Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.cer
File: G5bMQpAtOI5hHGLvFGg7_M6Dw6s.cer (raw, json)
Hash identifier: rM5KumiDxBNpsRjcOcZBs6f5N3YPXY5RIjCWAkaqcYg=
Subject key identifier: 1B:96:CC:42:90:2D:38:8E:61:1C:62:EF:14:68:3B:FC:CE:83:C3:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A080F2EB1E3478723A15A791C55653A507
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 08 Sep 2026 12:16:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218744
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:f2:eb:1e:34:78:72:3a:15:a7:91:c5:56:53:a5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 8 12:16:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b96cc42902d388e611c62ef14683bfcce83c3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:1d:33:49:41:33:c3:6e:d2:2c:f9:75:7d:
56:5f:50:68:9f:7f:d1:84:31:f2:21:c1:07:b6:f8:
d7:c9:3e:0a:70:48:27:d1:dc:fe:30:f4:fb:f6:bc:
09:96:9d:d8:73:c9:58:a7:80:50:39:94:86:c2:9b:
76:c2:25:28:72:f3:a8:94:a8:6c:e0:4a:01:97:0c:
b8:5b:f1:70:85:13:13:25:cb:57:e1:17:c1:23:9e:
71:bb:5e:c7:ae:bd:63:9f:26:1d:47:f4:2b:f7:c3:
e7:3c:7f:28:0e:69:46:cc:19:f6:43:d1:7e:e0:65:
c1:91:30:4e:92:95:aa:77:11:aa:74:d3:44:f2:96:
9f:dd:ee:ec:79:36:a7:de:7c:7d:1b:9a:be:df:d5:
d2:6e:0c:00:07:b5:14:00:e3:0c:44:99:cc:3f:5b:
1d:55:44:ef:28:98:58:8c:22:92:60:7b:23:88:47:
2c:7c:83:77:33:49:b7:b0:60:ab:0f:c7:f5:ad:68:
60:8c:e6:99:81:ea:86:0c:58:1c:62:e5:4c:80:b8:
ac:85:ef:8a:b7:cd:45:f9:6f:9f:f6:0c:48:1a:55:
4b:53:19:24:19:8b:6f:37:31:f9:7b:d4:e4:2d:84:
52:de:aa:86:07:e8:a2:32:23:7f:3a:e6:af:ad:77:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:96:CC:42:90:2D:38:8E:61:1C:62:EF:14:68:3B:FC:CE:83:C3:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218744
Signature Algorithm: sha256WithRSAEncryption
a7:85:dc:3d:a0:5f:91:d1:c8:30:e5:66:b8:82:6c:b5:02:bf:
ae:ed:f7:85:8e:7a:31:fe:4b:e8:29:62:57:11:2a:1f:5c:90:
e8:b8:81:6c:b6:02:ab:86:9d:d5:40:e3:bf:54:44:84:51:34:
c9:9d:85:34:21:e4:f4:5d:08:ec:6b:de:56:6f:80:6b:45:a6:
35:e9:b6:6a:72:6d:a0:a4:65:f1:a6:7f:5a:0b:55:d1:04:67:
ce:0a:52:e7:2e:32:10:58:78:53:77:b9:a6:85:49:eb:33:32:
f3:a4:41:04:31:ad:ec:36:87:30:d4:22:9d:9b:14:00:78:f3:
42:84:6a:7e:77:8d:4e:7c:14:31:74:64:58:5f:c7:fe:65:d9:
a8:50:ad:00:35:11:7d:19:3e:a5:96:a3:28:38:6f:4c:f5:d0:
31:36:9a:d0:9d:a2:66:f7:48:db:49:7d:3c:ea:71:2f:3e:bb:
ae:40:49:8c:43:81:4b:fe:a4:eb:e0:87:e5:65:e1:1b:05:d9:
62:81:5c:ae:5c:3f:dd:67:77:e2:61:c5:0b:c7:9c:7d:2b:38:
bd:2c:e8:1b:8a:88:82:47:96:eb:6f:6f:65:84:17:81:3e:a8:
82:97:98:ea:61:02:82:4e:90:ca:f3:ec:4c:53:d6:80:ac:1f:
e4:22:21:d5
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAaCA8useNHhyOhWnkcVWU6UHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTA4MTIxNjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjk2Y2M0MjkwMmQzODhlNjExYzYyZWYxNDY4M2JmY2NlODNjM2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ8dM0lBM8Nu0iz5dX1WX1Bon3/R
hDHyIcEHtvjXyT4KcEgn0dz+MPT79rwJlp3Yc8lYp4BQOZSGwpt2wiUocvOolKhs
4EoBlwy4W/FwhRMTJctX4RfBI55xu17Hrr1jnyYdR/Qr98PnPH8oDmlGzBn2Q9F+
4GXBkTBOkpWqdxGqdNNE8paf3e7seTan3nx9G5q+39XSbgwAB7UUAOMMRJnMP1sd
VUTvKJhYjCKSYHsjiEcsfIN3M0m3sGCrD8f1rWhgjOaZgeqGDFgcYuVMgLishe+K
t81F+W+f9gxIGlVLUxkkGYtvNzH5e9TkLYRS3qqGB+iiMiN/OuavrXe3gQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFBuWzEKQLTiOYRxi7xRoO/zOg8OrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhL2MyNWIy
Yi0wZTkzLTRkNGItYmZiMi1iMzVkMGNhM2RlYTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvYzI1YjJi
LTBlOTMtNGQ0Yi1iZmIyLWIzNWQwY2EzZGVhMy8xL0c1Yk1RcEF0T0k1aEhHTHZG
R2c3X002RHc2cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNWeDANBgkqhkiG9w0BAQsFAAOCAQEAp4XcPaBfkdHI
MOVmuIJstQK/ru33hY56Mf5L6CliVxEqH1yQ6LiBbLYCq4ad1UDjv1REhFE0yZ2F
NCHk9F0I7GveVm+Aa0WmNem2anJtoKRl8aZ/WgtV0QRnzgpS5y4yEFh4U3e5poVJ
6zMy86RBBDGt7DaHMNQinZsUAHjzQoRqfneNTnwUMXRkWF/H/mXZqFCtADURfRk+
pZajKDhvTPXQMTaa0J2iZvdI20l9POpxLz67rkBJjEOBS/6k6+CH5WXhGwXZYoFc
rlw/3Wd34mHFC8ecfSs4vSzoG4qIgkeW629vZYQXgT6ogpeY6mECgk6QyvPsTFPW
gKwf5CIh1Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:15:45 2026 by rpki-client