Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mal7l8sjvMpdGH-OK9j6qgO5jW8.cer
File: Mal7l8sjvMpdGH-OK9j6qgO5jW8.cer (raw, json)
Hash identifier: mXhcH9clt5Fw80Z9aHB9Fw37+gvWl95ir6zCd0PFIrQ=
Subject key identifier: 31:A9:7B:97:CB:23:BC:CA:5D:18:7F:8E:2B:D8:FA:AA:03:B9:8D:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E3FC9578C0046D65A51E1F03D5840B984
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/0/31A97B97CB23BCCA5D187F8E2BD8FAAA03B98D6F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 19 May 2026 10:30:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201028
AS: 201158
AS: 214556
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:c9:57:8c:00:46:d6:5a:51:e1:f0:3d:58:40:b9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 19 10:30:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31a97b97cb23bcca5d187f8e2bd8faaa03b98d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:b3:18:1f:fa:b4:cd:8e:f1:75:54:c7:14:
ad:f6:d5:f3:bf:56:a4:f7:61:3e:8f:ee:1e:77:95:
cb:84:f1:2d:58:ea:31:e4:36:fc:76:94:da:20:6a:
bb:36:fe:74:ff:96:57:b3:95:48:39:f7:84:56:30:
ba:17:d0:69:94:2d:e2:f3:2a:65:5b:73:78:8d:d8:
2b:71:62:59:13:f2:4d:ee:7c:03:a8:ec:c6:a7:a4:
af:dd:41:e3:25:e1:e8:95:20:bc:be:a0:ff:fa:cb:
66:21:1a:97:02:75:01:6c:ab:b7:b1:09:47:93:95:
20:5a:1d:39:9f:5e:9a:2d:49:bd:98:30:9a:b3:1c:
11:ca:5f:b0:a8:49:cc:03:94:d6:45:87:13:2e:11:
65:11:60:9d:51:2c:67:55:90:78:a5:4b:24:f4:bc:
69:b4:e6:2b:d2:af:0d:06:e4:e1:65:e6:80:e2:bc:
c1:4a:5c:08:dd:01:e2:b2:a9:87:de:85:e1:75:7a:
8a:40:a3:94:7f:ab:17:09:76:b6:1f:ac:cf:f0:d1:
6d:0f:d9:5e:8d:4c:6d:e8:d6:2c:82:04:65:19:fc:
b1:9b:6b:60:d8:6f:c8:61:fd:71:c1:dc:00:ba:10:
b7:ac:e6:da:54:31:1f:22:ed:b4:7d:65:5a:b8:40:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A9:7B:97:CB:23:BC:CA:5D:18:7F:8E:2B:D8:FA:AA:03:B9:8D:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/0/31A97B97CB23BCCA5D187F8E2BD8FAAA03B98D6F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201028
201158
214556
Signature Algorithm: sha256WithRSAEncryption
55:7f:45:da:74:93:af:da:88:e6:76:91:99:6e:8d:35:f9:4c:
d7:21:50:49:5d:57:cf:7c:41:59:ff:8e:58:81:3e:23:89:31:
7a:a5:96:84:0b:93:da:ea:8e:f9:56:2d:11:5b:72:2c:d7:00:
9e:3a:e7:68:5b:d9:93:2f:9a:b2:00:2d:ea:c0:1b:83:d2:35:
c9:60:8a:b2:46:bb:f2:c3:22:45:54:22:ec:23:00:6c:e3:10:
e9:06:7f:dd:03:26:bb:03:6f:57:e8:cc:9f:ec:49:b0:7a:3f:
2e:fe:d0:54:37:16:09:53:be:c5:e6:d6:53:03:de:88:db:19:
19:7c:29:7e:3a:99:41:8a:1f:5e:e8:2e:0c:e8:55:e8:09:d7:
15:da:22:c0:35:c6:67:8b:3a:b9:97:e5:10:0a:36:c1:a6:9a:
0e:cb:44:0b:20:b2:8c:38:94:67:1e:4d:e0:62:f6:c9:6d:ef:
a9:f8:d4:79:86:65:4b:71:9f:5c:b9:da:ca:a9:09:af:e6:6e:
5b:b8:af:be:a0:f5:56:1a:1c:10:28:53:6d:a6:93:ae:fe:60:
5d:bc:60:bf:ee:43:d0:10:6c:64:a7:22:0a:e4:65:f5:a1:14:
e5:7b:59:4c:45:a5:23:a8:f5:25:e0:4d:59:9f:c9:83:0c:aa:
bc:5b:76:26
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAZ4/yVeMAEbWWlHh8D1YQLmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNTE5MTAzMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWE5N2I5N2NiMjNiY2NhNWQxODdmOGUyYmQ4ZmFhYTAzYjk4ZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPqzGB/6tM2O8XVUxxSt9tXzv1ak
92E+j+4ed5XLhPEtWOox5Db8dpTaIGq7Nv50/5ZXs5VIOfeEVjC6F9BplC3i8ypl
W3N4jdgrcWJZE/JN7nwDqOzGp6Sv3UHjJeHolSC8vqD/+stmIRqXAnUBbKu3sQlH
k5UgWh05n16aLUm9mDCasxwRyl+wqEnMA5TWRYcTLhFlEWCdUSxnVZB4pUsk9Lxp
tOYr0q8NBuThZeaA4rzBSlwI3QHisqmH3oXhdXqKQKOUf6sXCXa2H6zP8NFtD9le
jUxt6NYsggRlGfyxm2tg2G/IYf1xwdwAuhC3rObaVDEfIu20fWVauECl2wIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFDGpe5fLI7zKXRh/jivY+qoDuY1vMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhjN2U2
ZDg4LTBiMzktNGI2NS05MzdhLWIxMDA0MjU0MGI3Yi8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGM3
ZTZkODgtMGIzOS00YjY1LTkzN2EtYjEwMDQyNTQwYjdiLzAvMzFBOTdCOTdDQjIz
QkNDQTVEMTg3RjhFMkJEOEZBQUEwM0I5OEQ2Ri5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMDEUQC
AwMRxgIDA0YcMA0GCSqGSIb3DQEBCwUAA4IBAQBVf0XadJOv2ojmdpGZbo01+UzX
IVBJXVfPfEFZ/45YgT4jiTF6pZaEC5Pa6o75Vi0RW3Is1wCeOudoW9mTL5qyAC3q
wBuD0jXJYIqyRrvywyJFVCLsIwBs4xDpBn/dAya7A29X6Myf7Emwej8u/tBUNxYJ
U77F5tZTA96I2xkZfCl+OplBih9e6C4M6FXoCdcV2iLANcZnizq5l+UQCjbBppoO
y0QLILKMOJRnHk3gYvbJbe+p+NR5hmVLcZ9cudrKqQmv5m5buK++oPVWGhwQKFNt
ppOu/mBdvGC/7kPQEGxkpyIK5GX1oRTle1lMRaUjqPUl4E1Zn8mDDKq8W3Ym
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:05 2026 by rpki-client