Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
File: 5HbpsSF9PIXySHce9G2zprVr-EY.cer (raw, json)
Hash identifier: 1AbGP2VDkAGgq17qd/sRWPoa9t1McMMEHfbQ1DWfiyk=
Subject key identifier: E4:76:E9:B1:21:7D:3C:85:F2:48:77:1E:F4:6D:B3:A6:B5:6B:F8:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D0681F9D23B50253F6F1A40A1155598B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 19 Mar 2026 14:31:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199874
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:81:f9:d2:3b:50:25:3f:6f:1a:40:a1:15:55:98:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 19 14:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e476e9b1217d3c85f248771ef46db3a6b56bf846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:66:cf:5c:2e:6d:ce:e5:c7:c7:5d:a1:27:
d7:a6:3f:b8:d2:be:a1:f8:5b:dd:80:e3:6a:99:ac:
d5:52:34:12:e7:67:ef:8e:bd:3b:d1:6e:d9:78:bb:
0d:51:b4:b6:99:20:04:e8:1a:ed:9b:87:f5:03:4d:
cf:52:5b:34:eb:44:34:37:33:52:d5:ed:f9:21:73:
96:03:4a:37:0f:20:49:cd:97:ee:28:8f:50:37:f0:
c9:1d:f9:f1:2b:6d:47:6a:80:7d:32:f0:9d:95:f2:
bb:76:3c:02:e8:a9:95:8a:cb:0e:41:13:4f:04:17:
ce:e1:d4:77:8d:28:4e:f5:f3:24:3f:8d:b0:04:0a:
ae:ba:f0:5a:42:6d:a6:35:08:5a:16:c9:74:64:29:
35:e7:c2:11:ba:9f:3f:e7:57:c9:94:c4:3a:49:e1:
86:4a:b8:23:e1:c2:81:e4:47:e1:e2:e7:b5:87:6c:
39:bc:0c:f0:dd:00:b4:73:81:ac:8b:40:c2:10:c4:
0b:dc:1b:ec:91:26:b8:83:17:e6:c1:bd:8b:34:5f:
2d:f6:32:54:ef:9c:e7:f4:e8:0d:52:2f:6d:c8:99:
46:ca:2b:59:e1:27:86:36:13:7e:95:2d:73:e0:30:
b2:8a:f2:73:db:18:ee:19:f5:4f:b1:ab:1b:d8:ed:
71:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:76:E9:B1:21:7D:3C:85:F2:48:77:1E:F4:6D:B3:A6:B5:6B:F8:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199874
Signature Algorithm: sha256WithRSAEncryption
67:65:3b:2f:10:88:20:cc:8d:57:34:10:9d:17:77:63:2d:3f:
66:f8:c2:1c:76:71:ca:cf:aa:ff:24:0e:a7:26:fc:8e:60:c6:
72:c5:f0:7a:ac:8e:57:c7:47:ef:78:94:f8:f0:f0:d0:07:21:
04:35:b3:8f:eb:d6:ce:eb:74:0a:77:dd:56:5f:bc:70:6f:39:
80:bc:f8:ae:a4:c4:4e:e0:c6:bb:21:92:ef:59:e7:b6:12:c6:
52:d7:0a:ba:07:85:b2:44:a1:04:26:6d:35:84:61:3f:09:4d:
e8:8e:33:13:89:48:23:8c:2e:f9:02:67:26:eb:30:db:f5:46:
47:82:58:41:42:f8:03:d7:46:22:ef:92:ea:d6:cb:2f:f1:da:
79:ab:f6:86:e3:c1:e6:23:a9:2a:cd:a2:4c:7a:95:40:e1:a0:
6e:8a:29:f4:e1:bb:ed:c1:f3:82:28:f6:d8:5a:b7:58:6f:64:
82:b1:86:18:c0:2a:68:8d:e4:41:c5:93:8d:2f:68:25:8b:37:
2c:4a:99:a4:81:44:2b:bd:5a:f9:91:8f:37:f8:5c:1a:15:2a:
bc:3c:1b:16:0b:fa:bf:52:25:38:b5:55:91:a6:0b:82:4f:c6:
5a:4f:d2:a4:e8:40:84:e2:e7:2b:2c:32:30:44:f4:2b:63:fe:
ea:60:ab:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:12:05 2026 by rpki-client