Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
File: _28m18gsaQh33DwsuSJrqDPXH5g.cer (raw, json)
Hash identifier: wTy0X35JtEWZNRkNxIuzMu4DQ71nP7xCgDwAU7l5yPs=
Subject key identifier: FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D9C4E2904BA7717B57A01909729F929DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 Apr 2026 16:37:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 61278
IP: 2a13:e2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:4e:29:04:ba:77:17:b5:7a:01:90:97:29:f9:29:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 17 16:37:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:27:c9:7d:36:93:ee:af:0c:9c:11:03:45:
39:20:a2:66:b8:f4:77:e6:29:20:85:3d:12:95:f6:
7e:81:b3:21:71:ec:b7:5f:3c:17:8d:63:58:a2:f5:
3b:eb:21:f5:b3:c4:20:20:0a:30:9d:c1:33:c2:b9:
0f:fa:7a:c7:3b:91:35:57:a6:34:77:ee:04:66:26:
47:cc:5f:40:f4:64:92:1e:2f:79:de:df:42:a9:c0:
75:0d:4a:e8:0b:a3:f0:8f:8d:f3:80:3c:10:9b:57:
51:86:25:69:72:24:24:a9:e9:57:93:a1:18:cb:23:
2a:12:fa:72:d8:89:9d:72:2c:87:46:2f:36:d1:13:
27:ed:84:ad:62:27:c2:17:4e:41:c5:03:fb:cc:86:
4b:57:0a:79:e1:ed:fc:8d:ed:a4:e8:07:81:8e:b9:
9e:79:d3:c4:01:9c:ee:15:1a:a4:02:16:6a:3f:64:
43:bd:e5:14:60:07:42:52:1b:2d:89:01:a4:4b:bf:
17:eb:33:e8:1b:a0:bc:01:96:24:df:55:68:67:b2:
36:4a:39:72:04:34:1a:1e:fa:d9:54:96:43:7d:d6:
a2:bd:09:2e:57:7f:1c:48:e6:24:df:1c:69:a3:16:
16:b9:a2:19:5d:0d:a3:d7:6c:c7:7b:29:c1:e7:90:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61278
Signature Algorithm: sha256WithRSAEncryption
97:0e:be:8f:41:cb:ac:98:27:38:cf:6d:0f:24:c2:32:bb:29:
57:25:04:98:5c:75:77:63:5a:86:bb:97:fb:32:45:57:7f:12:
2d:2b:18:7f:49:35:e7:33:3f:a0:8a:3d:40:db:a2:6e:14:5e:
06:e5:5a:3e:fd:c7:6b:bb:b1:4d:7a:9b:08:21:1f:14:71:05:
2e:4d:da:8c:e5:12:8c:ee:9e:21:95:46:0b:6e:a1:8b:2e:c7:
8c:56:87:34:63:77:9f:0a:73:4c:3a:fa:18:df:4a:e7:fa:87:
e0:1a:e8:2c:11:af:c8:57:54:98:e7:74:5f:09:20:99:82:93:
79:84:dc:5b:38:c6:60:f2:26:6c:a9:80:35:ee:2b:18:8e:0c:
d0:e7:5a:0e:28:59:d9:ab:08:50:fb:d3:1c:5c:69:f9:a0:bf:
79:cd:97:d3:34:29:f4:cd:ad:0c:f0:52:57:a9:08:68:eb:18:
f7:e6:0e:21:a3:67:19:81:d8:26:62:be:4f:d6:29:e2:18:fb:
93:55:77:67:63:4f:98:6b:58:45:44:a2:ea:15:4a:48:0e:ea:
6c:2b:f0:73:72:d4:21:00:6e:f2:7c:1b:a9:2d:50:58:b0:05:
b8:04:25:48:c1:4f:9e:d0:a2:a7:a5:52:30:c4:5b:24:d0:50:
67:b1:f2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:48:02 2026 by rpki-client