Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/scmBDnrcyQAMDFlgEZoS7sbzvYY.cer
File: scmBDnrcyQAMDFlgEZoS7sbzvYY.cer (raw, json)
Hash identifier: 6M+phKh7w74jqCN0K3P7Kymg9AcQpwp/2O2KznFWVs8=
Subject key identifier: B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D6905A6972511709C67ABCE5697A5B595
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Apr 2026 17:37:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201445
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:05:a6:97:25:11:70:9c:67:ab:ce:56:97:a5:b5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 7 17:37:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1c9810e7adcc9000c0c5960119a12eec6f3bd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:82:5f:b7:9f:91:c6:8a:12:ce:bf:17:f5:
03:02:08:55:79:76:44:d9:68:b2:10:9e:3c:86:60:
ac:42:78:0b:22:f3:d5:ab:f8:f8:7f:6c:a3:93:f8:
d0:20:1a:43:e7:6e:71:49:eb:1a:b8:2e:22:51:d1:
4b:ae:7b:16:19:e4:8e:f8:54:b3:85:f9:a2:66:13:
04:b1:61:5b:84:8b:b6:a3:cb:dd:7b:2f:63:b0:cb:
80:db:90:6e:7c:d7:1b:13:b8:41:1b:f9:e7:5c:6d:
ba:0e:fe:93:13:7d:65:7d:b4:43:0c:c0:f5:2d:29:
93:41:48:36:7c:fe:33:fc:a3:6a:82:44:50:bc:50:
0f:6c:7a:d7:b2:de:c7:65:14:df:8c:2f:9a:bb:4f:
ca:42:00:a3:bc:7a:e7:12:61:a1:e6:67:6e:11:59:
7a:fe:0d:af:8f:1d:77:df:70:68:29:dc:f7:64:23:
53:7c:d4:f7:4c:89:f2:47:ec:4f:fa:5b:f6:5e:68:
09:96:56:a2:60:99:50:77:e2:78:92:64:eb:78:74:
0e:58:af:60:07:b7:73:bd:32:f8:b3:32:24:cd:44:
57:00:2b:3e:0b:52:db:52:46:0c:da:f5:45:14:de:
a0:34:b0:d3:d2:85:4b:52:e2:3f:56:ce:d5:a9:80:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:81:0E:7A:DC:C9:00:0C:0C:59:60:11:9A:12:EE:C6:F3:BD:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e14c1b-4d8a-4309-9a01-5d7d2674be7c/1/scmBDnrcyQAMDFlgEZoS7sbzvYY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201445
Signature Algorithm: sha256WithRSAEncryption
6f:98:b1:4d:ac:b6:7c:24:85:03:b5:c2:60:ba:e1:7e:88:b4:
9d:6a:38:44:2e:ca:4e:e1:b8:d8:b0:52:d7:e6:70:b1:8f:e0:
3e:1d:03:fb:7e:75:7a:7f:84:fc:79:59:5a:15:cb:5b:34:43:
a0:ce:ad:97:67:20:16:ca:a2:37:ca:6a:2b:b7:ac:57:8c:97:
86:08:83:82:2e:02:c2:d6:2f:d7:41:c0:ce:ff:34:4d:52:f0:
bd:18:f2:bf:03:75:f0:46:f4:da:d7:af:2d:7f:81:71:38:d3:
85:13:e9:51:c5:1a:0d:2f:c7:83:28:a5:14:c3:93:96:5b:db:
9d:85:5e:69:36:b7:56:55:0f:95:88:4c:1b:55:8c:70:c4:9d:
ac:29:53:d6:0a:78:62:d1:87:0e:97:36:9e:60:cd:65:f8:ef:
53:3e:8c:41:6b:a2:a3:b7:35:bf:12:1a:fb:2f:00:cd:64:62:
37:42:5c:c8:54:35:4f:63:df:69:47:d7:40:53:0d:da:71:13:
f4:14:f8:eb:71:12:ee:38:73:bd:30:fb:6b:7f:1d:d4:fc:a7:
62:03:e7:fd:04:bb:48:bc:ba:89:15:f6:18:7b:09:6a:f1:9f:
1a:61:70:b7:2a:b1:10:d9:c0:86:35:2d:b7:ca:0d:e7:ea:91:
94:78:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:54 2026 by rpki-client