Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
File: 7pl3APBqqbf8Ia67FWIpnVpiXdw.cer (raw, json)
Hash identifier: M8eXKRdJihCPVehvVlOGt/k5hFEzaHwmTD8dHeoKlXs=
Subject key identifier: EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79EC5E268172CD9C15FF2045BD40E05D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216115
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:5e:26:81:72:cd:9c:15:ff:20:45:bd:40:e0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee997700f06aa9b7fc21aebb1562299d5a625ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:99:8c:ab:35:7e:ce:eb:dc:47:23:56:88:
65:07:f7:cd:14:71:af:d0:b9:8d:20:e1:9c:eb:ca:
b6:27:3d:62:3e:cf:79:70:49:e0:7d:12:7a:00:47:
2e:99:ca:db:7c:00:8a:7e:31:a3:e2:41:b1:f2:89:
37:be:70:6e:93:79:63:2c:f4:5b:d3:fa:ed:f5:f1:
57:4e:83:da:e7:63:39:33:32:6a:e9:9f:0e:f8:81:
09:96:d8:dd:d9:55:e7:49:e7:e3:33:7b:3b:c0:2c:
22:c8:d4:a4:6f:19:a6:b3:6b:0b:d2:42:3c:60:fa:
12:b2:64:14:2f:52:9e:61:e6:73:97:83:8c:e2:76:
b0:8f:0f:cb:22:91:f1:3c:37:82:cd:c3:99:b5:e0:
49:f8:3b:0a:f9:b7:5f:3f:a8:b5:2c:83:2f:b0:7b:
63:0f:da:5d:d9:53:a2:ff:46:45:da:80:c3:97:9b:
c1:66:b4:9a:0e:f2:8a:fc:3b:d9:1b:1a:dc:02:88:
4b:4d:89:ef:9c:56:25:20:43:0f:a1:c1:8b:9e:b0:
07:0d:77:d6:fa:38:00:ea:61:e0:9d:8a:39:df:50:
2b:8f:1c:e8:9a:61:27:6e:90:74:ac:8e:4b:b4:57:
b3:76:8d:ed:a7:39:0b:1d:ae:a5:a5:fa:87:6a:fe:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216115
Signature Algorithm: sha256WithRSAEncryption
66:f5:a0:d8:92:78:e8:f2:d6:d3:98:c9:dc:e1:4b:4c:9d:98:
90:e7:75:13:69:14:83:e4:77:98:df:c6:46:3b:94:e3:52:22:
2e:33:48:41:41:77:75:6b:76:e7:eb:c9:96:3a:63:0c:08:eb:
4b:9d:41:5c:1a:34:b3:24:f1:57:60:e9:59:3e:d4:17:65:65:
45:df:51:2d:f9:f9:85:08:d4:76:b9:1e:9a:db:e9:2c:e5:b1:
da:74:73:3e:ee:93:ce:f3:7f:3d:1e:b6:f8:fa:60:0e:2a:a5:
bc:af:e7:a4:5b:ce:6e:ce:3a:08:77:32:25:42:4c:65:36:67:
47:80:cd:cd:7b:c9:52:ea:38:10:76:b3:1e:54:e2:c6:00:61:
93:8a:bd:9e:57:a1:22:ff:22:85:05:1b:b9:a6:f7:81:e9:82:
dd:de:91:d1:da:a4:3d:05:6b:a7:d7:3c:c9:0e:74:bc:38:ed:
9d:c5:8d:16:42:03:5a:e8:b4:23:8f:91:79:10:e9:5b:9a:3d:
a6:a9:2a:9e:c5:42:28:0f:08:ea:82:78:56:1c:69:d4:6d:54:
b7:f7:7a:63:1c:04:fa:2e:d3:63:b0:24:37:59:29:d0:c4:55:
09:dd:be:80:ee:03:c4:27:f7:43:57:34:4d:73:5f:6f:f5:1b:
70:6a:6c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:56:00 2026 by rpki-client