Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer
File: 7enwFkj2hDY4I6bY7srOV5unt_8.cer (raw, json)
Hash identifier: 4umWlYM7Pzggs453s2ZSzEOcYxcWcPhtRaaj4v7Pp54=
Subject key identifier: ED:E9:F0:16:48:F6:84:36:38:23:A6:D8:EE:CA:CE:57:9B:A7:B7:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA6865D5636902DF5335D7454FB467
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212234
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:68:65:d5:63:69:02:df:53:35:d7:45:4f:b4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ede9f01648f684363823a6d8eecace579ba7b7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d7:3b:29:77:2b:b8:a7:9d:96:f0:be:bb:f2:
cb:bd:0b:cd:2c:5d:56:ec:94:1a:f6:77:5f:d5:d7:
df:31:7c:c2:34:fa:2b:d3:2d:a5:4a:ff:7d:d1:40:
9f:37:cd:52:f0:24:a9:66:88:e3:e8:53:fa:25:f5:
a9:03:28:b0:7a:3e:ad:55:89:7c:af:54:82:ba:f5:
e9:1d:ef:97:ea:26:b0:79:fd:8e:27:a6:e6:a1:73:
ce:42:1b:1b:ea:97:ff:e0:24:a3:06:8b:d7:b4:57:
a2:d9:70:da:53:05:1e:29:ba:7e:fc:19:39:b6:75:
25:3f:07:40:0a:1e:d6:5a:ed:ef:18:8a:63:f9:89:
05:20:84:98:5e:be:f2:f6:ab:68:42:ad:65:03:5c:
5b:9b:e2:21:f2:80:86:8b:da:1c:24:53:dc:07:92:
c4:c2:4a:27:ab:ee:56:40:79:ba:22:68:b4:05:a9:
7d:05:5f:fc:48:d2:1f:b5:20:ee:69:8e:ac:26:98:
9d:d7:28:cb:93:49:b3:56:6c:97:a2:f4:59:91:bf:
a0:4a:67:09:3c:c4:83:37:57:2c:b6:58:b6:18:df:
57:6e:02:a5:14:30:ce:12:51:62:25:2d:a6:c6:d1:
c0:07:8e:35:58:16:d0:07:a4:37:48:fd:58:88:9a:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E9:F0:16:48:F6:84:36:38:23:A6:D8:EE:CA:CE:57:9B:A7:B7:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212234
Signature Algorithm: sha256WithRSAEncryption
56:41:04:46:e6:86:f3:96:d5:ae:41:49:a2:7d:f5:2a:18:94:
ef:0c:00:ab:4e:3c:b9:52:70:15:fd:cf:b1:01:65:e4:51:7d:
50:19:74:02:20:ac:94:30:7f:e9:b0:1c:c2:58:24:4a:84:75:
70:93:d8:7a:dd:c1:f2:eb:43:9a:a2:39:02:fc:94:d6:84:9e:
1a:26:c9:4e:fb:a7:b1:64:a3:41:89:b4:a4:78:2e:f8:aa:58:
03:9a:b9:c1:c8:d6:54:ff:95:1e:c9:45:8f:b2:31:67:bf:01:
be:d4:a9:33:5f:51:00:6c:63:3d:37:ff:ad:ac:d2:d5:6d:42:
fb:98:b3:45:e3:b0:c3:4a:17:38:b5:42:d5:0f:6d:f6:81:b2:
11:35:80:af:89:10:0a:ad:99:54:8c:e3:ea:b4:64:94:b3:46:
de:f2:91:d8:f1:bb:5e:20:47:e3:c2:a5:72:7c:92:cf:00:fc:
72:8f:54:6b:91:bb:a4:34:00:1c:6f:c0:79:55:d4:33:e7:04:
5c:ba:42:26:6d:12:c3:8d:96:5c:d4:40:29:1d:96:9b:24:5d:
51:b5:12:08:ff:e6:0e:7f:00:6a:57:30:98:6c:5f:b3:05:7d:
67:65:d7:58:01:9f:da:8f:24:14:19:5c:04:31:6a:09:13:fc:
d8:0e:d9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 18:47:47 2026 by rpki-client