Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
File: SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer (raw, json)
Hash identifier: ctN3fmX3Kyya3jnHgXatg3cl4M0jyHFOH0k6Q4WMqns=
Subject key identifier: 49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E654780DA244A77A0CFC534F8545677A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 26 May 2026 17:14:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208471
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:65:47:80:da:24:4a:77:a0:cf:c5:34:f8:54:56:77:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 26 17:14:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=491b7ad04eef0b313e6d2e226b92eaf277aef85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:47:94:36:d2:c9:bc:6d:3a:ae:f0:03:c7:93:
bc:2c:8d:79:a4:09:28:10:55:d6:e2:31:07:bd:40:
f7:1d:e9:23:46:57:f5:14:af:4f:78:35:c3:f8:02:
47:14:fb:b3:4e:e9:3b:31:b2:3a:35:ea:6e:a4:e1:
eb:6e:d8:d9:71:5c:da:45:cc:96:40:4e:6a:ac:42:
ca:09:13:a8:8f:34:3a:e3:8a:7b:00:e3:62:c1:56:
8f:76:38:90:7e:7b:07:4f:8b:0b:22:ae:10:94:12:
40:70:4c:8a:3e:2a:dc:6a:6a:d9:48:dc:a0:52:1c:
26:54:0c:6c:8b:49:67:bb:fa:4e:79:b3:ae:c1:79:
ff:07:47:a3:bb:98:cb:54:b7:29:85:30:a5:7f:1b:
71:37:9d:1f:51:4a:af:d0:87:c4:ef:0b:4b:40:04:
63:29:f8:90:8c:19:8f:a1:de:43:61:84:39:ee:02:
0d:dd:bf:9c:04:8a:dd:d4:f6:98:41:f2:c4:f6:6f:
2f:68:13:64:dc:f9:85:74:ac:73:f9:67:70:2f:9d:
1c:a3:7d:66:ec:9b:43:58:de:4b:1a:c3:04:25:4a:
23:07:bf:d1:19:5f:61:37:2a:86:37:22:ff:25:8c:
f8:f4:46:fd:04:cb:dd:10:d0:df:f4:e2:4a:d3:62:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208471
Signature Algorithm: sha256WithRSAEncryption
93:d7:66:a1:a7:a6:e8:6d:83:2b:78:57:6c:44:54:57:33:44:
e0:69:08:fa:bc:8e:d8:38:52:fa:8f:05:85:17:dc:a6:c9:cf:
9c:b0:dc:b8:ab:4b:d5:34:51:f7:99:3a:76:88:70:51:70:05:
7b:48:d9:49:23:e9:e1:02:59:91:7b:e3:90:ed:6f:dc:55:82:
e4:09:89:f8:9c:6a:d1:2a:03:ab:8e:52:35:9f:25:05:a4:6f:
c9:39:60:58:81:b1:9d:a1:7e:b0:55:a7:dd:29:33:da:70:69:
2a:1a:d4:f2:d6:c8:99:ba:aa:c0:d2:b3:32:75:12:b0:dc:e8:
8e:1f:35:31:a5:38:ab:c5:10:da:59:aa:4d:49:ae:e8:c9:22:
dd:e8:a0:ae:2b:d5:f4:6c:74:5f:03:57:6c:73:a3:dd:0b:4e:
36:63:4b:c5:16:39:66:fd:69:d8:07:58:43:8e:13:4f:e6:1a:
7a:27:3c:7e:0a:99:b0:d1:aa:60:c7:70:33:06:2f:d3:62:cd:
99:26:13:fd:f2:a2:9f:1e:5c:bf:9b:25:47:78:a5:b5:d7:7d:
a1:bb:17:0c:df:a8:b0:a0:a4:29:e9:a5:a9:3c:0e:62:52:3a:
4c:0b:21:cc:39:6d:2a:8f:2a:0c:88:cb:e0:0e:d4:88:84:25:
fc:51:66:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:42:25 2026 by rpki-client