Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/TTYgWceTa1QgqzM4uWIzYdrtsM0.cer
File: TTYgWceTa1QgqzM4uWIzYdrtsM0.cer (raw, json)
Hash identifier: +UricfKpXS3keq/TY8mGfHe722d3aXxmgHD+VtUrfKk=
Subject key identifier: 4D:36:20:59:C7:93:6B:54:20:AB:33:38:B9:62:33:61:DA:ED:B0:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A09FFF8EB60834C415AEC9907D9159EA8C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 14 Sep 2026 12:58:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212369
IP: 2001:678:e3c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:ff:8e:b6:08:34:c4:15:ae:c9:90:7d:91:59:ea:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 14 12:58:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d362059c7936b5420ab3338b9623361daedb0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:d5:cd:a6:7e:36:eb:b2:93:57:3f:de:1f:8f:
df:b5:e7:1c:00:91:54:af:3b:50:47:e9:0a:51:00:
04:c0:7b:72:2e:71:76:66:97:1d:83:79:dc:e4:6c:
e1:20:94:85:82:89:3a:62:45:cf:19:83:02:ee:33:
18:0a:90:78:8f:b9:1f:a0:db:79:7a:b1:ce:b1:c7:
52:ff:75:68:ad:5f:94:b9:7f:6a:31:f4:b3:ec:db:
3b:58:5c:13:cb:f0:d9:9d:a8:f2:bd:0f:fc:45:75:
88:9c:a1:5c:8c:61:0a:6a:76:20:26:d4:18:9b:3c:
04:d7:72:99:d0:63:1a:04:05:e4:e2:e8:2e:c4:c5:
eb:8d:5f:cd:5a:ff:27:b6:7a:89:b1:0b:80:1c:04:
fa:d2:cb:fd:d6:ec:a3:1f:4a:44:d5:59:12:b1:76:
d9:b9:67:ef:b4:f2:e0:bb:ea:47:d6:76:52:79:f9:
12:e2:18:57:3f:c4:f1:90:29:74:4e:bc:8d:5f:e2:
60:b7:ed:39:7c:e8:59:52:4f:22:84:91:b8:38:5f:
9c:c3:a0:b2:06:1a:45:5b:78:03:5e:1f:9b:d2:13:
90:22:96:5c:a1:f4:9d:45:2e:ac:6c:88:ed:dd:45:
ec:6d:0f:0e:f5:f5:bf:80:84:1e:e6:44:46:5e:d1:
56:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:36:20:59:C7:93:6B:54:20:AB:33:38:B9:62:33:61:DA:ED:B0:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e3c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212369
Signature Algorithm: sha256WithRSAEncryption
2b:54:18:75:24:5d:7c:dc:83:44:14:fc:67:88:c3:48:18:28:
cc:01:09:2f:eb:45:4a:d6:27:8e:ab:f9:a4:66:2a:94:70:65:
65:0b:55:25:a7:94:09:fc:5c:61:63:6c:fd:5b:ea:04:c0:e9:
9e:5e:da:d3:1a:9b:9c:17:93:20:31:a5:7f:77:d2:11:78:74:
a3:e9:d7:1a:96:54:4f:c3:f6:a3:9c:8f:d6:2e:ae:b3:45:8d:
cd:2e:00:e8:56:39:d2:be:d1:7f:6b:b7:82:87:f4:62:4d:01:
f6:4a:96:54:80:3d:43:72:28:1d:69:7b:b8:a3:9c:b6:3e:15:
5a:e7:27:51:ae:32:40:44:03:08:e0:4e:f9:0e:fd:11:9f:7c:
94:46:3c:db:e9:4b:24:12:92:96:5d:ae:a1:cc:41:d1:8d:37:
55:00:84:c0:e8:82:b3:59:08:f5:0d:bc:e8:f5:d0:22:71:0d:
91:1a:be:39:8c:16:22:35:12:d3:e7:90:21:9c:ec:5c:94:6f:
60:c1:fe:84:50:c2:d2:58:4e:62:0f:2c:3c:1c:3c:a9:87:33:
fb:25:21:89:6b:c0:69:d8:b6:69:16:36:9d:86:30:a9:6a:ba:
4c:2e:be:c8:28:eb:a9:e2:32:30:4a:c6:56:2e:72:70:96:64:
d0:e6:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:34:26 2026 by rpki-client