Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5I2Sm9kM-ES_C_wv_YK2ovFD8Jc.cer
File: 5I2Sm9kM-ES_C_wv_YK2ovFD8Jc.cer (raw, json)
Hash identifier: aLu13mZD47pIbRmXSu7piS7iJ2kRc+Hix2K1bWDMCHw=
Subject key identifier: E4:8D:92:9B:D9:0C:F8:44:BF:0B:FC:2F:FD:82:B6:A2:F1:43:F0:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0B5545C03C9EAD8E90799342360D4283F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/b973fb-f0c2-4b9d-87fd-63a2048699a4/1/5I2Sm9kM-ES_C_wv_YK2ovFD8Jc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/b973fb-f0c2-4b9d-87fd-63a2048699a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 18 Sep 2026 16:23:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218767
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:54:5c:03:c9:ea:d8:e9:07:99:34:23:60:d4:28:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 18 16:23:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e48d929bd90cf844bf0bfc2ffd82b6a2f143f097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:55:27:eb:14:2c:68:75:fa:7c:51:94:48:29:
2f:27:6b:64:36:86:b5:3d:ab:ca:6d:7c:d1:1a:03:
ec:42:bc:35:d4:1d:4e:14:48:eb:0a:cf:81:f4:56:
b1:10:64:b2:8e:10:1f:84:84:64:05:09:6c:43:2b:
4b:33:14:fb:fe:58:dc:4e:18:f1:bc:34:dc:60:5f:
98:78:7c:6f:2f:5c:d2:4b:6f:58:f8:48:9f:03:e4:
30:18:d8:bd:65:7c:95:64:37:06:3e:b1:d2:00:de:
b2:a9:2e:d2:79:10:f8:11:99:a3:66:bd:96:4d:59:
50:ef:08:73:e4:d9:7a:e1:c1:e7:76:6f:f3:33:36:
97:94:fe:66:05:30:21:09:5f:b8:90:5d:08:f2:45:
a7:94:87:f2:59:ae:83:88:0f:71:dc:d3:77:eb:a8:
24:88:d8:bf:2c:43:81:07:f5:05:f6:e2:32:ec:d6:
d6:32:ea:87:e2:eb:d2:f0:43:b3:d7:51:d1:3d:8c:
67:73:e9:e7:1f:4d:6f:6b:3c:84:01:8e:f7:e8:8c:
6d:c1:a1:db:41:06:c6:a2:b7:01:3b:6b:9a:96:22:
50:19:b7:29:8d:a2:e8:13:f2:4c:06:2d:13:ea:d9:
bc:41:e3:d8:1e:4d:00:70:26:f8:38:75:73:c5:27:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8D:92:9B:D9:0C:F8:44:BF:0B:FC:2F:FD:82:B6:A2:F1:43:F0:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b973fb-f0c2-4b9d-87fd-63a2048699a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b973fb-f0c2-4b9d-87fd-63a2048699a4/1/5I2Sm9kM-ES_C_wv_YK2ovFD8Jc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218767
Signature Algorithm: sha256WithRSAEncryption
ab:20:1c:68:57:9a:5d:24:17:d2:d3:c6:3d:fa:b1:17:e3:7e:
90:a0:f0:28:d0:32:07:af:cf:d0:e7:4c:b5:b7:92:b7:d7:cd:
60:3f:d7:ea:6d:b1:c8:cd:42:13:4b:5c:60:17:69:aa:cf:96:
13:75:7a:ee:10:3c:f1:b5:e3:3c:18:cb:91:1d:35:cf:3c:6a:
0c:3b:e0:1d:bf:5e:ea:b8:09:30:21:c0:f4:ef:5b:fb:bc:7e:
1e:f9:d5:f1:4d:61:19:f4:d2:ea:b5:80:26:20:fe:09:64:9f:
f1:a8:9b:84:3a:73:10:22:1d:b8:a8:10:40:d6:45:2a:b6:e5:
45:94:dc:fb:01:26:77:df:21:5d:3e:78:69:cf:e5:8d:d0:6e:
89:86:1a:d4:1b:ba:8e:6c:a1:9e:90:cf:0e:db:df:26:e3:5b:
00:f2:9c:f0:d0:b1:b1:0d:f5:ce:d8:f8:3c:db:ee:8b:3d:00:
e1:8e:1f:af:c9:b6:68:87:79:6a:17:c3:d3:9a:ee:62:db:1f:
bd:39:c0:7b:c8:fb:e5:4f:73:7d:40:07:3d:e6:fd:0b:a3:9b:
94:ac:49:be:1c:e5:d3:a4:fe:df:2d:3f:6f:d2:8d:6d:ca:d9:
91:dd:9c:5a:3e:95:73:b2:20:d7:63:5d:ee:2f:6c:8c:3e:37:
a7:09:d7:57
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAaC1VFwDyerY6QeZNCNg1Cg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTE4MTYyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDhkOTI5YmQ5MGNmODQ0YmYwYmZjMmZmZDgyYjZhMmYxNDNmMDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FUn6xQsaHX6fFGUSCkvJ2tkNoa1
PavKbXzRGgPsQrw11B1OFEjrCs+B9FaxEGSyjhAfhIRkBQlsQytLMxT7/ljcThjx
vDTcYF+YeHxvL1zSS29Y+EifA+QwGNi9ZXyVZDcGPrHSAN6yqS7SeRD4EZmjZr2W
TVlQ7whz5Nl64cHndm/zMzaXlP5mBTAhCV+4kF0I8kWnlIfyWa6DiA9x3NN366gk
iNi/LEOBB/UF9uIy7NbWMuqH4uvS8EOz11HRPYxnc+nnH01vazyEAY736IxtwaHb
QQbGorcBO2ualiJQGbcpjaLoE/JMBi0T6tm8QePYHk0AcCb4OHVzxSe9qwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFOSNkpvZDPhEvwv8L/2CtqLxQ/CXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllL2I5NzNm
Yi1mMGMyLTRiOWQtODdmZC02M2EyMDQ4Njk5YTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvYjk3M2Zi
LWYwYzItNGI5ZC04N2ZkLTYzYTIwNDg2OTlhNC8xLzVJMlNtOWtNLUVTX0Nfd3Zf
WUsyb3ZGRDhKYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNWjzANBgkqhkiG9w0BAQsFAAOCAQEAqyAcaFeaXSQX
0tPGPfqxF+N+kKDwKNAyB6/P0OdMtbeSt9fNYD/X6m2xyM1CE0tcYBdpqs+WE3V6
7hA88bXjPBjLkR01zzxqDDvgHb9e6rgJMCHA9O9b+7x+HvnV8U1hGfTS6rWAJiD+
CWSf8aibhDpzECIduKgQQNZFKrblRZTc+wEmd98hXT54ac/ljdBuiYYa1Bu6jmyh
npDPDtvfJuNbAPKc8NCxsQ31ztj4PNvuiz0A4Y4fr8m2aId5ahfD05ruYtsfvTnA
e8j75U9zfUAHPeb9C6OblKxJvhzl06T+3y0/b9KNbcrZkd2cWj6Vc7Ig12Nd7i9s
jD43pwnXVw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:09:00 2026 by rpki-client