Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer
File: PshCEgyAPRfDmjB1VXdTzZ96Z_E.cer (raw, json)
Hash identifier: 58V3ekVjR3SQvYSitT36T1Yo8EtCh3UOWjO6fvOrK3M=
Subject key identifier: 3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DE7CA9C159D406DD76A91E8D4FAB71320
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 02 May 2026 08:25:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214344
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e7:ca:9c:15:9d:40:6d:d7:6a:91:e8:d4:fa:b7:13:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 2 08:25:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ec842120c803d17c39a3075557753cd9f7a67f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:c6:d1:b1:21:33:31:cb:50:62:41:98:bc:
75:1f:4e:5c:c1:50:a2:de:c9:cf:4f:ae:76:7f:5e:
c4:ee:61:a6:e8:5a:2e:da:04:36:a8:dd:03:bf:8f:
c4:37:0c:13:db:8d:9b:4f:2b:b9:68:27:0a:bc:10:
f3:4f:23:70:27:c9:16:c1:13:cb:a6:c8:82:23:04:
17:89:33:f1:c0:81:c2:5f:49:29:10:ef:9a:19:43:
9a:2d:61:e2:65:5e:04:1e:93:47:71:5b:ab:2c:94:
0b:20:30:d3:fc:66:36:49:eb:e7:55:a6:45:96:82:
23:63:39:ef:ba:2c:1c:d0:41:46:8d:af:e9:8b:f0:
9f:c1:c8:a9:38:a7:44:2c:1a:0e:17:12:cd:e8:d2:
f9:68:6b:69:5e:a5:78:c5:04:6e:4c:7a:72:11:b5:
96:1f:a4:e4:2c:8c:a8:15:b5:24:dd:34:73:3e:70:
d0:c5:f4:6e:40:3e:1a:62:f8:f9:95:6a:2e:1e:b0:
71:34:67:ec:d5:18:d2:ca:cd:d2:94:bb:1e:f3:f6:
e5:15:41:b0:bf:bf:a3:b7:a6:9d:4d:3e:bd:eb:e7:
7d:81:8a:47:f5:44:39:d8:a7:aa:33:f2:18:98:07:
1e:ac:27:44:78:aa:a0:b0:2b:f6:7e:29:01:df:9a:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C8:42:12:0C:80:3D:17:C3:9A:30:75:55:77:53:CD:9F:7A:67:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/0/3EC842120C803D17C39A3075557753CD9F7A67F1.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214344
Signature Algorithm: sha256WithRSAEncryption
a7:fd:fb:22:a1:ee:84:fe:56:bd:e8:7d:f5:ce:10:79:43:4d:
45:a8:d0:7a:3e:c8:a0:b9:cd:e7:98:f6:a9:07:1a:fc:fc:2e:
b8:c0:d9:bb:20:94:8f:10:95:c6:6e:65:18:2e:5b:11:9f:37:
c8:f5:b9:42:d3:05:37:67:3c:33:05:54:a0:24:92:aa:19:75:
78:a9:ad:17:a4:88:04:59:a0:ce:b5:0b:70:91:c0:07:cb:7b:
a9:3b:da:8c:e4:33:12:22:34:e1:fa:37:db:71:38:a1:65:a3:
08:ff:55:b0:5e:32:9b:83:5b:c1:10:86:db:13:b2:69:51:07:
fb:0f:3d:85:61:df:e1:66:c8:8c:f5:e0:20:6b:99:c4:a3:4d:
a6:e0:f1:dd:07:ef:b1:4b:8b:d7:80:fe:f5:6c:31:6c:47:30:
4e:c7:55:d6:d6:31:dc:bb:64:f5:1d:06:14:6c:24:5f:94:6f:
a2:bd:42:f6:7c:1d:fb:2d:38:03:de:79:a7:6f:85:76:27:a4:
fa:b8:5a:10:69:0b:77:26:1c:c4:ba:bc:25:f9:3b:ac:82:28:
80:1c:fa:e9:0b:b7:b0:5e:c3:3e:60:b5:75:53:87:e2:f0:37:
44:69:df:1a:66:77:8c:32:2a:a3:91:fd:77:7d:5f:51:a8:d8:
b7:69:bf:78
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZ3nypwVnUBt12qR6NT6txMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNTAyMDgyNTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWM4NDIxMjBjODAzZDE3YzM5YTMwNzU1NTc3NTNjZDlmN2E2N2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7TG0bEhMzHLUGJBmLx1H05cwVCi
3snPT652f17E7mGm6Fou2gQ2qN0Dv4/ENwwT242bTyu5aCcKvBDzTyNwJ8kWwRPL
psiCIwQXiTPxwIHCX0kpEO+aGUOaLWHiZV4EHpNHcVurLJQLIDDT/GY2SevnVaZF
loIjYznvuiwc0EFGja/pi/CfwcipOKdELBoOFxLN6NL5aGtpXqV4xQRuTHpyEbWW
H6TkLIyoFbUk3TRzPnDQxfRuQD4aYvj5lWouHrBxNGfs1RjSys3SlLse8/blFUGw
v7+jt6adTT696+d9gYpH9UQ52KeqM/IYmAcerCdEeKqgsCv2fikB35qr0wIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFD7IQhIMgD0Xw5owdVV3U82femfxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2I5NmI2
MTEzLTg1ZWEtNGZjMi1hZWQ0LTFmODY1ZDBhZDQ0NC8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjk2
YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFkNDQ0LzAvM0VDODQyMTIwQzgw
M0QxN0MzOUEzMDc1NTU3NzUzQ0Q5RjdBNjdGMS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDRUgw
DQYJKoZIhvcNAQELBQADggEBAKf9+yKh7oT+Vr3offXOEHlDTUWo0Ho+yKC5zeeY
9qkHGvz8LrjA2bsglI8QlcZuZRguWxGfN8j1uULTBTdnPDMFVKAkkqoZdXiprRek
iARZoM61C3CRwAfLe6k72ozkMxIiNOH6N9txOKFlowj/VbBeMpuDW8EQhtsTsmlR
B/sPPYVh3+FmyIz14CBrmcSjTabg8d0H77FLi9eA/vVsMWxHME7HVdbWMdy7ZPUd
BhRsJF+Ub6K9QvZ8HfstOAPeeadvhXYnpPq4WhBpC3cmHMS6vCX5O6yCKIAc+ukL
t7Bewz5gtXVTh+LwN0Rp3xpmd4wyKqOR/Xd9X1Go2Ldpv3g=
-----END CERTIFICATE-----
Generated at Fri May 15 06:14:18 2026 by rpki-client