Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
File: 712SU70NJYyVsrNG5IUzyULMI7Q.cer (raw, json)
Hash identifier: JgJ1oTjXjkTeeCjrKIvEXLZMdOSIaa2+yWUhj7nlG04=
Subject key identifier: EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DE565E6070A541FADD8BB63981D296002
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 May 2026 21:15:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215968
IP: 2a13:ac00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e5:65:e6:07:0a:54:1f:ad:d8:bb:63:98:1d:29:60:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 1 21:15:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef5d9253bd0d258c95b2b346e48533c942cc23b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:a3:e2:ee:a8:3f:73:7d:21:d1:80:47:a5:
99:b6:68:0b:9b:b8:86:df:e7:71:77:c9:55:48:36:
7a:b8:39:ff:15:d5:c4:a6:8e:81:37:70:2f:1b:76:
ca:7e:7f:37:42:5c:0a:63:c3:c4:df:e2:f0:52:ef:
a3:dc:b7:6f:f3:3d:55:07:1a:53:24:70:98:cc:a6:
62:0f:df:1e:a5:3e:ca:e3:99:38:21:30:fd:47:78:
06:51:cd:5b:0a:ac:20:61:b6:73:0a:0f:38:2e:7f:
1f:d0:23:a4:cf:1b:ba:b7:fb:6a:05:bf:d8:43:b0:
8f:d8:c8:31:69:de:00:af:9e:e4:a2:54:e3:64:99:
0e:15:ee:6b:d2:5c:a9:fa:8a:37:9e:34:0f:2d:95:
85:70:e5:5d:63:65:54:09:cb:a3:05:2a:ff:83:d8:
4c:4a:82:fe:fc:68:9a:80:64:38:7f:53:23:58:4e:
f8:95:c8:dd:aa:27:1a:af:e0:7e:bb:20:19:49:7c:
71:47:22:15:38:54:d9:73:89:55:49:69:fa:22:d0:
f1:9e:b5:f2:85:86:82:2d:76:2f:59:c9:4a:ff:eb:
2d:83:08:36:67:be:8b:df:90:72:e5:f2:5c:9d:82:
07:28:34:48:b3:1a:ea:ff:79:6e:96:98:85:a3:e2:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ac00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215968
Signature Algorithm: sha256WithRSAEncryption
0d:f0:2f:02:ca:ae:56:0e:f6:26:6c:5b:a0:32:2b:c4:41:55:
1c:f4:fd:24:31:92:5b:09:07:fd:a4:f5:81:1c:55:1f:26:90:
29:5d:65:1e:af:6d:a2:bf:25:43:a3:e9:d1:80:4a:b1:9b:a1:
79:b8:20:26:f6:42:7d:3b:3c:8c:e5:3c:d5:ed:b8:8f:79:87:
8f:49:31:a5:f6:dd:1a:76:41:16:18:14:d6:ef:91:3c:45:1d:
bf:41:aa:31:fb:04:11:c8:1f:7f:e9:0e:bc:81:89:98:41:b6:
6d:77:1c:ee:4e:6d:47:b2:39:73:b3:52:30:75:22:a2:c8:f6:
fc:00:31:40:d0:20:77:17:42:52:96:d8:66:cd:4a:c5:36:18:
e0:7b:a8:4b:bc:28:f5:ac:6a:94:a2:09:5b:70:95:21:40:f8:
a0:c8:c4:45:cc:0a:df:2c:59:42:57:ba:0b:dd:d6:0e:c3:55:
72:3e:09:7a:ac:00:6c:ec:c8:b0:a2:3c:dd:27:0d:30:76:c0:
c6:c7:da:4a:94:12:53:72:3a:04:23:4f:35:51:bc:fa:fd:9a:
62:7f:2a:e5:09:c0:b8:aa:42:30:16:ea:76:f7:86:61:1e:86:
71:1e:41:c5:98:92:5f:41:32:3d:00:cf:dd:37:40:d2:a3:68:
88:d1:e9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 20:59:31 2026 by rpki-client