Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5i-EXuHrFcTOfA3AV3I654q6olQ.cer
File: 5i-EXuHrFcTOfA3AV3I654q6olQ.cer (raw, json)
Hash identifier: QMRW48DXIeHdYQYn30ZgLp2flbfHhdUwszEkH1G2I88=
Subject key identifier: E6:2F:84:5E:E1:EB:15:C4:CE:7C:0D:C0:57:72:3A:E7:8A:BA:A2:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D48B2085697B914B912182F963A8863D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/5i-EXuHrFcTOfA3AV3I654q6olQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Apr 2026 10:58:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48090
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:b2:08:56:97:b9:14:b9:12:18:2f:96:3a:88:63:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 1 10:58:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e62f845ee1eb15c4ce7c0dc057723ae78abaa254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:02:e4:5b:41:9d:04:11:5b:bb:7a:ed:b7:37:
c8:cc:94:48:09:4e:b4:5b:39:66:82:84:cc:69:a8:
dc:f5:13:b4:52:05:f4:7f:7c:ed:de:0d:44:19:a6:
0a:63:84:4a:8d:a5:fb:c2:64:a5:e3:6c:a7:85:aa:
05:6e:ea:e0:c2:d0:f4:b8:ee:66:61:9c:f1:28:dc:
55:00:3b:d2:88:2f:0e:35:86:00:f0:75:61:83:21:
2d:12:12:e6:31:55:15:fc:b2:87:71:8f:f2:ce:8f:
6a:40:9f:4a:ea:d4:24:e7:e4:7d:7a:9f:6f:a7:03:
63:9b:7c:38:84:88:c2:fc:b3:65:5c:c4:3f:90:d3:
b0:17:0c:9f:8a:2d:08:49:4f:df:44:44:ab:7e:04:
0b:e3:fd:a7:8f:55:d1:10:7c:3d:13:db:29:4a:e8:
4c:ff:e3:ba:d3:85:de:32:ce:2e:5c:88:8d:6d:94:
b1:c3:ad:3e:9b:96:66:fc:2e:a5:63:50:a1:1e:8e:
02:e6:7a:b2:a7:39:fd:9f:a9:00:cc:82:21:a2:47:
09:4d:85:67:49:02:cb:f7:13:04:4b:46:76:92:73:
24:7c:d9:91:37:9c:c8:eb:88:64:3f:f0:6b:c3:1a:
f1:da:1e:6b:36:dd:a7:cd:3e:cd:8e:a5:a3:61:bb:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2F:84:5E:E1:EB:15:C4:CE:7C:0D:C0:57:72:3A:E7:8A:BA:A2:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4ae675-3c7c-40ba-aba4-9491e6c32aa8/1/5i-EXuHrFcTOfA3AV3I654q6olQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48090
Signature Algorithm: sha256WithRSAEncryption
5e:9a:83:f7:16:47:9d:a8:e2:1a:7b:7c:27:ad:f3:37:bd:25:
1a:ab:ea:c0:84:71:f9:8e:79:c9:61:00:42:d2:08:3d:d3:10:
18:c4:78:75:00:d3:e7:52:20:ff:45:b1:db:2f:e9:ce:53:e4:
be:61:06:61:8f:61:60:51:14:17:32:05:83:98:87:76:b3:2c:
d4:3d:08:c8:61:5d:2f:32:55:10:23:d4:23:63:f6:42:49:4a:
36:4b:04:bd:c4:2d:50:3b:dc:b1:49:ba:6c:a1:5d:3b:1d:f4:
03:b6:8c:6a:9d:0f:21:25:52:a4:16:d6:6a:ea:1e:a4:6c:26:
4e:9b:3a:e2:0a:08:2a:12:d4:3d:33:73:cf:65:da:2b:45:fb:
92:d4:27:62:86:a1:e0:6b:72:36:84:30:d6:31:c0:ae:7b:e4:
09:32:b2:99:7c:60:d1:ef:a5:b6:07:e6:e4:a7:90:60:2b:ab:
66:10:f4:49:ab:2d:68:6a:52:f2:a2:87:b7:01:33:ee:84:63:
30:cc:2c:f9:e7:f8:de:f7:a9:5a:38:fb:a5:ce:2a:ee:68:ac:
5b:65:a4:a9:85:2e:7a:10:60:d8:68:5c:6d:83:73:4d:6c:cc:
e6:07:59:e2:90:19:6b:b6:35:3e:0b:82:c0:6b:b5:b8:0a:85:
ac:91:08:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:07:56 2026 by rpki-client