Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5hQ8MwjtE07xZwHJBX3J49B_Vqs.cer
File: 5hQ8MwjtE07xZwHJBX3J49B_Vqs.cer (raw, json)
Hash identifier: ix/MQtXbct2FW4NDLtJ2mucCbCyDFtZPVzAgPcQ8tuw=
Subject key identifier: E6:14:3C:33:08:ED:13:4E:F1:67:01:C9:05:7D:C9:E3:D0:7F:56:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E97ADB429F0092C9B7762544C086F2A11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/8f6b4c-f872-484c-90c2-41c9f7448033/1/5hQ8MwjtE07xZwHJBX3J49B_Vqs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/8f6b4c-f872-484c-90c2-41c9f7448033/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 05 Jun 2026 12:06:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197728
IP: 91.239.172.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:ad:b4:29:f0:09:2c:9b:77:62:54:4c:08:6f:2a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 5 12:06:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6143c3308ed134ef16701c9057dc9e3d07f56ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:8d:15:cd:35:b9:db:55:ee:ae:01:a3:6d:
58:4b:a0:26:13:81:f9:b9:82:69:03:6c:fa:4d:da:
71:2c:3b:bb:ad:16:d2:45:46:12:9d:b0:54:b8:ff:
e0:18:cb:c3:34:15:8c:26:ce:55:b8:b7:82:76:93:
55:1e:18:96:07:81:1e:16:c8:f3:e2:06:1b:b9:27:
c6:ff:3c:b9:37:c1:1c:00:55:30:ad:91:2b:de:9e:
20:63:b3:7a:7b:1d:ef:c6:07:30:91:01:38:c1:51:
85:70:13:9e:8d:2e:10:92:85:12:66:d6:f9:8b:8c:
d8:2f:e9:c4:12:80:9b:a6:ca:b6:aa:5e:fe:83:15:
72:82:70:f2:b4:75:e2:0c:6e:fe:a0:86:06:cc:b7:
c9:3e:4c:1c:16:d6:cd:49:94:be:e7:57:cb:a0:0f:
9c:e3:09:56:d0:0d:75:cd:8d:71:4d:7b:51:c7:55:
43:23:66:cf:c2:e0:b2:31:85:b7:65:76:90:6e:5f:
72:69:9e:95:46:e2:74:56:cf:7a:23:a0:f5:ce:99:
30:30:f4:13:40:f9:cc:b5:33:2b:c0:79:27:8f:b8:
4f:13:44:3a:e2:a1:da:55:81:22:78:36:e5:01:55:
64:ae:02:87:03:91:72:f7:41:bd:ff:80:75:68:d4:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:14:3C:33:08:ED:13:4E:F1:67:01:C9:05:7D:C9:E3:D0:7F:56:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8f6b4c-f872-484c-90c2-41c9f7448033/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8f6b4c-f872-484c-90c2-41c9f7448033/1/5hQ8MwjtE07xZwHJBX3J49B_Vqs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.172.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197728
Signature Algorithm: sha256WithRSAEncryption
5d:08:d1:c4:b0:90:c3:eb:25:68:7c:c0:ab:7d:e3:fb:91:65:
71:dc:ed:0a:26:fe:5f:25:78:71:77:5d:6a:16:cd:f3:18:b0:
42:d0:3b:85:bf:02:3a:93:b3:f4:27:f1:57:e9:6a:e3:69:1a:
e0:79:77:51:14:d2:54:50:63:50:19:aa:05:91:13:48:5a:73:
7a:64:30:66:9e:be:97:66:c6:ab:66:39:5d:f9:b7:74:15:67:
b1:c9:4a:e4:79:4a:94:52:41:4e:b1:98:0c:be:c6:d4:00:73:
19:78:2b:3d:b2:b3:f5:d3:ac:bd:a4:00:24:e5:a2:7c:c8:50:
0a:4b:4e:28:23:b0:54:cd:1e:69:86:34:2c:fc:b1:b2:9c:c2:
c1:2a:0b:37:9a:ab:e1:1c:0d:a1:e4:63:97:35:6f:0c:14:6a:
db:ea:16:ea:96:19:f6:10:ea:17:63:14:f3:c1:63:e6:2f:e7:
50:fc:7e:5e:0d:59:71:d2:f1:c8:44:aa:1b:ae:bf:7a:7d:46:
23:4d:a5:3c:4d:eb:76:68:66:8f:5c:31:41:f9:2b:88:27:71:
fd:72:be:45:a4:3c:5d:f3:38:58:ec:22:22:42:fd:bd:27:2d:
44:77:b3:b0:8c:40:f7:e9:82:86:28:0f:fb:6b:2c:70:88:02:
9a:d4:5b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:32 2026 by rpki-client