Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5YknkmnMNjptouYK7T8ahQMQFp8.cer
File: 5YknkmnMNjptouYK7T8ahQMQFp8.cer (raw, json)
Hash identifier: 1+iUAVXRAzkphC9F1Fgsl0wk8jt5ouggPrx45Z+hLXY=
Subject key identifier: E5:89:27:92:69:CC:36:3A:6D:A2:E6:0A:ED:3F:1A:85:03:10:16:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FFB8A15DF549927C1636A3CCA9FD4A37A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 13 Aug 2026 14:32:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213024
IP: 213.110.126.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:8a:15:df:54:99:27:c1:63:6a:3c:ca:9f:d4:a3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 13 14:32:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e589279269cc363a6da2e60aed3f1a850310169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:f0:f1:fa:83:c4:7b:91:4d:e6:eb:2c:c1:
db:b5:42:60:1e:6a:bb:f7:e9:67:8d:c8:bf:a3:c8:
fc:53:7f:5b:70:ee:c8:b6:05:e3:e3:e9:7e:21:ec:
00:5c:b1:cd:c4:74:44:ba:9c:2c:45:d6:01:f8:23:
d9:50:32:18:16:6e:ea:9c:53:50:35:74:f6:b3:2c:
ef:60:43:90:5b:22:6c:18:dc:93:94:a2:4d:f9:61:
1d:51:09:6c:a2:b3:63:9e:10:f6:1a:69:21:5e:18:
a8:3c:01:a9:74:c5:98:78:9b:bc:2c:23:91:26:be:
11:50:a9:c9:e2:5b:84:67:03:c2:e7:bf:a1:ab:98:
2c:88:d7:b9:fd:60:63:f2:1c:d1:d7:71:a9:8e:ab:
32:6c:bc:54:a6:fc:ad:e4:53:74:b9:e6:3a:80:47:
66:c9:94:12:60:bd:1f:53:9e:97:70:96:87:88:1a:
5c:04:76:3f:2f:5c:78:56:a9:62:b9:21:8b:6e:d4:
65:31:bd:40:2c:6f:28:80:b6:cb:4c:d6:6d:9d:1a:
1e:7d:10:ff:44:e5:cc:b5:6b:14:09:66:4d:9e:51:
39:9e:9d:98:09:65:8e:94:a4:1a:b5:c7:70:62:8a:
b9:9f:de:b1:9b:de:80:bf:96:3f:9d:e6:0c:e1:e5:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:89:27:92:69:CC:36:3A:6D:A2:E6:0A:ED:3F:1A:85:03:10:16:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.110.126.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213024
Signature Algorithm: sha256WithRSAEncryption
8e:66:8d:9f:ba:93:ae:3d:b9:96:a8:31:1b:d4:a5:19:48:78:
36:36:60:57:0a:0b:4d:e7:5b:49:59:8f:31:fb:6c:6b:3c:a2:
f2:96:55:40:38:a7:d7:78:5f:65:c1:53:49:32:c4:1f:4c:23:
fd:9d:f7:d0:5e:43:2d:5e:ae:54:db:6f:73:00:4b:33:92:01:
5c:a0:59:cb:3a:b4:bd:d8:82:b6:ff:f1:c3:45:f0:43:20:bd:
71:f5:0b:67:fd:26:86:c4:7b:ed:1e:aa:68:02:c8:2e:8c:69:
20:bf:2a:24:95:37:b5:79:29:09:18:f7:c8:f8:32:39:15:2d:
14:36:c1:fd:7a:5e:4f:fb:85:92:b9:ad:99:cf:cc:59:4d:a7:
c8:0a:83:a4:14:84:28:86:72:6b:5a:cb:fa:b2:44:10:23:a3:
2f:56:4e:66:45:00:63:59:72:9a:fa:ca:f8:4c:1b:f7:06:b9:
e6:b9:f0:87:21:dc:6b:6d:50:35:d0:64:49:54:ed:2c:db:3c:
b2:d4:6a:31:0f:d4:0e:b7:c8:09:37:ec:2d:07:b4:c5:03:56:
ba:65:b7:9a:71:7e:d7:08:2b:3c:e2:fb:d7:17:c8:7a:29:c8:
02:d9:12:4f:a2:b7:ff:cd:75:de:32:d0:6b:f7:6b:a1:ea:88:
39:2d:8f:21
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZ/7ihXfVJknwWNqPMqf1KN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODEzMTQzMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTg5Mjc5MjY5Y2MzNjNhNmRhMmU2MGFlZDNmMWE4NTAzMTAxNjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0snw8fqDxHuRTebrLMHbtUJgHmq7
9+lnjci/o8j8U39bcO7ItgXj4+l+IewAXLHNxHREupwsRdYB+CPZUDIYFm7qnFNQ
NXT2syzvYEOQWyJsGNyTlKJN+WEdUQlsorNjnhD2GmkhXhioPAGpdMWYeJu8LCOR
Jr4RUKnJ4luEZwPC57+hq5gsiNe5/WBj8hzR13GpjqsybLxUpvyt5FN0ueY6gEdm
yZQSYL0fU56XcJaHiBpcBHY/L1x4VqliuSGLbtRlMb1ALG8ogLbLTNZtnRoefRD/
ROXMtWsUCWZNnlE5np2YCWWOlKQatcdwYoq5n96xm96Av5Y/neYM4eUmAQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFOWJJ5JpzDY6baLmCu0/GoUDEBafMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzRhNzM5
Ni00MjVjLTQyMWMtOTJlNi0yOGFiYWJmZDY5NzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvNGE3Mzk2
LTQyNWMtNDIxYy05MmU2LTI4YWJhYmZkNjk3NS8xLzVZa25rbW5NTmpwdG91WUs3
VDhhaFFNUUZwOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQA1W5+MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwNAIDANBgkqhkiG9w0BAQsFAAOCAQEAjmaNn7qTrj25lqgxG9SlGUh4NjZgVwoL
TedbSVmPMftsazyi8pZVQDin13hfZcFTSTLEH0wj/Z330F5DLV6uVNtvcwBLM5IB
XKBZyzq0vdiCtv/xw0XwQyC9cfULZ/0mhsR77R6qaALILoxpIL8qJJU3tXkpCRj3
yPgyORUtFDbB/XpeT/uFkrmtmc/MWU2nyAqDpBSEKIZya1rL+rJEECOjL1ZOZkUA
Y1lymvrK+Ewb9wa55rnwhyHca21QNdBkSVTtLNs8stRqMQ/UDrfICTfsLQe0xQNW
umW3mnF+1wgrPOL71xfIeinIAtkST6K3/8113jLQa/droeqIOS2PIQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:24:43 2026 by rpki-client