Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sTI2xNBokx4LRMmLKQqPqlVKA7k.cer
File: sTI2xNBokx4LRMmLKQqPqlVKA7k.cer (raw, json)
Hash identifier: ILko0ffQ/TVDF13vGDHMCExRhlDeJnRUqo9lEciiuv4=
Subject key identifier: B1:32:36:C4:D0:68:93:1E:0B:44:C9:8B:29:0A:8F:AA:55:4A:03:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79114E160FFBE4449D15413D82EE5F22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/5729fa-59dd-4346-8c00-2dd11984b35f/1/sTI2xNBokx4LRMmLKQqPqlVKA7k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/5729fa-59dd-4346-8c00-2dd11984b35f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:18:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214458
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:4e:16:0f:fb:e4:44:9d:15:41:3d:82:ee:5f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b13236c4d068931e0b44c98b290a8faa554a03b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:ba:20:20:a4:ec:59:e2:40:cb:6c:33:47:c4:
84:8f:1e:c7:d6:1b:99:d4:34:6d:f2:b9:c6:c0:ee:
b4:db:6c:64:4c:70:ec:7e:1c:54:59:0c:71:8b:0f:
40:d7:d2:82:40:3c:c7:e5:89:2a:1a:c3:1a:24:be:
76:9b:ab:bd:8c:05:95:44:c5:bd:7a:61:f8:2d:01:
14:d0:a2:bb:73:72:6e:cf:8c:3c:01:89:a3:e5:c6:
53:51:0e:19:53:c1:2e:88:c6:ba:b0:a7:47:b7:0a:
de:a5:d4:da:03:2c:fc:0e:99:81:34:b9:93:1f:89:
67:d2:21:b2:00:39:08:2c:cf:1b:df:8e:34:e8:a7:
67:50:46:f7:54:eb:ff:92:37:35:c3:f3:46:dd:82:
58:0b:e4:da:51:51:a9:80:4e:bd:35:36:bf:2b:f1:
c1:f4:35:20:5d:ea:9b:ed:84:c0:2f:da:c5:91:e1:
cc:ed:15:3d:7c:3e:85:41:d9:02:4a:fb:57:84:77:
42:5d:95:fc:f1:77:bb:37:a2:5f:29:6c:84:72:90:
22:d4:d0:84:87:b3:d0:29:33:8c:bc:ef:df:45:23:
76:7e:e9:6e:03:66:d0:66:28:4b:af:c2:9f:56:89:
88:4c:3e:76:40:05:21:e5:30:ef:d6:a9:1d:da:ff:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:36:C4:D0:68:93:1E:0B:44:C9:8B:29:0A:8F:AA:55:4A:03:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5729fa-59dd-4346-8c00-2dd11984b35f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5729fa-59dd-4346-8c00-2dd11984b35f/1/sTI2xNBokx4LRMmLKQqPqlVKA7k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214458
Signature Algorithm: sha256WithRSAEncryption
35:99:6d:fd:bf:9d:0f:92:13:63:ac:e8:e8:24:6b:43:fb:7b:
a4:68:08:6d:22:0a:66:08:ac:7c:4e:31:04:dd:32:1d:e4:db:
3d:de:80:d4:5a:3d:f4:c9:9f:87:b2:1c:98:ed:e2:8d:a7:af:
9a:55:a0:ec:ca:d0:04:a9:72:38:61:de:5c:1f:9d:b8:ac:b8:
58:5b:86:2f:1d:63:15:96:91:0b:8f:4d:65:e7:1c:b5:6b:47:
0a:7f:d3:64:2f:53:ff:81:00:af:da:e0:26:20:af:bc:ef:5e:
7d:8d:b5:7f:f2:51:4a:b4:ed:34:4e:84:1d:81:57:3e:86:40:
f7:50:18:71:76:77:88:9e:5e:77:e8:7d:26:1c:aa:9a:cc:0d:
44:b3:10:a0:96:f5:51:74:1f:b3:f0:c0:08:12:b1:49:07:09:
fe:2a:fa:14:d4:96:e8:9e:a2:91:8a:67:ca:e9:6f:6e:83:39:
e4:82:a2:ce:64:40:8e:f7:f9:68:52:25:c0:15:9f:7d:2c:45:
88:22:6c:ea:3f:ce:9e:82:cd:bb:39:0e:a4:d7:df:ff:d0:02:
7e:bd:e4:34:9c:f8:ce:dd:8e:8e:53:39:63:f0:87:e1:0b:59:
3f:cc:51:f4:ef:bb:39:5d:73:76:47:c0:d2:1b:c8:c3:20:c5:
79:a2:2e:d5
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZt5EU4WD/vkRJ0VQT2C7l8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTMyMzZjNGQwNjg5MzFlMGI0NGM5OGIyOTBhOGZhYTU1NGEwM2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+rogIKTsWeJAy2wzR8SEjx7H1huZ
1DRt8rnGwO6022xkTHDsfhxUWQxxiw9A19KCQDzH5YkqGsMaJL52m6u9jAWVRMW9
emH4LQEU0KK7c3Juz4w8AYmj5cZTUQ4ZU8EuiMa6sKdHtwrepdTaAyz8DpmBNLmT
H4ln0iGyADkILM8b34406KdnUEb3VOv/kjc1w/NG3YJYC+TaUVGpgE69NTa/K/HB
9DUgXeqb7YTAL9rFkeHM7RU9fD6FQdkCSvtXhHdCXZX88Xe7N6JfKWyEcpAi1NCE
h7PQKTOMvO/fRSN2fuluA2bQZihLr8KfVomITD52QAUh5TDv1qkd2v8uGwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFLEyNsTQaJMeC0TJiykKj6pVSgO5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzU3Mjlm
YS01OWRkLTQzNDYtOGMwMC0yZGQxMTk4NGIzNWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvNTcyOWZh
LTU5ZGQtNDM0Ni04YzAwLTJkZDExOTg0YjM1Zi8xL3NUSTJ4TkJva3g0TFJNbUxL
UXFQcWxWS0E3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNFujANBgkqhkiG9w0BAQsFAAOCAQEANZlt/b+dD5IT
Y6zo6CRrQ/t7pGgIbSIKZgisfE4xBN0yHeTbPd6A1Fo99Mmfh7IcmO3ijaevmlWg
7MrQBKlyOGHeXB+duKy4WFuGLx1jFZaRC49NZecctWtHCn/TZC9T/4EAr9rgJiCv
vO9efY21f/JRSrTtNE6EHYFXPoZA91AYcXZ3iJ5ed+h9JhyqmswNRLMQoJb1UXQf
s/DACBKxSQcJ/ir6FNSW6J6ikYpnyulvboM55IKizmRAjvf5aFIlwBWffSxFiCJs
6j/OnoLNuzkOpNff/9ACfr3kNJz4zt2OjlM5Y/CH4QtZP8xR9O+7OV1zdkfA0hvI
wyDFeaIu1Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:00:35 2026 by rpki-client