Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
File: e_es5VMOXVCQfS3bQ1vym03x1uQ.cer (raw, json)
Hash identifier: uB+lyf1Xbp/dqb9yEagBRnl8Xr/JppRqXcr1hcGdric=
Subject key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7835571A3796F407060920BA1740E7E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199969
IP: 195.88.122.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:57:1a:37:96:f4:07:06:09:20:ba:17:40:e7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:24:9b:be:96:a5:5c:fb:bb:15:99:d6:89:
c9:d8:9f:ce:1d:77:c5:7b:7f:d2:1e:8a:49:f8:50:
37:e3:ef:98:57:99:3a:87:af:51:93:42:72:d5:10:
a3:1f:db:0d:cb:1a:f0:33:cc:d7:4e:ad:4a:e5:f6:
1f:82:c1:ce:6e:d1:ef:e7:7d:5a:c9:74:c6:98:20:
20:37:b0:42:59:be:16:99:38:7d:1f:53:43:74:d8:
1a:48:94:6a:91:83:1e:06:f1:4d:8c:5d:5d:f1:98:
3e:87:3e:4b:40:79:3b:00:e9:99:3c:6e:83:51:e6:
eb:dc:cf:1a:f9:3f:01:e1:79:39:26:ce:e2:a8:96:
7f:4a:d5:d5:ce:6d:c2:bb:72:6c:59:44:fc:9f:18:
f5:b3:60:6c:39:5d:16:a6:08:fb:c8:33:68:c1:6d:
b5:c1:b1:2e:7d:04:99:51:80:a0:81:e4:cc:9d:1b:
d0:3a:0c:81:fc:85:02:80:7b:da:e3:b1:43:10:9f:
85:f9:39:2f:da:0a:0c:d6:8c:db:da:32:62:bf:07:
95:19:bb:1f:9a:05:57:12:f2:70:5f:26:f6:dd:88:
96:b5:f7:30:63:3c:13:63:f3:90:53:60:89:9c:79:
35:29:25:f1:09:df:58:dc:d2:ac:dd:b2:f6:e5:45:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.122.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199969
Signature Algorithm: sha256WithRSAEncryption
8e:9f:25:8b:9c:07:93:fc:01:8f:ef:06:a4:0c:03:2c:3f:35:
6c:e9:f9:59:9f:e4:9f:3c:88:8a:03:76:e6:79:df:86:34:5d:
9a:99:23:31:ba:d8:41:2d:a2:82:a1:a5:a2:fd:f8:80:83:1e:
f7:c2:da:44:f1:85:26:21:09:28:5b:6e:4b:27:6b:23:06:09:
57:de:a2:c9:f3:34:43:5b:26:50:9c:05:72:94:18:31:b8:ed:
e4:55:ba:73:ac:60:6e:69:58:85:42:69:97:1b:7d:d9:b5:fa:
c3:68:8d:c0:fa:7f:ee:b7:7e:df:35:ed:ec:ce:83:0c:d1:74:
5d:93:dd:47:44:72:11:3e:98:e6:ae:1a:c6:7c:54:aa:79:d2:
ff:25:33:d0:6e:e4:28:6e:ef:e2:78:64:7e:ba:ee:52:c9:b0:
53:4d:2b:c0:6c:45:f7:d5:c5:c0:dd:b6:38:9e:d6:50:93:97:
b4:81:56:ec:75:a5:41:ca:bb:87:b7:b0:f1:ba:75:8e:9e:4b:
10:f4:a9:b2:b0:79:96:aa:f8:d1:10:c9:17:62:5d:46:15:50:
9b:68:e4:18:05:1e:83:2b:6f:ca:50:87:09:ce:28:49:2a:18:
8b:ad:4e:06:2e:a7:98:71:be:88:d6:2f:b5:03:de:42:d4:f6:
11:4e:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:50:38 2026 by rpki-client