Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/azMp2nWywMTz2dnOossQFoZ0UzY.cer
File: azMp2nWywMTz2dnOossQFoZ0UzY.cer (raw, json)
Hash identifier: Vl04dIndFVj/6YOwTAVCBhKu/PmILyykISuyPOUcpaw=
Subject key identifier: 6B:33:29:DA:75:B2:C0:C4:F3:D9:D9:CE:A2:CB:10:16:86:74:53:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E9CF6F6865ADA8B84FEF208B4C3F86BE4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/azMp2nWywMTz2dnOossQFoZ0UzY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 06 Jun 2026 12:44:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199754
IP: 2001:678:121c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:f6:f6:86:5a:da:8b:84:fe:f2:08:b4:c3:f8:6b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 6 12:44:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b3329da75b2c0c4f3d9d9cea2cb101686745336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:20:44:b0:b8:42:10:dc:3d:7a:a6:ff:5d:
3e:e4:6b:71:2b:1a:30:8d:30:51:37:b5:83:8b:fa:
63:35:fa:83:40:ae:fb:1c:1b:73:a0:06:7b:50:33:
3d:a7:f0:12:4d:48:24:fa:86:06:f5:33:40:84:41:
e8:5c:b3:8a:ca:5d:f4:4b:f1:d3:0c:2b:71:19:eb:
91:16:ff:12:b1:b5:0b:24:4b:d8:a5:2f:dd:5a:6a:
dd:e4:b2:4d:93:10:a2:92:80:d2:bb:89:d5:2e:8e:
ff:ec:12:e2:f3:0b:9c:68:14:3d:b3:6e:05:93:a8:
65:1c:5a:9e:88:ab:52:9a:b8:fe:e6:f3:76:02:ff:
63:e0:56:ce:e2:05:ee:02:07:d9:74:19:26:79:fe:
2b:fa:78:8c:16:ac:b3:c4:98:31:73:3c:e0:ae:cd:
d0:99:64:eb:19:05:e0:26:0d:8c:ca:cd:19:4b:b1:
1a:9c:87:4d:f3:98:e5:33:31:bb:fb:a2:24:25:94:
0e:81:2c:8a:b8:bd:ea:0b:30:20:c5:97:33:59:b4:
ba:3b:ef:41:ff:55:2a:ae:cf:55:c2:5a:cf:ff:7f:
de:0d:c0:e6:34:cf:52:b6:7c:9f:28:50:d4:08:18:
e9:01:8d:50:80:d4:55:c5:a3:e4:01:15:e1:a7:56:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:33:29:DA:75:B2:C0:C4:F3:D9:D9:CE:A2:CB:10:16:86:74:53:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/azMp2nWywMTz2dnOossQFoZ0UzY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:121c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199754
Signature Algorithm: sha256WithRSAEncryption
25:70:b6:c7:4f:b3:a1:58:b8:21:75:3d:7b:4f:c8:e2:f2:bc:
98:61:d6:47:ec:27:03:4b:89:2d:93:33:38:bf:9a:47:ea:5a:
c0:d5:d2:c7:02:ef:ba:e3:8b:5c:ee:59:99:ca:fb:d3:a3:4d:
c2:f9:42:8e:07:46:7a:70:6e:30:03:93:30:37:d2:42:56:8d:
68:86:12:27:b3:de:c7:a1:fd:52:96:42:1b:fa:d7:06:77:f5:
2c:d9:45:b2:ef:49:71:ed:b4:4b:7a:d4:54:28:6a:2a:73:00:
65:c0:88:43:73:5b:7c:bb:02:29:b6:d2:51:21:cc:b0:47:1b:
30:f3:82:a1:a3:fb:03:4b:f0:7b:40:86:42:de:71:ef:6e:bb:
91:5f:23:43:f0:b1:ae:b1:8f:74:bc:a2:99:5a:5b:14:37:ba:
76:c1:3a:8b:ea:76:49:9c:ef:c0:79:ab:47:e1:8f:b8:46:cc:
04:1e:7b:73:60:a8:d7:94:83:94:36:41:4e:12:ff:d7:3d:c9:
10:1a:1d:44:70:56:6b:00:37:06:9f:8b:89:8d:1e:74:d1:41:
3e:ef:a2:cd:3e:bc:03:10:01:63:f0:d6:74:5b:d6:61:f2:38:
f1:52:64:24:3f:2f:70:82:7b:06:10:b9:79:4d:90:13:37:ce:
d0:9a:d0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:32:41 2026 by rpki-client