Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
File: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer (raw, json)
Hash identifier: tXfeTP0ZTp1wLh7Kc1ZCRD/pOEkuGqxK6QKdeWXHt24=
Subject key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7910575C50EEB19DF2BD9E97C6203397
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:17:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212104
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:57:5c:50:ee:b1:9d:f2:bd:9e:97:c6:20:33:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:41:5a:99:c3:18:d9:dd:76:e0:0f:e7:68:9f:
fe:ee:53:9d:85:12:20:ea:ee:85:2e:c1:f2:df:a2:
b9:8b:89:13:81:3b:1e:4b:c6:2a:0a:0b:8d:75:91:
be:4e:16:60:e6:79:df:03:66:9f:df:2f:fd:c3:27:
d7:82:bd:21:1f:5d:5b:ce:21:4c:b8:0d:bf:b8:49:
76:1e:a3:6b:a8:f7:12:47:f7:32:60:f3:a5:53:f0:
ae:91:50:49:3f:9e:12:32:2c:b0:1d:03:f1:80:a8:
ee:60:ba:f3:6e:47:3e:47:62:71:3d:d7:38:4d:30:
e4:e8:54:0e:3c:54:73:a2:12:28:35:20:53:03:fc:
0e:a3:f1:81:7e:9f:eb:1b:be:49:ec:ae:36:25:db:
b7:d9:17:bf:af:97:b4:5e:a7:4f:51:34:f5:d1:b4:
26:be:e0:1f:e7:74:2b:a0:09:a4:d5:bf:83:0d:71:
41:1f:a3:aa:eb:a9:fe:c9:25:a6:1a:cc:c9:16:da:
97:f3:74:00:8f:89:ec:ef:3f:f4:0d:38:b3:d8:18:
e2:ec:17:c0:54:14:f6:dd:fe:86:35:b6:f6:cf:b9:
59:0f:72:7a:c5:6c:bd:28:de:3e:3b:0a:bc:d3:cc:
e0:7a:70:ac:b3:80:36:34:04:6b:6d:7b:e4:42:9b:
72:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212104
Signature Algorithm: sha256WithRSAEncryption
98:05:0c:74:95:a4:47:bf:b1:3c:52:ae:84:5c:52:7b:a1:c6:
23:89:cd:fc:ca:77:e1:5f:9b:f5:2a:f0:f3:ed:51:78:15:f3:
c5:28:b5:4d:26:ec:09:29:b4:7b:7f:3c:ff:24:bd:53:69:20:
4d:77:33:f6:73:fb:ce:9e:d2:8d:12:b1:bb:b0:53:59:ab:c9:
69:31:e8:99:a5:2d:38:a2:16:5e:4f:c4:c2:85:20:ac:91:32:
c4:a3:c4:52:c7:2e:30:c1:0f:21:81:9c:b9:17:48:2b:d6:91:
28:35:5b:be:0e:28:91:0a:f3:62:d1:f8:00:23:c0:5e:f3:7f:
8c:ca:c6:2e:0a:32:8a:92:3f:0a:41:71:d1:52:02:96:35:e8:
40:e5:b5:49:cd:08:e9:3f:6d:6b:e5:6b:a2:fe:89:dd:78:66:
77:5b:68:a2:db:35:0d:d8:aa:24:7d:9d:47:c6:b8:47:7b:9b:
be:92:54:2d:34:a2:30:cb:35:9c:f7:aa:52:0f:f2:78:c7:fd:
c5:8c:bf:0c:5a:27:1a:1a:ab:28:28:9b:60:55:50:86:17:a8:
f5:cf:6d:54:e3:0a:d5:c7:b0:93:c3:36:0a:44:87:5a:55:bd:
ff:f0:20:ff:87:6e:ce:54:9e:44:1c:2d:05:69:71:c8:e4:bc:
25:d9:34:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:58:18 2026 by rpki-client