Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
File: 5KnudPLZhMiKs7ma5x0LfHuvgVA.cer (raw, json)
Hash identifier: JAlAX/xa/qvOOd3XAwB5iRTWoqrIW6DiMB45te8zXT4=
Subject key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A15EC1189779E93C64BB0A2FD151221CEA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 21 Oct 2026 13:57:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 58141
IP: 5.34.232.0/21
IP: 45.136.76.0/22
IP: 81.85.64.0/22
IP: 131.162.0.0/21
IP: 2a04:6fa0::/31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:c1:18:97:79:e9:3c:64:bb:0a:2f:d1:51:22:1c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 21 13:57:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:c7:91:94:f7:13:56:3d:ec:67:ae:ee:54:
b1:fe:23:bc:ff:6a:98:5f:91:24:cb:d4:c0:18:be:
18:87:68:e5:6b:33:45:39:a5:6e:82:e2:f8:fa:5a:
77:fe:0e:0a:d9:ce:eb:92:fc:f2:ef:b3:25:13:fa:
b6:13:be:9e:97:5e:44:c4:61:8e:9d:83:97:dd:8f:
b6:29:e1:ba:35:2e:a0:d4:f1:98:e3:36:4b:84:df:
f9:f3:5b:0f:15:dd:93:b5:c3:3b:4d:d8:4f:42:df:
17:8d:74:ca:77:61:29:2b:36:ac:b9:6e:bb:ef:79:
74:4f:6e:eb:f8:7e:76:97:90:ac:6c:26:98:d0:19:
f6:dc:79:97:04:44:75:8e:08:6c:91:ef:cc:2e:58:
b8:15:78:ed:72:0a:bb:d8:6d:6d:bb:37:2b:d0:66:
41:6a:5e:cc:64:23:f4:10:7f:70:e5:18:ef:77:65:
90:64:ca:17:88:ba:13:f0:c1:6c:56:15:ea:99:d5:
ff:70:45:4f:7f:eb:45:ad:3c:f2:92:d7:f4:3b:97:
5c:4e:74:06:07:ea:60:d7:85:22:d8:55:99:24:d4:
15:a4:cb:ee:3e:9d:ec:25:43:e8:93:39:38:bf:cd:
c2:d8:e5:0b:1b:cc:59:6e:a3:ea:ea:23:fc:81:c2:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.232.0/21
45.136.76.0/22
81.85.64.0/22
131.162.0.0/21
IPv6:
2a04:6fa0::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58141
Signature Algorithm: sha256WithRSAEncryption
5e:ec:52:c8:39:37:a7:43:27:5f:28:1c:e7:c4:3d:b3:38:7a:
95:3c:b1:a1:3f:05:fa:da:58:ed:80:be:00:e9:5a:be:10:b3:
9e:a8:14:e5:bd:9e:8b:c4:09:0e:04:47:70:ea:be:5c:54:76:
c7:a7:e9:37:fd:27:14:ec:ad:e3:f8:d9:f5:93:dc:ec:7b:6b:
59:c9:a3:9b:c9:b0:e2:9a:d0:3e:46:88:c9:64:9b:3c:8b:17:
57:db:3c:7d:34:9a:00:ee:f4:fe:e1:e0:77:ac:ee:38:ba:03:
2c:00:e6:79:4e:14:1c:2c:dd:2f:54:2c:b1:76:b9:2a:16:20:
df:d9:92:6e:22:23:b3:36:30:59:38:5c:37:c1:31:6d:47:71:
26:bd:d0:5d:85:47:a3:ed:65:91:5b:f9:9c:9a:0e:68:fb:33:
41:de:ec:8d:7b:6d:cf:0b:bc:a5:0b:8a:c7:3a:67:77:1c:be:
3b:db:0a:78:c8:6f:6c:b6:a3:37:2a:8d:6e:80:07:a3:1a:14:
ae:65:51:01:d4:a5:74:9d:24:33:47:c8:78:8a:54:cc:ff:a0:
67:01:d0:6b:f5:5c:4f:84:ef:8e:f5:49:a2:84:08:65:98:a6:
6e:e9:93:86:a6:a7:d5:18:8b:50:2c:10:4b:69:e1:3e:bb:4b:
1b:df:e4:8d
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAaFewRiXeek8ZLsKL9FRIhzqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDIxMTM1NzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGE5ZWU3NGYyZDk4NGM4OGFiM2I5OWFlNzFkMGI3YzdiYWY4MTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlTHkZT3E1Y97Geu7lSx/iO8/2qY
X5Eky9TAGL4Yh2jlazNFOaVuguL4+lp3/g4K2c7rkvzy77MlE/q2E76el15ExGGO
nYOX3Y+2KeG6NS6g1PGY4zZLhN/581sPFd2TtcM7TdhPQt8XjXTKd2EpKzasuW67
73l0T27r+H52l5CsbCaY0Bn23HmXBER1jghske/MLli4FXjtcgq72G1tuzcr0GZB
al7MZCP0EH9w5Rjvd2WQZMoXiLoT8MFsVhXqmdX/cEVPf+tFrTzyktf0O5dcTnQG
B+pg14Ui2FWZJNQVpMvuPp3sJUPokzk4v83C2OULG8xZbqPq6iP8gcLTJwIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFOSp7nTy2YTIirO5mucdC3x7r4FQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4L2VhZGM5
NS1kYWFmLTQ3NzYtOWJlOC1kMmMwYmU0NDg1NjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvZWFkYzk1
LWRhYWYtNDc3Ni05YmU4LWQyYzBiZTQ0ODU2MS8xLzVLbnVkUExaaE1pS3M3bWE1
eDBMZkh1dmdWQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQDBSLoAwQCLYhMAwQCUVVAAwQDg6IAMA0EAgAC
MAcDBQEqBG+gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDjHTANBgkqhkiG9w0B
AQsFAAOCAQEAXuxSyDk3p0MnXygc58Q9szh6lTyxoT8F+tpY7YC+AOlavhCznqgU
5b2ei8QJDgRHcOq+XFR2x6fpN/0nFOyt4/jZ9ZPc7HtrWcmjm8mw4prQPkaIyWSb
PIsXV9s8fTSaAO70/uHgd6zuOLoDLADmeU4UHCzdL1QssXa5KhYg39mSbiIjszYw
WThcN8ExbUdxJr3QXYVHo+1lkVv5nJoOaPszQd7sjXttzwu8pQuKxzpndxy+O9sK
eMhvbLajNyqNboAHoxoUrmVRAdSldJ0kM0fIeIpUzP+gZwHQa/VcT4TvjvVJooQI
ZZimbumThqan1RiLUCwQS2nhPrtLG9/kjQ==
-----END CERTIFICATE-----
Generated at Mon Nov 9 19:17:11 2026 by rpki-client