Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G5DWkin4ACqN6FHczVx6W2Uy0Ck.cer
File: G5DWkin4ACqN6FHczVx6W2Uy0Ck.cer (raw, json)
Hash identifier: ANSEdyl81Kq9Rs+XmzF/MJSgWhjwCCSwGZsb4CNwTRk=
Subject key identifier: 1B:90:D6:92:29:F8:00:2A:8D:E8:51:DC:CD:5C:7A:5B:65:32:D0:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EF46D1C9D2D0BED177B07FD2A3D25AE05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/G5DWkin4ACqN6FHczVx6W2Uy0Ck.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 23 Jun 2026 12:20:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213409
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:6d:1c:9d:2d:0b:ed:17:7b:07:fd:2a:3d:25:ae:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 23 12:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b90d69229f8002a8de851dccd5c7a5b6532d029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:1b:12:3a:3c:2d:61:f6:65:94:e3:8f:8f:
bf:22:9b:7e:b3:61:68:38:7e:ac:8a:f1:68:c1:38:
c6:00:35:76:48:5f:2a:d2:19:7b:c8:8f:41:4e:2c:
58:a3:9c:b5:c5:39:b9:5c:d4:19:25:a2:46:05:f5:
f1:a7:b4:5b:8a:1b:bc:97:9b:8d:6b:82:5f:f9:24:
6b:15:04:44:b6:a6:f4:1b:63:fa:be:9b:bc:e4:84:
30:30:21:c6:05:cc:97:c5:49:7b:2f:e2:d2:8f:d7:
0e:7d:e8:af:d5:fd:31:63:05:fb:6a:df:7f:ed:90:
de:d9:8b:dd:03:85:8d:c7:1a:d1:cd:f6:33:ec:6b:
4e:48:7b:0d:b5:ee:9b:6b:8a:37:dd:11:95:78:b2:
48:6f:d6:37:2f:ae:d8:11:d5:37:db:9b:4a:8d:4b:
af:95:2a:4d:44:91:35:ee:9d:89:13:c1:fa:66:1b:
ee:1d:5b:bd:6c:4f:25:9b:5e:59:72:32:12:ea:ab:
9f:48:04:84:4f:36:be:0e:01:19:47:c2:bc:6d:fc:
f2:65:09:24:02:4c:31:1c:1f:05:77:ad:13:9c:2b:
34:32:fa:f7:30:d5:df:e4:31:9b:fc:df:4d:00:f0:
f5:e6:3a:9c:d6:5a:d9:5d:2e:e5:54:e7:ca:6a:8f:
b0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:90:D6:92:29:F8:00:2A:8D:E8:51:DC:CD:5C:7A:5B:65:32:D0:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/G5DWkin4ACqN6FHczVx6W2Uy0Ck.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213409
Signature Algorithm: sha256WithRSAEncryption
a1:dd:e0:76:7c:6f:79:f9:d1:7b:90:8d:5e:e2:55:20:45:d7:
97:c1:be:ad:79:b0:da:b2:03:08:ff:3e:b3:c5:85:c2:e8:23:
e5:81:30:4f:80:38:39:bd:8f:2e:74:78:e0:60:f3:ea:b5:1e:
40:b7:d4:9b:c9:48:e0:aa:2f:70:ec:55:5e:86:aa:1c:01:14:
7f:ef:56:c0:2e:74:61:0f:0f:db:20:55:1f:5e:c4:c9:2b:34:
57:42:ff:00:8d:ec:77:a5:16:7f:3f:e9:d6:dc:a2:72:90:b3:
84:2b:0d:a0:74:e2:d0:3e:b4:ad:dd:0d:92:df:c2:88:ef:d5:
97:3e:cf:8a:5d:5f:04:e8:7d:82:2d:0e:07:32:be:95:c7:5f:
51:7a:48:d6:9a:14:3e:55:33:55:b3:11:3e:26:62:59:bc:ed:
e1:e6:b3:8d:07:b0:aa:f0:0d:9d:59:57:25:19:d3:fc:92:8b:
7e:41:85:c0:7c:c1:73:6c:ea:bd:29:57:59:91:2e:cd:8b:dc:
d2:8e:05:47:9b:aa:29:21:f7:c1:ec:99:c0:d1:df:1a:42:98:
ab:83:9b:5b:84:bf:ab:6a:9b:d8:fa:f4:1c:0f:94:65:0b:67:
fb:b1:95:07:36:64:fb:5a:7b:52:44:a8:bd:5a:6c:26:f5:71:
e7:98:ed:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:40 2026 by rpki-client