Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.cer
File: 7faT5RwdXUqyFH9yNDIP9k9Rg1Q.cer (raw, json)
Hash identifier: XvZ4EL1i0J2/ylIib11v+rlIl4s1CaOBLqktyXreh4k=
Subject key identifier: ED:F6:93:E5:1C:1D:5D:4A:B2:14:7F:72:34:32:0F:F6:4F:51:83:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBE93DF1D427CF52C968FCA0D493FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213840
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:e9:3d:f1:d4:27:cf:52:c9:68:fc:a0:d4:93:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edf693e51c1d5d4ab2147f7234320ff64f518354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:ea:ff:24:ec:92:aa:92:cc:c9:1b:34:06:
d1:e4:b5:3c:94:33:91:cd:cc:d3:c7:d5:ba:fd:89:
83:43:e7:ce:ed:70:60:5b:6c:cf:13:8d:e5:d6:c8:
0c:00:71:64:3f:39:09:23:6c:73:87:a3:42:4e:aa:
8a:3a:ec:5b:a5:ea:f4:1d:b3:97:d2:b4:45:1b:bb:
6d:5c:50:2c:f2:f2:52:96:7e:d7:d3:ae:0a:83:c6:
d2:32:3c:77:75:c7:88:e3:b1:e8:f2:09:5e:7a:5b:
d4:b7:b5:aa:59:f6:2f:a9:5d:e7:9d:08:85:86:3f:
d9:91:bf:fa:f9:80:6e:0a:c0:c1:0b:4e:bd:dc:c6:
e5:75:ae:dd:2d:71:9f:c1:c3:82:9b:d2:7e:1d:6f:
68:c6:8e:13:f4:0a:9a:46:b8:b4:0c:a1:26:38:c3:
c8:ef:a2:c4:46:34:1b:5b:40:09:18:5b:de:b3:de:
37:cb:b9:93:a2:6f:fb:ff:ce:e8:87:79:fc:dc:ce:
ec:ff:86:8a:fc:1f:1f:f0:85:f5:bd:86:9a:bf:de:
c6:c5:34:7c:cf:5e:52:17:00:fb:f4:76:ae:d0:00:
b7:04:3a:96:5a:70:64:4a:d6:28:30:00:0f:20:e2:
6b:33:ae:ff:69:f7:8d:c5:2d:d9:5a:2e:57:80:ae:
f0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F6:93:E5:1C:1D:5D:4A:B2:14:7F:72:34:32:0F:F6:4F:51:83:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213840
Signature Algorithm: sha256WithRSAEncryption
40:00:d8:c9:19:68:10:5f:c5:3d:fb:d0:6e:7c:e1:13:ed:bd:
a3:cc:c5:48:f2:85:3a:ac:29:5c:dd:91:46:f0:1a:8d:b3:e7:
54:2d:79:0d:80:bf:08:52:8b:7d:ab:a1:3c:e1:cb:16:0f:57:
22:d6:5b:d7:f1:0c:d3:ea:71:08:f5:81:e4:10:3e:ab:26:dd:
e7:2d:ef:c5:ac:5c:6b:0a:05:9d:31:a5:b1:cb:cf:aa:69:ad:
bf:d0:00:90:20:4e:f4:fa:bf:e5:d9:cd:41:2f:f9:bb:88:0a:
c9:a7:db:f6:9b:98:3a:a9:3d:a4:cc:e4:3f:f5:46:c8:1a:3e:
e9:5f:6f:9f:9c:a5:d9:89:e2:9d:19:49:d7:3a:73:9c:86:36:
b3:b0:ac:f0:b1:b2:fb:82:38:ec:74:e2:b9:da:42:d8:65:8e:
6e:77:e3:2b:82:d6:5e:aa:0e:26:3e:d6:5e:a1:25:ac:51:eb:
92:08:92:1b:78:b6:df:40:1a:c3:d1:f4:03:82:d0:e0:78:77:
ac:12:db:48:5c:61:1e:08:2c:70:b8:16:d8:3d:38:90:58:70:
a3:0c:be:b0:e8:b8:a9:2d:fd:75:e4:b4:e6:c2:d7:d2:18:f8:
08:c1:b0:e1:5b:e3:5a:11:3b:df:1f:3a:81:87:27:82:a6:55:
cd:97:7c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:12 2026 by rpki-client