Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
File: 5KnudPLZhMiKs7ma5x0LfHuvgVA.cer (raw, json)
Hash identifier: SWF2b8qhohtK1YQrf+LbfmcAPlnzlsKSwpehdJHfmkA=
Subject key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E2B5C292942BDE244BB2A320529EEEBF5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 15 May 2026 11:18:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 58141
IP: 5.34.232.0/21
IP: 45.136.76.0/22
IP: 81.85.64.0/22
IP: 2a04:6fa0::/31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:5c:29:29:42:bd:e2:44:bb:2a:32:05:29:ee:eb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 15 11:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:c7:91:94:f7:13:56:3d:ec:67:ae:ee:54:
b1:fe:23:bc:ff:6a:98:5f:91:24:cb:d4:c0:18:be:
18:87:68:e5:6b:33:45:39:a5:6e:82:e2:f8:fa:5a:
77:fe:0e:0a:d9:ce:eb:92:fc:f2:ef:b3:25:13:fa:
b6:13:be:9e:97:5e:44:c4:61:8e:9d:83:97:dd:8f:
b6:29:e1:ba:35:2e:a0:d4:f1:98:e3:36:4b:84:df:
f9:f3:5b:0f:15:dd:93:b5:c3:3b:4d:d8:4f:42:df:
17:8d:74:ca:77:61:29:2b:36:ac:b9:6e:bb:ef:79:
74:4f:6e:eb:f8:7e:76:97:90:ac:6c:26:98:d0:19:
f6:dc:79:97:04:44:75:8e:08:6c:91:ef:cc:2e:58:
b8:15:78:ed:72:0a:bb:d8:6d:6d:bb:37:2b:d0:66:
41:6a:5e:cc:64:23:f4:10:7f:70:e5:18:ef:77:65:
90:64:ca:17:88:ba:13:f0:c1:6c:56:15:ea:99:d5:
ff:70:45:4f:7f:eb:45:ad:3c:f2:92:d7:f4:3b:97:
5c:4e:74:06:07:ea:60:d7:85:22:d8:55:99:24:d4:
15:a4:cb:ee:3e:9d:ec:25:43:e8:93:39:38:bf:cd:
c2:d8:e5:0b:1b:cc:59:6e:a3:ea:ea:23:fc:81:c2:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.232.0/21
45.136.76.0/22
81.85.64.0/22
IPv6:
2a04:6fa0::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58141
Signature Algorithm: sha256WithRSAEncryption
5f:ad:e7:9b:c8:d4:fa:05:20:26:df:ae:89:78:2a:3e:58:82:
a1:76:12:0c:4e:3d:c8:21:3b:2d:1f:98:65:18:a8:ba:be:40:
46:1d:21:8f:7e:47:e7:78:bd:5e:1e:e4:95:c8:ab:43:e6:e4:
b0:60:fb:c0:8c:cf:14:37:1e:82:ff:64:b7:49:1d:ab:6f:90:
6b:a0:b7:35:8f:5d:93:13:b0:76:5b:ee:84:1f:dc:6a:de:32:
45:58:e4:0c:0b:87:b2:e8:4f:7f:ec:7b:7f:a5:36:e3:f5:6e:
41:1d:2f:8c:a8:3b:e9:46:0c:b8:c7:dd:e1:70:cb:a4:65:70:
24:21:b9:05:62:fa:84:9f:65:41:2f:13:59:89:e3:54:51:af:
44:d6:86:35:23:c0:fc:e7:94:b4:e5:3e:ee:e9:23:50:81:1a:
7a:10:e3:3b:79:b4:e2:fa:f5:c6:1b:ff:49:e5:38:aa:01:a8:
01:f9:8c:e8:26:e4:a5:f9:51:53:29:6a:46:67:42:10:9e:a9:
bd:5f:31:2c:da:35:b9:09:89:77:2c:9b:91:f9:51:4d:34:3f:
09:9b:d5:b2:3f:34:74:b6:89:16:9d:de:20:0a:61:d9:06:a0:
95:68:76:97:27:2f:fd:3e:b7:49:7a:7e:44:f3:24:69:05:9c:
3b:83:f1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 14:57:14 2026 by rpki-client