Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
File: 5z3xVch6WQrB5ThUTPM1bk_IF0g.cer (raw, json)
Hash identifier: Ea6U50BzfVUCb9eHL6Ancckt49D0oihTxJC/QDDcRak=
Subject key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A24C51103E24D7C171DFFD542FB4A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:17:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206384
IP: 2001:678:ce0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:4c:51:10:3e:24:d7:c1:71:df:fd:54:2f:b4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e73df155c87a590ac1e538544cf3356e4fc81748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:51:e2:b8:7e:ec:d3:02:2a:06:5b:5e:7c:
e6:ae:3d:da:c6:c0:4a:e9:15:9e:7e:3e:45:70:df:
a7:3e:24:42:41:54:ab:10:80:73:d0:06:38:e8:b0:
ee:6e:e1:7e:39:07:f7:e4:14:e1:70:e3:b9:08:9d:
b6:f5:2a:78:b3:40:27:5e:a0:60:46:85:b0:27:44:
40:19:0a:a1:d0:ac:36:b0:2f:ff:3b:b4:05:07:07:
b6:33:ee:9d:3f:97:5c:58:af:1f:02:a3:b6:ac:90:
4a:27:8e:53:61:3b:86:65:5b:4b:60:ad:59:62:9e:
d8:bf:71:65:64:89:63:d6:59:65:b4:0d:eb:41:a9:
0b:1e:b3:64:f0:64:f2:d0:a2:31:a2:9e:04:e8:73:
ce:44:50:66:7d:55:49:10:a5:37:9a:52:03:d9:16:
aa:cb:1f:db:f6:0a:67:dc:37:01:e0:71:ee:ea:b4:
0f:93:7e:ed:82:4a:fa:f2:5a:aa:bf:bd:8c:ca:3d:
32:09:bc:ee:60:8b:3a:4d:eb:a6:4a:39:fe:ca:d1:
92:ef:83:25:bf:ab:3d:3f:2a:a0:72:35:66:f8:09:
52:4f:06:58:78:6c:87:9d:dd:99:dc:ef:94:08:1b:
97:57:7d:6c:43:2e:b3:30:6b:16:b3:b8:7e:03:30:
96:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:ce0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206384
Signature Algorithm: sha256WithRSAEncryption
a8:8b:04:39:f4:40:4b:92:99:d4:c6:f6:13:c1:c8:65:89:b3:
d0:bf:d9:b5:17:3f:65:00:00:a0:94:02:bd:03:1f:e5:07:70:
25:08:2f:12:fa:d7:22:12:06:ca:c5:fe:9c:9c:27:2e:a0:1c:
83:97:17:40:b8:0c:a1:11:8f:a2:8b:c1:32:99:d8:c8:c7:78:
47:c7:f7:2b:d5:cd:3e:4b:0d:0b:7b:12:ee:22:92:ef:f3:b1:
58:bd:18:ad:fc:9c:0d:e4:0f:10:6d:df:d5:2d:c2:1f:66:1a:
d2:5e:97:45:56:9d:b3:64:e3:6d:b3:1f:e4:1f:22:ca:b1:f5:
fe:e8:4d:27:9d:96:01:4d:c2:11:92:e9:b9:2a:27:c2:29:4b:
03:68:62:09:a5:ee:b4:fd:2b:ce:fd:3a:1b:ec:4a:cf:8a:c6:
27:6c:bc:84:1a:52:78:ee:96:d6:65:1e:b5:54:17:bc:74:de:
2b:17:7c:d3:52:35:39:b5:7c:46:9f:be:4e:af:dc:49:52:40:
83:6a:ce:bf:9a:e7:cf:1e:79:6d:5d:b2:08:a1:5f:59:18:96:
a8:e0:6e:ef:d8:f9:43:93:57:b7:b3:58:4a:61:ea:5d:da:b2:
d3:80:4c:a3:8b:04:c9:0d:1f:5b:e8:2a:57:81:27:d2:0b:b0:
fd:1d:92:6f
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZt4okxRED4k18Fx3/1UL7SpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzNkZjE1NWM4N2E1OTBhYzFlNTM4NTQ0Y2YzMzU2ZTRmYzgxNzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UtR4rh+7NMCKgZbXnzmrj3axsBK
6RWefj5FcN+nPiRCQVSrEIBz0AY46LDubuF+OQf35BThcOO5CJ229Sp4s0AnXqBg
RoWwJ0RAGQqh0Kw2sC//O7QFBwe2M+6dP5dcWK8fAqO2rJBKJ45TYTuGZVtLYK1Z
Yp7Yv3FlZIlj1llltA3rQakLHrNk8GTy0KIxop4E6HPORFBmfVVJEKU3mlID2Raq
yx/b9gpn3DcB4HHu6rQPk37tgkr68lqqv72Myj0yCbzuYIs6TeumSjn+ytGS74Ml
v6s9PyqgcjVm+AlSTwZYeGyHnd2Z3O+UCBuXV31sQy6zMGsWs7h+AzCW1wIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFOc98VXIelkKweU4VEzzNW5PyBdIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0L2JjNTdm
Zi1hYjFiLTQ2NTEtOTViNC1kZGQ3YmY5M2QzNTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvYmM1N2Zm
LWFiMWItNDY1MS05NWI0LWRkZDdiZjkzZDM1Ni8xLzV6M3hWY2g2V1FyQjVUaFVU
UE0xYmtfSUYwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAzgMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMmMDANBgkqhkiG9w0BAQsFAAOCAQEAqIsEOfRAS5KZ1Mb2E8HIZYmz0L/Z
tRc/ZQAAoJQCvQMf5QdwJQgvEvrXIhIGysX+nJwnLqAcg5cXQLgMoRGPoovBMpnY
yMd4R8f3K9XNPksNC3sS7iKS7/OxWL0YrfycDeQPEG3f1S3CH2Ya0l6XRVads2Tj
bbMf5B8iyrH1/uhNJ52WAU3CEZLpuSonwilLA2hiCaXutP0rzv06G+xKz4rGJ2y8
hBpSeO6W1mUetVQXvHTeKxd801I1ObV8Rp++Tq/cSVJAg2rOv5rnzx55bV2yCKFf
WRiWqOBu79j5Q5NXt7NYSmHqXdqy04BMo4sEyQ0fW+gqV4En0guw/R2Sbw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:56:18 2026 by rpki-client