Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5Vy2PhM92bs___gwvneO_Erg0U.cer
File: e5Vy2PhM92bs___gwvneO_Erg0U.cer (raw, json)
Hash identifier: WYTF+kqyzdRyIn030ZW/OFDnR4g5dofsCFu+YOXd/TU=
Subject key identifier: 7B:95:72:D8:F8:4C:F7:66:EC:FF:FF:E0:C2:F9:DE:3B:F1:2B:83:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D31EF76A26D897002F85E300D1DE2C4CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/7ec150-172c-4893-bd29-82c1a9d5e783/1/e5Vy2PhM92bs___gwvneO_Erg0U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/7ec150-172c-4893-bd29-82c1a9d5e783/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 28 Mar 2026 00:54:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199839
AS: 212389
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:ef:76:a2:6d:89:70:02:f8:5e:30:0d:1d:e2:c4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 28 00:54:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b9572d8f84cf766ecffffe0c2f9de3bf12b8345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:0b:66:9a:85:a4:00:0b:97:f7:e0:3f:84:
96:5f:b7:0e:2e:92:d1:d7:51:28:9b:d2:76:68:cc:
90:26:64:ef:59:11:51:a9:4e:f6:71:f5:7d:c9:9a:
d0:dd:08:3e:1d:78:39:c1:02:c7:24:99:e5:13:5c:
87:7e:1e:f7:5b:92:5f:9b:ee:55:f0:9b:9f:e0:33:
a0:12:3f:2c:f2:6f:9a:ea:e7:96:e4:12:05:00:66:
96:c9:84:fc:a8:b9:f8:17:a4:fa:35:8a:f0:69:9f:
03:64:f4:a5:2e:b7:dd:1a:95:30:2a:8a:f5:a6:d5:
4a:ec:89:d0:90:39:6e:7b:84:a9:40:1d:b7:6d:90:
5d:d4:b5:e8:aa:ac:3a:e4:b8:ee:f7:14:5a:0a:8b:
b4:3c:8a:b3:3b:2d:d7:1d:cf:4e:02:42:25:41:58:
2f:99:85:96:d9:92:5f:42:18:a0:ad:fa:9e:85:45:
82:56:16:ca:c9:3b:c5:47:ea:9e:96:b9:1f:d6:1e:
67:97:47:59:14:a0:1c:86:3c:90:e2:09:f6:22:1a:
24:1e:bf:33:02:ba:60:27:3b:b4:39:22:fc:be:01:
79:11:43:ed:dd:bb:b2:9c:e6:7f:95:51:ae:88:84:
de:62:d9:16:49:5c:d9:9f:e3:01:8a:6d:b4:ca:ee:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:95:72:D8:F8:4C:F7:66:EC:FF:FF:E0:C2:F9:DE:3B:F1:2B:83:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7ec150-172c-4893-bd29-82c1a9d5e783/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7ec150-172c-4893-bd29-82c1a9d5e783/1/e5Vy2PhM92bs___gwvneO_Erg0U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199839
212389
Signature Algorithm: sha256WithRSAEncryption
12:19:91:bc:18:71:a7:99:4e:c7:e2:54:4e:13:a8:e9:59:c0:
05:9c:8e:b5:7b:62:ca:86:d6:5e:75:1d:11:a8:9d:0a:62:93:
6c:9f:26:1a:44:f5:f7:d8:2e:01:76:cb:91:ac:6a:8d:14:b3:
22:42:fb:98:24:13:8b:d4:97:10:52:73:e2:09:57:8b:d4:ed:
6c:a9:3d:f7:c4:0b:54:01:34:49:4d:dc:cf:98:f1:73:6a:f3:
c3:df:3a:73:92:b0:d3:0b:4a:ce:99:69:58:c9:eb:ca:55:47:
1b:70:38:f8:e3:96:42:e6:9a:dd:83:0f:93:cb:20:36:2c:dc:
5f:f6:16:5e:88:b9:bd:30:63:99:6b:83:bc:c5:77:d6:7d:fa:
e5:e5:6a:48:11:63:b2:92:92:7d:1b:fe:dd:39:49:c0:c1:28:
66:6d:31:62:3d:47:72:04:4d:32:05:9c:1d:54:0e:86:f3:b6:
1e:cb:a6:d8:88:0b:ab:5c:2f:7c:1e:d4:7c:e1:c8:a1:f0:e3:
ed:90:6d:b0:1e:52:53:fa:85:8f:c5:b7:c1:23:6b:03:d2:05:
8e:79:d3:e8:2f:57:c4:58:c9:18:3d:28:aa:9a:f3:f2:49:f1:
bb:96:19:35:07:ff:fb:d2:2b:c2:d7:1a:54:1c:3d:ea:cf:f3:
cf:98:c7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:42:22 2026 by rpki-client