Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e25aru9TlinMasqMmqETMUq4UUU.cer
File: e25aru9TlinMasqMmqETMUq4UUU.cer (raw, json)
Hash identifier: aokvekbKhRMCsEtq0VmoGEgUrYboJvj2GR7gmQ+1R5A=
Subject key identifier: 7B:6E:5A:AE:EF:53:96:29:CC:6A:CA:8C:9A:A1:13:31:4A:B8:51:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CEE109171D89C71ED6C86E91E04656C61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 14 Mar 2026 20:36:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213427
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ee:10:91:71:d8:9c:71:ed:6c:86:e9:1e:04:65:6c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 14 20:36:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b6e5aaeef539629cc6aca8c9aa113314ab85145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:78:97:1c:4e:fa:5d:c4:44:f3:ce:66:09:f2:
00:a7:67:28:ef:08:47:12:6b:e4:38:a0:b7:e7:21:
de:29:fb:62:67:a3:5c:90:c2:c4:54:85:16:15:02:
53:60:23:fa:0d:fe:3c:27:be:24:b3:13:96:c2:ee:
fc:bd:74:b9:4a:98:3f:f3:cc:54:db:cd:6c:7e:c7:
55:5d:55:e0:12:07:96:ce:f8:b5:bd:88:e7:87:5f:
3f:a2:25:6f:85:e5:c4:23:2b:29:db:b9:74:e5:6d:
5e:27:de:62:87:dc:fd:f9:83:26:ca:31:27:55:a5:
b3:e7:9b:a1:7c:44:e7:cf:17:da:a3:a8:2b:55:5d:
e2:06:ea:db:4b:39:d6:64:e8:be:70:93:aa:24:33:
c1:2b:56:b6:80:b9:fb:56:14:37:0d:4c:c6:0b:17:
f6:44:dc:95:a2:a4:f0:b8:91:00:16:68:b4:21:04:
43:d7:99:68:9e:b4:0f:a6:18:3c:53:44:09:e7:0b:
6e:95:a5:c7:d7:fe:a2:d0:e2:0b:2b:64:d0:92:59:
44:d3:4d:a0:ef:65:6c:ff:5f:89:cc:a4:cf:2a:8d:
c6:86:42:2d:e0:8f:bb:a0:4f:a4:bd:d4:fc:e1:6f:
3b:bf:3e:9c:72:b6:b3:96:95:3d:1b:bb:7a:ed:b2:
2f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6E:5A:AE:EF:53:96:29:CC:6A:CA:8C:9A:A1:13:31:4A:B8:51:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213427
Signature Algorithm: sha256WithRSAEncryption
01:ed:3e:92:2c:b9:24:13:10:83:0f:03:1c:99:77:a5:91:0d:
f1:75:f9:16:10:1e:49:16:4b:5a:c4:ee:d2:42:f0:d5:34:1e:
0a:ff:77:70:01:b1:92:0a:40:ee:6c:0c:7f:a4:9e:1f:d7:a4:
45:c1:53:c5:87:f3:86:90:ce:fe:94:2d:c2:87:56:77:da:83:
9b:ff:47:1f:8a:9c:b6:c0:ac:20:81:d2:b9:72:0c:ad:e0:00:
5d:98:89:5a:8f:ad:4d:a3:9b:2e:90:6b:5d:41:5d:e6:77:ee:
a1:c4:d8:81:1f:7c:3c:83:68:1c:52:67:09:81:8b:11:98:3d:
9e:e2:31:a9:48:00:88:0e:bb:c1:88:53:fa:65:98:25:e8:0c:
42:82:00:2d:43:bd:34:da:64:dc:03:30:ca:2d:40:25:31:93:
82:a8:3f:1a:2f:10:ea:ac:0d:9c:2a:94:98:e2:7f:62:57:9f:
a3:65:b2:d4:03:53:d4:f7:0a:e3:4b:25:28:b0:65:a6:0c:f3:
b7:b9:82:56:52:b0:8a:fa:cd:b2:d3:91:01:7e:b3:c1:5d:48:
4b:14:3e:91:6a:72:df:ed:95:94:73:9b:26:11:86:88:61:e3:
10:d6:2b:b5:20:c1:61:20:60:d3:00:bc:d4:01:b4:40:f0:05:
e0:43:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:09:48 2026 by rpki-client