Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5YknkmnMNjptouYK7T8ahQMQFp8.cer
File: 5YknkmnMNjptouYK7T8ahQMQFp8.cer (raw, json)
Hash identifier: d9kCDUdFqUO/sQR3IOg5Wds9XDVPu/4kQ/Wnu4feZbc=
Subject key identifier: E5:89:27:92:69:CC:36:3A:6D:A2:E6:0A:ED:3F:1A:85:03:10:16:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D78CC7AA3F1F2D34DE33C5DA1F7793DC4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 10 Apr 2026 19:09:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213024
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:78:cc:7a:a3:f1:f2:d3:4d:e3:3c:5d:a1:f7:79:3d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 10 19:09:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e589279269cc363a6da2e60aed3f1a850310169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:f0:f1:fa:83:c4:7b:91:4d:e6:eb:2c:c1:
db:b5:42:60:1e:6a:bb:f7:e9:67:8d:c8:bf:a3:c8:
fc:53:7f:5b:70:ee:c8:b6:05:e3:e3:e9:7e:21:ec:
00:5c:b1:cd:c4:74:44:ba:9c:2c:45:d6:01:f8:23:
d9:50:32:18:16:6e:ea:9c:53:50:35:74:f6:b3:2c:
ef:60:43:90:5b:22:6c:18:dc:93:94:a2:4d:f9:61:
1d:51:09:6c:a2:b3:63:9e:10:f6:1a:69:21:5e:18:
a8:3c:01:a9:74:c5:98:78:9b:bc:2c:23:91:26:be:
11:50:a9:c9:e2:5b:84:67:03:c2:e7:bf:a1:ab:98:
2c:88:d7:b9:fd:60:63:f2:1c:d1:d7:71:a9:8e:ab:
32:6c:bc:54:a6:fc:ad:e4:53:74:b9:e6:3a:80:47:
66:c9:94:12:60:bd:1f:53:9e:97:70:96:87:88:1a:
5c:04:76:3f:2f:5c:78:56:a9:62:b9:21:8b:6e:d4:
65:31:bd:40:2c:6f:28:80:b6:cb:4c:d6:6d:9d:1a:
1e:7d:10:ff:44:e5:cc:b5:6b:14:09:66:4d:9e:51:
39:9e:9d:98:09:65:8e:94:a4:1a:b5:c7:70:62:8a:
b9:9f:de:b1:9b:de:80:bf:96:3f:9d:e6:0c:e1:e5:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:89:27:92:69:CC:36:3A:6D:A2:E6:0A:ED:3F:1A:85:03:10:16:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a7396-425c-421c-92e6-28ababfd6975/1/5YknkmnMNjptouYK7T8ahQMQFp8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213024
Signature Algorithm: sha256WithRSAEncryption
0f:db:7d:5d:ac:eb:2f:5d:3c:5a:e0:86:43:7d:c0:cb:7c:49:
2a:68:fd:a4:3a:bd:67:d6:58:8d:ae:fc:62:a4:27:87:fb:5b:
a7:f8:44:2c:25:5e:e1:51:34:96:42:d9:db:e2:82:3a:2f:eb:
8e:fa:43:8b:e8:8e:69:7e:f5:f0:5e:50:8f:63:6d:bb:b6:03:
34:c2:7e:0c:b1:41:3b:4b:db:89:10:59:cb:99:22:f0:ec:45:
c0:d8:5a:53:c7:41:d2:45:be:a0:ea:77:5c:a7:ce:ca:0e:8d:
0d:5d:8c:75:f3:fc:2e:2f:a5:fd:7a:de:a2:0e:31:52:47:01:
54:a7:e4:08:db:03:f3:d4:cf:3b:fb:2e:75:81:a0:e5:39:fe:
86:e3:d5:cf:9f:32:0f:96:05:c7:17:20:65:76:38:27:75:13:
de:56:73:72:10:43:6c:5e:6f:e3:e6:a9:ed:ed:8e:e8:99:d6:
33:34:50:21:e9:4b:74:38:66:80:ad:f7:30:7d:ed:b5:51:81:
17:1c:da:7f:e1:be:1e:55:db:93:d0:84:99:d1:9d:99:98:9d:
e7:97:aa:3e:d8:bc:29:57:57:eb:7b:61:37:e0:72:7c:eb:3e:
6d:8e:4f:66:d2:3c:fe:a1:b6:cb:ba:81:65:b7:f1:ca:fe:6f:
55:0b:97:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:07:45 2026 by rpki-client