Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
File: 49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer (raw, json)
Hash identifier: 491Ac94CvRuStqyJNNst7WQ86LpWamDhtBXAXpPEDDg=
Subject key identifier: E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C47CE1E327A5CF2ED8002B9B4A1B87A2C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Feb 2026 13:46:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201288
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:ce:1e:32:7a:5c:f2:ed:80:02:b9:b4:a1:b8:7a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 10 13:46:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fc:2d:bf:96:f4:6b:7e:0e:cf:eb:ce:3c:07:
5b:2a:64:54:2f:23:1a:74:c5:6b:27:d9:dc:94:a8:
1f:c6:68:a2:59:c6:ce:b9:a3:23:ce:c1:d6:1b:49:
9d:71:a3:ae:ba:ea:0b:c4:7d:af:49:90:35:72:69:
3f:50:dc:88:69:72:b4:dc:f8:ae:b8:95:24:7c:fd:
ea:82:af:02:d5:e8:67:ea:39:90:5e:90:c2:72:85:
77:38:7d:6b:45:4b:e9:ad:91:72:f4:9e:8c:75:ac:
a7:2e:06:34:97:7f:73:d1:7d:56:32:3b:39:41:3b:
46:0c:04:b5:85:2c:46:b4:2c:db:65:09:b1:28:15:
80:16:44:8b:8e:af:6b:c2:9e:16:73:72:53:d2:bb:
f1:f5:8b:c5:4c:0d:af:04:3a:06:42:bb:8c:c8:9d:
15:af:0f:7e:65:e1:e7:60:2b:db:b1:f7:ea:f6:d9:
92:d3:89:f3:7f:7e:50:68:d8:b4:fa:d2:0f:e8:26:
15:af:69:b4:ea:e9:80:8a:a6:8c:94:55:88:dd:cc:
eb:c0:ff:0d:d0:64:f4:19:af:8c:df:e3:58:6f:d9:
42:71:5e:44:00:b2:0e:8b:ab:0e:93:2e:72:19:55:
6a:f8:9a:7a:83:04:bb:96:86:f8:2a:73:a4:a1:c9:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201288
Signature Algorithm: sha256WithRSAEncryption
27:f2:7b:bf:d4:c5:d0:35:51:e7:b2:1a:b3:5c:7a:f5:a1:b2:
f1:f9:d5:f8:93:a8:b6:a1:ec:38:17:d9:79:b6:17:5d:62:1f:
fb:fa:d9:61:49:22:91:d1:00:bb:8a:5b:98:f8:0c:81:d7:9a:
f4:fe:1e:d6:14:39:76:64:65:46:89:ed:3d:dd:cf:fb:6b:5c:
e0:a8:56:63:ba:78:5a:a8:ce:ac:4f:70:5a:ef:05:2a:bb:07:
74:e1:a3:90:36:a9:e4:de:79:e2:70:4e:09:45:56:3c:a1:4a:
f2:5e:39:c1:bd:d2:cd:28:0a:69:c6:2c:1a:22:b3:27:b3:45:
b8:3a:3d:d3:f3:84:04:86:4e:41:20:ea:81:fd:87:e2:8b:d4:
5b:12:4e:29:1c:b1:a2:2e:98:91:0c:e8:e3:f2:58:29:d0:61:
03:11:da:dd:6c:1e:d3:4e:2f:19:04:95:4b:a7:fb:7b:e3:39:
09:b9:27:6c:07:32:ab:b8:f3:d1:32:3f:5b:6a:40:36:5c:77:
f5:68:a6:4a:be:a8:59:a9:b9:2b:02:1c:81:e8:c9:15:27:1a:
96:3b:90:c1:35:39:53:05:61:5e:d6:d1:c7:62:4e:3e:26:0c:
b6:a1:17:30:86:ec:37:2d:c5:5f:b6:80:da:0e:9d:35:79:3d:
3b:ed:af:24
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZxHzh4yelzy7YACubShuHosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjEwMTM0NjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2QyMmMwMTc4NDY1NmQ0ZjU2NjZlNzcwMzQ4MWEyZjcwODRlNGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/wtv5b0a34Oz+vOPAdbKmRULyMa
dMVrJ9nclKgfxmiiWcbOuaMjzsHWG0mdcaOuuuoLxH2vSZA1cmk/UNyIaXK03Piu
uJUkfP3qgq8C1ehn6jmQXpDCcoV3OH1rRUvprZFy9J6MdaynLgY0l39z0X1WMjs5
QTtGDAS1hSxGtCzbZQmxKBWAFkSLjq9rwp4Wc3JT0rvx9YvFTA2vBDoGQruMyJ0V
rw9+ZeHnYCvbsffq9tmS04nzf35QaNi0+tIP6CYVr2m06umAiqaMlFWI3czrwP8N
0GT0Ga+M3+NYb9lCcV5EALIOi6sOky5yGVVq+Jp6gwS7lob4KnOkockIDwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFOPSLAF4RlbU9WZudwNIGi9whOT5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0L2E0MmZm
Yy00Yzg3LTRhZmUtYTE4ZC01ZDlmNTUwMjgyYTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvYTQyZmZj
LTRjODctNGFmZS1hMThkLTVkOWY1NTAyODJhNC8xLzQ5SXNBWGhHVnRUMVptNTNB
MGdhTDNDRTVQay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMSSDANBgkqhkiG9w0BAQsFAAOCAQEAJ/J7v9TF0DVR
57Ias1x69aGy8fnV+JOotqHsOBfZebYXXWIf+/rZYUkikdEAu4pbmPgMgdea9P4e
1hQ5dmRlRontPd3P+2tc4KhWY7p4WqjOrE9wWu8FKrsHdOGjkDap5N554nBOCUVW
PKFK8l45wb3SzSgKacYsGiKzJ7NFuDo90/OEBIZOQSDqgf2H4ovUWxJOKRyxoi6Y
kQzo4/JYKdBhAxHa3Wwe004vGQSVS6f7e+M5CbknbAcyq7jz0TI/W2pANlx39Wim
Sr6oWam5KwIcgejJFScaljuQwTU5UwVhXtbRx2JOPiYMtqEXMIbsNy3FX7aA2g6d
NXk9O+2vJA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:25:21 2026 by rpki-client