Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xTM9HClMi2usxe3iQ96r1TIx2_c.cer
File: xTM9HClMi2usxe3iQ96r1TIx2_c.cer (raw, json)
Hash identifier: TKj9ftWDwAuRnSHhOO8+uPECcdsYGsehjHbI69cN/Zs=
Subject key identifier: C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D716558CED65FEAEEEBB50676C5C7CB6F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Apr 2026 08:39:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199395
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:65:58:ce:d6:5f:ea:ee:eb:b5:06:76:c5:c7:cb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 9 08:39:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5333d1c294c8b6bacc5ede243deabd53231dbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:50:50:93:31:3d:31:3e:ce:d7:a5:05:1d:88:
84:47:a0:8e:14:d7:27:27:40:4d:43:af:96:5d:e9:
4b:b8:f1:51:f3:a4:6f:fa:8c:4d:ff:15:0f:45:83:
5e:27:dd:0b:33:95:3b:95:78:1f:fa:cd:b0:97:36:
c6:41:6f:ca:c2:b1:32:75:0f:2e:b1:33:21:d6:a1:
32:9c:0d:f0:2b:07:66:f1:af:78:4f:ca:c0:c6:f4:
a6:10:28:54:c3:38:7b:96:36:f0:44:76:3e:f2:68:
f9:42:29:2b:ef:76:c2:da:6b:c5:d4:01:a5:a1:af:
3b:16:f9:16:d8:ac:56:78:32:bc:56:9b:20:ac:3e:
a8:99:01:37:15:b8:32:f9:33:bb:5f:79:f0:c0:93:
14:58:75:8a:18:95:41:5a:ad:18:a1:07:63:1d:70:
50:37:c5:59:80:ca:2f:4d:59:98:0e:47:8d:e1:5e:
e3:79:32:38:80:04:05:5a:e7:0b:6d:99:eb:41:0d:
1f:49:39:94:e2:af:61:0e:ad:5f:ee:4f:2e:cb:76:
61:77:58:fa:0e:30:a7:f9:77:69:41:1a:3f:ad:72:
61:58:b6:1f:b6:aa:29:1e:5c:85:77:9a:54:a3:4c:
51:97:31:e2:6b:64:20:d3:ab:3a:93:7f:58:dc:2a:
41:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:33:3D:1C:29:4C:8B:6B:AC:C5:ED:E2:43:DE:AB:D5:32:31:DB:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c76c88-0edb-45db-a023-d248d9944404/1/xTM9HClMi2usxe3iQ96r1TIx2_c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199395
Signature Algorithm: sha256WithRSAEncryption
0b:07:05:f5:2d:83:b6:00:2f:25:6e:57:ef:62:b2:a8:99:e1:
0f:d6:12:66:00:da:b1:7d:6d:7c:5d:83:f5:b7:23:8a:d9:36:
b0:9c:be:a3:bb:7f:f8:16:63:d2:0f:53:e4:39:e0:50:73:f7:
9a:5a:b2:e4:74:ea:d7:57:1a:c6:72:97:9d:b8:44:ba:e3:65:
31:6e:7f:38:49:50:9b:ec:ab:52:16:a2:19:2e:f4:c5:86:2b:
42:24:23:0d:9a:27:4d:8b:c2:06:91:71:9e:cb:f5:ac:c7:47:
b6:53:dd:7f:5a:e9:2b:cc:3e:ad:3b:61:a5:fd:12:6c:c4:96:
64:21:a1:ce:3a:45:ad:07:f0:00:cd:e6:84:1c:15:91:1b:66:
f4:b8:8f:a7:fe:79:9b:3c:1e:e8:5b:91:d5:d2:ce:60:8e:e5:
6f:a5:82:aa:c1:4e:42:41:79:08:4a:8a:e0:46:af:87:c6:cc:
74:44:d5:92:ee:83:71:76:97:24:36:c6:36:70:4e:e8:dc:94:
ef:68:db:76:d2:38:0a:cd:2e:2d:e4:63:57:cd:18:cb:fa:19:
54:df:6f:39:27:23:58:aa:09:8a:dd:af:5a:10:11:ec:6b:e1:
5f:f3:15:bc:da:08:0d:65:bd:3e:69:b1:6a:1c:d6:5a:e1:f8:
6a:0e:7e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:39:21 2026 by rpki-client