Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
File: ahjtHt_p75yYdyAyDp28ketQWa0.cer (raw, json)
Hash identifier: 6huah2+2dbf2RiqTtK0Yp4Go8g5plAU2yI8ay6gXdJ4=
Subject key identifier: 6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C8707CD85F9956D3AEB31043FFA7F70FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 22 Feb 2026 20:26:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200827
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:87:07:cd:85:f9:95:6d:3a:eb:31:04:3f:fa:7f:70:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 22 20:26:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a18ed1edfe9ef9c987720320e9dbc91eb5059ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:a6:55:74:6b:20:a5:80:4f:f7:55:c3:61:
d8:af:c6:22:2c:a0:20:0d:62:a7:38:6b:c3:0e:1b:
05:3f:7e:40:00:e0:8d:bd:32:f0:bc:4d:53:36:c5:
60:bb:df:4f:79:05:68:7a:cd:03:0d:a8:dc:45:98:
0c:e2:bc:b0:ec:6f:d2:45:46:23:99:f5:28:54:89:
e9:c2:ed:a1:04:bf:97:94:5a:92:bf:6c:e1:45:99:
ba:f6:be:5b:69:3e:ae:7a:e3:f9:45:bf:d5:9b:75:
74:d6:b1:33:41:43:55:a8:7c:1b:64:22:f8:ba:94:
da:cc:be:d9:d8:7d:a1:f9:87:dd:0a:f2:1e:35:7c:
ff:14:6d:6a:e4:0f:d4:30:4e:f1:73:35:de:ae:71:
ff:eb:84:38:33:89:fe:4e:11:8f:d7:b8:c6:c8:ba:
31:e4:4c:9f:19:f7:15:80:fc:e5:e6:9d:ee:15:ac:
00:00:18:f3:8e:79:a3:3b:19:6b:4e:64:af:42:61:
74:c2:f2:f2:28:58:23:62:35:b6:8d:40:ab:67:c1:
6f:29:24:23:41:2a:8c:94:af:21:72:72:4d:51:4f:
f0:7d:4b:cb:1d:73:59:1a:c7:ea:fd:03:c0:f1:32:
81:0c:4b:bf:b3:6f:be:90:c2:70:4e:1d:87:3a:fa:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200827
Signature Algorithm: sha256WithRSAEncryption
5a:f8:37:aa:fb:23:e2:0a:21:db:86:3d:fb:73:ca:c4:18:d7:
ba:e6:4e:86:71:7b:07:da:79:36:96:d4:27:fa:7e:2f:1d:57:
66:43:f8:4d:ad:ab:02:33:2d:94:80:89:0a:a6:78:8b:cf:fe:
e7:dc:b1:97:3c:dc:33:e0:9a:5d:dc:f0:f2:01:62:b1:aa:d8:
d8:6c:b4:e7:a4:55:0e:5c:de:5f:ad:98:26:bb:9b:7c:42:ff:
e9:17:72:1f:d1:ab:2d:11:e9:23:b3:f0:d0:6e:cd:b0:b3:98:
cb:26:8a:43:bc:3a:f1:87:87:0b:9d:13:df:a9:f1:25:b7:5f:
5f:b8:4b:49:f0:65:df:22:27:33:86:cf:8e:b4:20:2a:c1:ba:
21:97:e2:73:15:94:fa:ce:a5:de:7f:23:5e:a4:e0:74:76:27:
2c:d9:55:ad:13:db:2f:aa:32:56:91:10:aa:a5:78:b5:94:a6:
85:dc:5e:f5:e7:d5:d4:bc:32:83:49:10:b2:e0:82:a0:38:23:
d9:cb:d3:68:0f:56:74:14:80:bc:93:9f:d2:44:27:63:16:75:
7e:0b:c9:49:a6:b5:63:51:1e:7a:e9:ee:02:d0:37:7a:2b:40:
20:19:bb:f8:27:1d:29:32:c0:93:c5:03:b7:fe:63:1d:aa:7d:
b4:ae:df:12
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZyHB82F+ZVtOusxBD/6f3D7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjIyMjAyNjAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTE4ZWQxZWRmZTllZjljOTg3NzIwMzIwZTlkYmM5MWViNTA1OWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bKmVXRrIKWAT/dVw2HYr8YiLKAg
DWKnOGvDDhsFP35AAOCNvTLwvE1TNsVgu99PeQVoes0DDajcRZgM4ryw7G/SRUYj
mfUoVInpwu2hBL+XlFqSv2zhRZm69r5baT6ueuP5Rb/Vm3V01rEzQUNVqHwbZCL4
upTazL7Z2H2h+YfdCvIeNXz/FG1q5A/UME7xczXernH/64Q4M4n+ThGP17jGyLox
5EyfGfcVgPzl5p3uFawAABjzjnmjOxlrTmSvQmF0wvLyKFgjYjW2jUCrZ8FvKSQj
QSqMlK8hcnJNUU/wfUvLHXNZGsfq/QPA8TKBDEu/s2++kMJwTh2HOvoqLwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFGoY7R7f6e+cmHcgMg6dvJHrUFmtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2JkMmJh
ZC1hNDI3LTRlYmYtYWU1Mi0yNjIyNDVlNWQ0YWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvYmQyYmFk
LWE0MjctNGViZi1hZTUyLTI2MjI0NWU1ZDRhZi8xL2FoanRIdF9wNzV5WWR5QXlE
cDI4a2V0UVdhMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMQezANBgkqhkiG9w0BAQsFAAOCAQEAWvg3qvsj4goh
24Y9+3PKxBjXuuZOhnF7B9p5NpbUJ/p+Lx1XZkP4Ta2rAjMtlICJCqZ4i8/+59yx
lzzcM+CaXdzw8gFisarY2Gy056RVDlzeX62YJrubfEL/6RdyH9GrLRHpI7Pw0G7N
sLOYyyaKQ7w68YeHC50T36nxJbdfX7hLSfBl3yInM4bPjrQgKsG6IZficxWU+s6l
3n8jXqTgdHYnLNlVrRPbL6oyVpEQqqV4tZSmhdxe9efV1Lwyg0kQsuCCoDgj2cvT
aA9WdBSAvJOf0kQnYxZ1fgvJSaa1Y1EeeunuAtA3eitAIBm7+CcdKTLAk8UDt/5j
Hap9tK7fEg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:12 2026 by rpki-client