Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
File: totCki04fFePpXaSSH8qGQaFibo.cer (raw, json)
Hash identifier: 3nRUbwEQsqbgw2fLf3ADXlw03n7JwrhbnxCajQh13F4=
Subject key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ED15D28B963646C4E835420AE82B19
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209582
IP: 188.190.108.0/22
IP: 2a0d:d1c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:15:d2:8b:96:36:46:c4:e8:35:42:0a:e8:2b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b68b42922d387c578fa57692487f2a19068589ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:77:3f:f0:8a:4c:a1:b4:6f:a3:1f:9a:11:
8a:14:04:75:1b:da:1b:ae:06:44:06:34:c2:b1:52:
1d:f8:c1:b0:66:47:e2:18:08:89:8b:51:78:a0:e3:
c4:96:d2:98:91:32:24:fe:8e:6d:77:fe:e9:fc:e6:
03:57:31:6a:08:a8:df:79:a4:86:5f:bb:05:ef:f3:
5e:19:a7:c7:03:44:9c:c0:23:64:62:24:03:e0:95:
22:75:cc:ce:d8:46:66:0d:76:9e:88:ee:64:43:10:
4c:77:ed:cb:8d:0d:98:a2:6e:6a:7f:bf:30:96:b2:
81:fc:e6:79:5d:fe:9f:08:9c:52:09:48:58:86:03:
9c:53:4c:99:7e:69:59:18:94:33:7d:2e:bb:89:b0:
9c:14:69:9d:b4:d4:fd:be:92:db:af:ba:0e:7b:cb:
93:68:15:1c:ed:9e:49:3c:60:17:32:d6:c2:25:8a:
5c:78:53:25:ea:6a:bb:15:d7:dd:c9:9f:61:c7:83:
99:da:f0:c2:db:81:5a:26:7b:13:1d:9e:f3:8e:9a:
f0:49:ba:47:e6:88:3c:36:6c:d8:d9:69:f7:67:c0:
26:f9:4c:9e:d1:39:ed:3d:c7:c8:89:7b:12:f5:f9:
e7:54:2d:50:ba:5a:09:2e:2d:b5:5d:14:86:7e:50:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.108.0/22
IPv6:
2a0d:d1c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209582
Signature Algorithm: sha256WithRSAEncryption
97:22:cd:a8:c6:cf:57:26:16:d3:33:f0:ac:be:97:b1:0b:86:
9c:40:78:45:0b:80:7b:ac:33:ae:b8:bc:07:79:39:86:69:91:
49:60:8f:89:41:c8:2d:ea:8e:e7:f9:89:77:6b:e0:02:11:99:
58:8e:55:1a:a2:f7:45:d7:37:c4:6c:32:44:f5:0b:58:36:32:
7c:3a:6f:bb:8d:6a:0b:ea:3d:71:8e:a8:52:20:9d:de:aa:13:
6f:5f:91:65:a6:2d:4a:88:d8:1c:aa:e4:88:c3:a1:32:55:44:
2b:6d:8e:41:6e:0f:bb:1d:47:ec:7b:c7:a1:8b:90:54:c2:15:
2b:d3:6d:4b:37:b9:2d:06:5a:e9:22:c8:64:76:41:77:da:32:
40:36:22:09:35:2e:3c:f6:f0:38:79:b6:3b:cc:11:47:f8:8b:
ff:55:6e:70:19:c5:76:2c:1a:1f:25:e0:59:d9:2e:e7:3b:b7:
8a:e5:f8:29:a0:0b:5b:84:40:7d:a9:59:c7:14:18:8c:7c:6e:
d4:88:e8:38:a4:8a:19:1e:97:78:8c:d8:23:d4:80:d1:51:e3:
0a:1e:92:92:78:b2:54:56:f6:fc:ab:d2:a6:42:c3:f9:5a:a3:
b5:95:9f:20:ea:f2:fa:ff:25:8e:9e:ea:76:4e:23:57:3a:56:
02:27:e7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:20:25 2026 by rpki-client