:55:E8:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7af1-180e-4792-89ad-af21b6808d08/1/9ffGz7jHWxG31BX3mS0AZKRV6FA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212532
Signature Algorithm: sha256WithRSAEncryption
71:a1:46:38:ed:82:9f:02:29:fc:af:dd:82:32:27:a8:fe:62:
65:44:22:fe:25:8f:f3:d2:33:83:1b:56:65:76:5c:59:6a:1c:
28:9f:0b:97:d6:8e:6b:de:5e:83:b5:03:3e:56:c9:04:b0:f8:
9a:95:ab:3c:a1:f4:25:3b:e3:da:f2:42:9b:c1:19:01:08:0c:
3f:c1:c4:69:89:26:89:5c:b4:b9:2c:ad:d3:9a:d6:1e:ee:5b:
80:2f:ed:08:bc:31:2d:b1:4e:3f:ab:48:64:d1:f1:98:0f:a2:
3d:c7:0c:de:18:03:20:82:79:dc:48:5c:55:86:24:d3:87:ed:
cc:81:3d:a2:90:c3:4f:04:2d:f6:6c:33:52:da:90:59:3f:60:
d6:37:55:49:38:a0:f5:34:70:0d:80:3c:eb:db:71:c7:32:04:
21:39:fc:19:d1:72:59:58:a3:42:96:50:e8:6c:d4:95:aa:91:
4d:49:27:70:3c:fa:0e:b2:19:73:c2:ed:9b:67:b1:3b:ad:6c:
a8:01:1d:73:42:2e:1d:b3:10:1a:5f:02:5a:36:33:89:b7:e6:
23:9a:49:20:43:68:a1:ad:4a:cc:3b:28:62:9f:ed:ae:0e:6c:
25:57:5d:8d:85:b5:61:3e:84:d4:5b:d6:19:2b:6e:72:18:0e:
32:9c:ba:fd
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAaC0NOgunifsMUKSJ01C36emMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTE4MTEwOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWY3YzZjZmI4Yzc1YjExYjdkNDE1Zjc5OTJkMDA2NGE0NTVlODUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHjPx/DF++W+wv8Ec24aAN3m8D+N
vlBK3OAVxdRPwSlA3qvPfel2Wcb78LpMF39WF7wVJ11vhSP2nNCoAsYIXmLme0Ll
jIuLO1DBrjBn7AXNtBYZodll9u3fNMQX4+guFSMYULVNAeHX0IQ/5Fr/UXa5NlD4
FKqDj9tyMKHEyq8EzeZUBuJ7W4Zn7nAyFt9/CSpHfSjt3qhHImVuSwdv8pLeAogd
X9GHMbKxSP0QmLVowUIo6itTsjoyTG0JBX2OT/rxhSWKKbhS4hDt9kw6iAtldET9
wyezRb4DmrLWE6jDRbV+4cjRbKr44m60sQpd8K1HvbOxNCDt60HZJfDiJwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFPX3xs+4x1sRt9QV95ktAGSkVehQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzBlN2Fm
MS0xODBlLTQ3OTItODlhZC1hZjIxYjY4MDhkMDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvMGU3YWYx
LTE4MGUtNDc5Mi04OWFkLWFmMjFiNjgwOGQwOC8xLzlmZkd6N2pIV3hHMzFCWDNt
UzBBWktSVjZGQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM+NDANBgkqhkiG9w0BAQsFAAOCAQEAcaFGOO2CnwIp
/K/dgjInqP5iZUQi/iWP89IzgxtWZXZcWWocKJ8Ll9aOa95eg7UDPlbJBLD4mpWr
PKH0JTvj2vJCm8EZAQgMP8HEaYkmiVy0uSyt05rWHu5bgC/tCLwxLbFOP6tIZNHx
mA+iPccM3hgDIIJ53EhcVYYk04ftzIE9opDDTwQt9mwzUtqQWT9g1jdVSTig9TRw
DYA869txxzIEITn8GdFyWVijQpZQ6GzUlaqRTUkncDz6DrIZc8Ltm2exO61sqAEd
c0IuHbMQGl8CWjYzibfmI5pJIENooa1KzDsoYp/trg5sJVddjYW1YT6E1FvWGStu
chgOMpy6/Q==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:27:28 2026 by rpki-client