Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
File: xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer (raw, json)
Hash identifier: 3+6gnYz/4XChOz57RT8LDE8JbrfErJMVkWedrL+GwvQ=
Subject key identifier: C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D8E78ADDEA9B24665C4CCAA529E3E06E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Apr 2026 00:09:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199012
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8e:78:ad:de:a9:b2:46:65:c4:cc:aa:52:9e:3e:06:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 15 00:09:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:80:bf:31:c5:7d:11:35:d4:83:dc:5c:b6:
b3:3d:bc:c9:c4:44:dc:d7:5b:73:61:01:e0:e8:3c:
2e:ba:be:57:69:10:e2:af:35:bf:ed:92:45:12:96:
ea:5a:6b:28:4d:f3:dd:26:fc:32:10:43:8c:07:ab:
d0:42:e4:2a:5c:6c:06:b6:84:1c:45:14:9f:d6:eb:
ba:c5:fd:2d:07:fb:1a:e2:7c:c5:d5:b6:1f:cc:8c:
db:54:cf:8b:9b:3d:95:2c:fa:73:e4:e7:90:b1:5a:
d6:ef:4d:34:69:ee:0b:b4:43:e7:52:c1:26:04:ed:
69:62:06:86:3d:d0:3a:ad:b0:e1:38:1b:85:7a:b9:
4f:4d:46:51:67:ec:ae:3f:34:1a:66:30:7f:68:ef:
52:fa:69:ae:a3:cb:1c:e2:19:2b:41:2b:19:36:a4:
03:4a:cc:ed:d4:d2:49:63:af:d3:3f:44:bf:5d:33:
d1:a2:5b:2b:c1:11:a2:45:34:89:46:17:3e:01:36:
f4:74:34:d4:61:f0:e5:20:b3:ad:c5:4e:c4:39:c5:
5c:8c:18:82:b9:18:c8:9a:5d:3b:65:81:dc:c0:37:
a9:87:b0:16:4d:7d:21:60:b1:9b:45:17:8b:42:5f:
ce:f5:c2:b2:5e:1a:08:f8:11:13:d1:41:fe:82:a6:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199012
Signature Algorithm: sha256WithRSAEncryption
5f:e5:f1:37:e8:d0:d7:1b:36:00:53:2b:ad:e1:73:83:39:80:
74:eb:3f:2e:c8:1e:88:29:13:6f:9f:ed:04:27:57:51:73:ec:
08:a9:69:08:f1:3e:1f:a0:e4:6f:5b:71:16:20:14:3c:80:83:
ae:66:14:db:c1:14:1c:de:4a:ae:40:d0:dc:78:b3:78:9b:11:
11:76:4c:80:5b:5c:f1:93:fd:f1:de:49:af:53:10:89:9b:1b:
0f:cb:65:41:d9:84:3a:09:5f:37:4e:46:dd:75:f1:2d:b2:53:
11:d1:1b:32:f6:b2:c5:80:b1:b6:b0:c1:dd:17:95:24:e0:48:
72:00:81:87:7f:12:12:5a:7a:dd:27:8f:ad:8a:6b:32:7c:40:
39:e4:70:50:66:a5:fc:66:63:c3:98:fa:8f:5e:13:bd:7a:c4:
a2:62:10:55:de:b3:d0:54:c3:20:45:5a:db:d7:ef:30:fb:1a:
c4:8b:56:8f:75:61:1c:96:e7:46:2c:4b:2a:d8:fb:87:e5:d2:
4c:51:a1:96:cd:09:ea:07:e3:21:b9:93:cd:cf:a9:ca:55:8f:
ff:67:45:65:6c:66:f6:a8:58:e6:40:2b:82:84:93:5a:34:10:
9a:e9:18:81:84:7d:4a:d3:30:a1:d3:85:14:6a:04:8e:c9:e2:
53:bb:3f:be
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZ2OeK3eqbJGZcTMqlKePgbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDE1MDAwOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTY4ZWY3OGMzY2ZlOTg1ZTAxZTc1M2Q1ZjQ1ZWE2NzUxMWI5ZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9qAvzHFfRE11IPcXLazPbzJxETc
11tzYQHg6Dwuur5XaRDirzW/7ZJFEpbqWmsoTfPdJvwyEEOMB6vQQuQqXGwGtoQc
RRSf1uu6xf0tB/sa4nzF1bYfzIzbVM+Lmz2VLPpz5OeQsVrW7000ae4LtEPnUsEm
BO1pYgaGPdA6rbDhOBuFerlPTUZRZ+yuPzQaZjB/aO9S+mmuo8sc4hkrQSsZNqQD
Sszt1NJJY6/TP0S/XTPRolsrwRGiRTSJRhc+ATb0dDTUYfDlILOtxU7EOcVcjBiC
uRjIml07ZYHcwDeph7AWTX0hYLGbRReLQl/O9cKyXhoI+BET0UH+gqZKQQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFMVo73jDz+mF4B51PV9F6mdRG55CMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkL2FmMDYy
MC1kZDllLTQ3ZTYtYTg3NC0yNjUwMTFmMTA0ZDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvYWYwNjIw
LWRkOWUtNDdlNi1hODc0LTI2NTAxMWYxMDRkNi8xL3hXanZlTVBQNllYZ0huVTlY
MFhxWjFFYm5rSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMJZDANBgkqhkiG9w0BAQsFAAOCAQEAX+XxN+jQ1xs2
AFMrreFzgzmAdOs/LsgeiCkTb5/tBCdXUXPsCKlpCPE+H6Dkb1txFiAUPICDrmYU
28EUHN5KrkDQ3HizeJsREXZMgFtc8ZP98d5Jr1MQiZsbD8tlQdmEOglfN05G3XXx
LbJTEdEbMvayxYCxtrDB3ReVJOBIcgCBh38SElp63SePrYprMnxAOeRwUGal/GZj
w5j6j14TvXrEomIQVd6z0FTDIEVa29fvMPsaxItWj3VhHJbnRixLKtj7h+XSTFGh
ls0J6gfjIbmTzc+pylWP/2dFZWxm9qhY5kArgoSTWjQQmukYgYR9StMwodOFFGoE
jsniU7s/vg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:42 2026 by rpki-client