Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/McdRr8ueHJZqz3YmDJA6K7GvYC4.cer
File: McdRr8ueHJZqz3YmDJA6K7GvYC4.cer (raw, json)
Hash identifier: NqvPAPUQ/uwqGT7x9nBhgNJ2P4QC5tc09CetjpXROkc=
Subject key identifier: 31:C7:51:AF:CB:9E:1C:96:6A:CF:76:26:0C:90:3A:2B:B1:AF:60:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E60FF1C1AD485BE41A6617F6BED457108
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 25 May 2026 21:16:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201132
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:60:ff:1c:1a:d4:85:be:41:a6:61:7f:6b:ed:45:71:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 25 21:16:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31c751afcb9e1c966acf76260c903a2bb1af602e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:47:ab:97:93:e0:ec:ca:bc:5e:5b:d8:d2:
55:a4:83:2b:fe:5f:68:cc:e5:c0:12:99:13:93:5f:
25:73:a8:d4:b6:70:1e:1c:1a:5a:f1:c5:88:a5:2e:
64:b1:ce:49:97:d9:7b:35:93:a9:9c:8d:55:ff:57:
83:79:a3:cf:55:0d:6f:dd:e1:c3:e2:05:6f:d2:63:
13:32:94:4a:64:1c:b9:b7:2d:b3:c9:04:1c:6e:92:
9e:b9:30:8b:1f:1b:72:10:19:65:f7:ec:9c:42:e8:
7e:3a:a7:9e:92:e3:7e:e6:c1:2b:5b:cb:a0:08:ea:
8b:fa:fe:dd:61:08:5a:24:2b:5e:16:49:b3:98:2c:
f9:01:f6:3a:05:56:89:ac:2f:89:b3:f3:2c:89:ce:
5c:c3:69:cd:b5:a9:d1:1a:6d:69:c1:ca:b8:cc:dd:
c3:2d:2a:41:6b:37:e3:98:62:92:41:53:32:75:01:
ad:b1:6d:87:5c:de:f5:af:0c:e3:c2:f8:83:4c:d2:
2f:08:4c:35:5a:15:dd:23:1f:e3:99:35:78:5e:af:
44:f6:13:20:b5:8a:76:0a:6c:ca:91:d2:c1:01:8d:
7c:43:f8:bb:6b:e8:6d:22:44:a2:85:f2:85:79:49:
2f:f8:c6:9c:f3:b9:9f:74:72:06:21:72:7c:7f:5d:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C7:51:AF:CB:9E:1C:96:6A:CF:76:26:0C:90:3A:2B:B1:AF:60:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201132
Signature Algorithm: sha256WithRSAEncryption
a5:d0:9b:f2:c2:0e:ec:24:c5:ce:3b:3d:86:e8:29:92:31:c3:
35:74:44:ba:12:03:2d:bf:90:df:d1:5f:ba:0f:4b:1a:66:7f:
37:ce:b6:29:f6:00:c1:87:b0:27:5b:b3:c9:8e:7d:5d:6b:58:
da:29:0e:b6:33:d4:ca:05:26:c7:b1:ec:38:8f:bc:39:58:fc:
96:9f:be:e0:62:98:87:c7:30:d6:19:2f:b8:67:5e:4a:ad:e1:
c5:d5:da:28:de:51:21:24:81:4e:e6:05:e4:80:f7:56:a2:be:
52:e4:67:de:e9:61:2e:5f:af:2a:eb:e7:32:1a:cd:dd:80:1a:
15:6b:4d:1d:74:4e:0a:4e:c5:3e:f5:2f:66:bd:88:7f:3d:42:
18:68:c0:6b:00:8d:02:77:42:81:98:02:60:2b:e5:ab:7d:17:
57:85:52:e8:29:58:97:ab:0e:07:08:3b:15:37:2d:9c:1d:1f:
33:40:2e:73:6c:77:ce:d1:9e:ab:73:9e:df:47:3a:49:62:21:
36:06:e6:94:15:e9:33:e9:2f:17:e5:f1:06:ba:4d:59:78:f7:
4f:bd:8e:6a:5e:44:40:03:4d:b7:1b:da:85:d7:66:44:be:c9:
d0:36:03:22:f7:63:e3:ad:0c:c4:c1:c5:7b:79:77:b4:e9:c0:
ed:78:38:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:50:24 2026 by rpki-client