Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/NZ5fBT651CnY61ARjkOdCXNGyrs.cer
File: NZ5fBT651CnY61ARjkOdCXNGyrs.cer (raw, json)
Hash identifier: kJY8KWVammnHLI5KTmhftrl9bLn8j+OzDmah2qqTgs8=
Subject key identifier: 35:9E:5F:05:3E:B9:D4:29:D8:EB:50:11:8E:43:9D:09:73:46:CA:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A110DEA163C195634EB6853ED51DDA16EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 06 Oct 2026 10:59:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218522
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:de:a1:63:c1:95:63:4e:b6:85:3e:d5:1d:da:16:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 6 10:59:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=359e5f053eb9d429d8eb50118e439d097346cabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:92:2b:fe:54:86:40:75:50:10:69:fa:14:
f1:56:d0:b5:63:87:7f:8d:01:83:33:5b:82:0e:30:
33:d1:92:58:c6:f3:d6:43:11:11:bc:68:54:ee:ea:
2e:fa:f8:55:7b:b4:66:4f:f5:a7:36:35:c4:2b:6f:
23:ee:99:33:70:2b:86:cc:f2:cc:bb:b8:0c:1c:24:
9f:8d:ce:0c:c3:3a:d5:95:33:fe:fc:a3:86:cf:95:
0e:bd:04:f9:a5:b4:fc:9f:07:d1:26:92:90:24:8e:
8c:43:c1:00:7d:11:48:eb:10:52:6e:00:c9:f4:94:
ec:5c:7c:b1:b2:de:48:20:58:27:18:c6:83:f8:e3:
89:18:43:2e:31:11:50:37:79:8d:c3:51:41:ae:b9:
65:6d:73:4b:2b:d9:b6:a7:91:69:33:7f:3d:3c:bc:
42:dd:5b:a2:77:af:62:32:8b:ed:0f:cb:4c:11:d7:
bb:21:fc:91:5a:72:b7:85:44:7c:76:73:58:75:eb:
82:48:42:d3:69:28:28:52:54:c0:50:20:37:0e:df:
71:a6:4f:ca:b4:90:26:73:ad:c9:a6:cf:8a:a3:1f:
50:95:f6:2c:83:ad:95:9d:33:0b:0e:12:5c:c5:d0:
f8:ea:39:5c:79:20:14:51:d6:9b:bc:ed:4a:e1:af:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9E:5F:05:3E:B9:D4:29:D8:EB:50:11:8E:43:9D:09:73:46:CA:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218522
Signature Algorithm: sha256WithRSAEncryption
a9:2d:ab:46:a1:da:ae:be:60:2e:69:59:f2:83:9d:2e:3b:e7:
fe:6b:e8:4d:cc:96:48:0a:f3:bf:c6:aa:ce:6e:da:f4:73:8a:
42:6d:22:7c:08:38:ee:ec:be:72:b5:67:fd:4c:46:69:fa:cc:
f5:a1:e2:a5:9c:2b:23:0e:59:a6:47:08:f1:e1:d0:ed:3f:d0:
89:22:3f:a7:36:ff:46:da:f8:4b:b9:7a:42:e9:aa:66:c8:f8:
82:68:83:bc:19:e4:76:6c:fe:73:35:b8:eb:a5:0a:e3:fa:0b:
64:4d:3d:e9:56:2e:dd:bb:1b:3d:61:54:38:ee:f0:b8:93:70:
96:3f:a7:e8:8a:5e:7d:b1:98:18:c9:50:10:58:44:1c:41:76:
5c:68:76:3e:56:4e:26:e1:59:65:8b:6d:12:a7:b6:a5:e3:31:
5b:83:95:f0:ee:79:65:d6:9f:96:d7:3e:a0:57:02:09:d8:93:
dd:40:c4:9a:82:db:90:19:67:26:9b:dd:9d:db:13:7f:e9:c0:
1a:20:40:0f:45:9e:10:26:e1:0a:e5:32:05:16:74:0e:36:d1:
ec:ea:c3:db:a3:d3:87:14:86:4f:c9:b3:21:71:f2:29:cb:87:
ce:54:f6:5b:d8:1d:15:97:01:13:8e:18:11:2f:fd:bc:11:a2:
f6:04:c9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:26:26 2026 by rpki-client