Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Penfxp06R0fLh9WB4evK9g8uyHg.cer
File: Penfxp06R0fLh9WB4evK9g8uyHg.cer (raw, json)
Hash identifier: Hproo29pN1IMtGWxuTt2n2KkIMAw9s312ugVojMLX5s=
Subject key identifier: 3D:E9:DF:C6:9D:3A:47:47:CB:87:D5:81:E1:EB:CA:F6:0F:2E:C8:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A16D2E46FA5087B9573B1B1B8B8A5CEF23
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/26cb44-eff9-4b32-8822-5070c2fe3194/1/Penfxp06R0fLh9WB4evK9g8uyHg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/26cb44-eff9-4b32-8822-5070c2fe3194/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 24 Oct 2026 09:11:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218294
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:2e:46:fa:50:87:b9:57:3b:1b:1b:8b:8a:5c:ef:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 24 09:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3de9dfc69d3a4747cb87d581e1ebcaf60f2ec878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:15:22:99:3f:8a:a5:9c:fd:61:b8:2c:81:
b8:54:aa:6d:78:61:65:bd:b6:ab:bb:9a:50:f7:4c:
bd:c3:8d:b5:71:b1:3f:17:7d:32:fc:2c:5f:18:3e:
70:54:7b:a0:19:f6:72:df:36:ce:bd:94:5e:10:ba:
36:93:88:cd:c5:6f:22:04:df:21:ed:b4:06:3c:85:
e5:5a:75:63:69:36:78:65:bd:89:f5:6e:90:b9:4c:
16:38:ae:ba:52:5b:c1:ca:ad:e9:cd:9b:b4:0d:29:
82:d6:47:65:c6:66:1c:7d:02:6c:4a:3f:4b:3b:bd:
99:e5:e6:0c:29:a1:11:48:f1:22:d4:ef:c4:60:01:
35:8f:7b:4e:da:a4:a2:f1:d8:68:e0:00:42:65:cc:
d2:3d:bb:c0:37:b7:2e:9b:3d:0c:83:0b:b3:d5:2c:
b1:89:2c:dc:96:1f:cb:68:fa:b7:3d:bc:f3:bd:79:
e4:fc:ea:34:3e:be:3e:b1:f8:e7:7c:21:8b:9e:ce:
c3:12:10:34:0b:88:78:31:bc:72:df:7a:1e:27:c0:
18:3b:83:b7:be:de:94:f0:1b:01:cd:d0:9f:92:d2:
2b:7d:b6:88:99:11:c3:43:d5:3d:4d:90:b1:b8:3f:
d9:1b:e7:96:ed:ec:dc:d4:49:73:73:59:6a:7e:0f:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E9:DF:C6:9D:3A:47:47:CB:87:D5:81:E1:EB:CA:F6:0F:2E:C8:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/26cb44-eff9-4b32-8822-5070c2fe3194/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/26cb44-eff9-4b32-8822-5070c2fe3194/1/Penfxp06R0fLh9WB4evK9g8uyHg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218294
Signature Algorithm: sha256WithRSAEncryption
a4:a2:31:05:59:92:fe:52:2b:4d:1f:e8:c6:d1:fe:25:6a:d1:
3d:09:76:74:ef:61:93:00:ee:9d:2c:58:de:64:e9:a1:b2:74:
52:e4:1c:cb:1f:0c:36:ba:f2:fb:03:20:a8:df:a1:86:24:ce:
09:48:1f:b5:33:c9:fe:3a:3a:a2:05:11:66:45:9f:cd:0e:01:
29:dd:63:85:6f:01:33:27:8e:11:42:e5:32:b4:6b:d4:2b:03:
c6:34:51:c0:8d:94:9f:1a:36:5b:92:31:84:74:54:2b:5b:0b:
46:87:61:60:d3:6c:50:83:96:37:7b:37:19:f0:5d:f5:13:bb:
5d:da:b7:70:eb:10:06:08:d1:55:e0:e8:0c:c6:b5:81:85:8b:
fc:c6:c5:63:39:ad:b7:4c:e0:01:42:d2:fc:e9:6e:01:cb:75:
9a:a2:50:e9:b5:22:de:fe:d0:17:db:c8:5b:38:56:ab:3b:2d:
b3:4d:01:29:33:9d:ae:ce:35:b7:f2:ae:ec:97:0c:84:0d:b2:
a6:b6:4c:7e:00:7d:ed:3a:5a:f7:21:18:db:ec:dd:d4:3c:b3:
81:c7:35:a4:c3:d0:91:c1:f6:f6:f4:e0:56:cc:f6:11:f1:67:
c8:6e:57:68:6f:54:ae:34:8a:45:ec:81:1b:18:1a:6a:04:3c:
b0:38:0a:eb
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAaFtLkb6UIe5VzsbG4uKXO8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDI0MDkxMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGU5ZGZjNjlkM2E0NzQ3Y2I4N2Q1ODFlMWViY2FmNjBmMmVjODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEkVIpk/iqWc/WG4LIG4VKpteGFl
vbaru5pQ90y9w421cbE/F30y/CxfGD5wVHugGfZy3zbOvZReELo2k4jNxW8iBN8h
7bQGPIXlWnVjaTZ4Zb2J9W6QuUwWOK66UlvByq3pzZu0DSmC1kdlxmYcfQJsSj9L
O72Z5eYMKaERSPEi1O/EYAE1j3tO2qSi8dho4ABCZczSPbvAN7cumz0Mgwuz1Syx
iSzclh/LaPq3PbzzvXnk/Oo0Pr4+sfjnfCGLns7DEhA0C4h4Mbxy33oeJ8AYO4O3
vt6U8BsBzdCfktIrfbaImRHDQ9U9TZCxuD/ZG+eW7ezc1Elzc1lqfg8Q5wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFD3p38adOkdHy4fVgeHryvYPLsh4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzI2Y2I0
NC1lZmY5LTRiMzItODgyMi01MDcwYzJmZTMxOTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvMjZjYjQ0
LWVmZjktNGIzMi04ODIyLTUwNzBjMmZlMzE5NC8xL1BlbmZ4cDA2UjBmTGg5V0I0
ZXZLOWc4dXlIZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNUtjANBgkqhkiG9w0BAQsFAAOCAQEApKIxBVmS/lIr
TR/oxtH+JWrRPQl2dO9hkwDunSxY3mTpobJ0UuQcyx8MNrry+wMgqN+hhiTOCUgf
tTPJ/jo6ogURZkWfzQ4BKd1jhW8BMyeOEULlMrRr1CsDxjRRwI2Unxo2W5IxhHRU
K1sLRodhYNNsUIOWN3s3GfBd9RO7Xdq3cOsQBgjRVeDoDMa1gYWL/MbFYzmtt0zg
AULS/OluAct1mqJQ6bUi3v7QF9vIWzhWqzsts00BKTOdrs41t/Ku7JcMhA2yprZM
fgB97Tpa9yEY2+zd1Dyzgcc1pMPQkcH29vTgVsz2EfFnyG5XaG9UrjSKReyBGxga
agQ8sDgK6w==
-----END CERTIFICATE-----
Generated at Sat Nov 7 13:28:05 2026 by rpki-client