Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39GW5f7o67goOs_2Ht3xQmMc9LM.cer
File: 39GW5f7o67goOs_2Ht3xQmMc9LM.cer (raw, json)
Hash identifier: 40D346kHHa+NUeQGTxMxq/Yi5JKZtrNWaRYIYFjawMQ=
Subject key identifier: DF:D1:96:E5:FE:E8:EB:B8:28:3A:CF:F6:1E:DD:F1:42:63:1C:F4:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D556C061D41C3E4016B30DB00B733F62C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/6793ef-6228-4732-b872-5b9459327d43/1/39GW5f7o67goOs_2Ht3xQmMc9LM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/6793ef-6228-4732-b872-5b9459327d43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 Apr 2026 22:17:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201422
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:55:6c:06:1d:41:c3:e4:01:6b:30:db:00:b7:33:f6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 3 22:17:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfd196e5fee8ebb8283acff61eddf142631cf4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:e7:d3:1a:4a:6a:1f:ba:9c:c0:c4:bb:e3:
60:5a:7f:20:c3:61:43:a7:b6:c1:3a:41:03:39:e6:
06:ad:8b:c1:8a:a8:41:60:04:98:cc:af:97:a9:c5:
92:28:8b:22:f7:00:6e:5d:3d:13:c9:ec:0a:17:65:
69:70:5b:9f:d4:62:f7:75:8a:f4:d6:37:0c:fb:75:
19:b3:78:75:29:93:81:42:19:71:c4:5d:3b:ad:e2:
3e:91:83:c0:61:1e:6f:ba:aa:fa:66:57:f9:56:0f:
28:77:fe:a7:8c:a5:ce:fb:1f:2f:62:87:5a:84:3f:
66:66:72:d7:15:8d:e2:a5:aa:f7:77:79:55:00:31:
24:90:45:fe:f5:a9:f5:5e:c8:bc:4d:49:64:e3:c8:
4b:d0:d6:04:e9:2b:1d:a1:06:c3:c4:96:b1:ba:0b:
5a:5a:64:79:0c:37:ad:8f:bd:ab:8f:76:8a:c1:7d:
27:46:63:e9:37:f7:dd:b5:60:4a:94:5f:e2:9e:da:
fc:ed:b8:0d:84:aa:24:e7:bd:eb:a8:82:eb:4f:f8:
4f:cb:68:3f:6d:86:dd:54:cc:6f:92:05:ec:1f:bc:
88:80:8c:db:9a:70:0d:e3:de:f8:9a:fb:d8:47:a9:
53:56:57:e2:d7:60:88:08:b0:38:9a:46:1a:14:d7:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D1:96:E5:FE:E8:EB:B8:28:3A:CF:F6:1E:DD:F1:42:63:1C:F4:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6793ef-6228-4732-b872-5b9459327d43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6793ef-6228-4732-b872-5b9459327d43/1/39GW5f7o67goOs_2Ht3xQmMc9LM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201422
Signature Algorithm: sha256WithRSAEncryption
26:03:a7:f9:ce:bb:2c:a1:d8:12:44:3a:ff:40:2b:ed:d7:85:
3d:80:02:98:18:42:08:4f:5d:09:be:32:7d:82:d2:25:b1:f9:
bb:10:01:44:31:59:7c:cc:a7:50:ba:c5:a1:b3:a1:1d:ea:11:
40:46:88:65:6c:6f:d9:0b:fd:d9:97:3f:18:2e:2e:b9:cd:2a:
03:d4:ed:29:24:34:13:5e:55:58:b5:e1:f4:dc:e3:db:9c:f2:
82:7e:45:a7:15:f7:8d:ec:85:65:ee:af:54:d5:52:69:df:68:
8c:28:9b:26:a4:2f:6e:45:90:b3:f1:d7:0b:f5:4f:ea:60:f9:
8d:e2:8f:f8:30:86:c6:6d:af:dd:23:e2:52:c8:9d:7e:97:1d:
f1:9f:fe:3b:f9:c7:01:df:55:27:9d:29:dc:57:83:ed:ff:0f:
26:94:5b:78:af:ff:04:01:01:a9:24:81:dc:f2:67:40:49:d4:
a0:16:98:e5:db:d1:62:09:af:9e:f1:28:28:94:6f:3a:9c:5a:
fa:fe:6f:21:ce:9f:48:cc:83:02:44:57:25:89:44:18:e8:01:
c2:c5:69:84:64:ed:e4:37:5d:e8:46:30:8c:f2:a7:24:29:b8:
95:0c:5d:84:74:46:82:3f:78:5f:1f:0f:ee:54:3c:6e:07:72:
e7:34:10:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:07:44 2026 by rpki-client