Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
File: GHrmJafreY8V_B5hw-E3AaNW_hY.cer (raw, json)
Hash identifier: eg38D9jJoXolDR5JQY22wZekPfSCvbTIFZB1CZaGxHg=
Subject key identifier: 18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C1291646BAE8248E99868770B8F181E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:19:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205135
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:91:64:6b:ae:82:48:e9:98:68:77:0b:8f:18:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=187ae625a7eb798f15fc1e61c3e13701a356fe16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:e5:c6:7d:c6:b2:b8:7b:f4:23:77:8f:64:
d7:d9:0e:c2:35:dd:60:c0:70:fc:9e:a4:e8:20:26:
98:42:01:a3:44:d6:da:07:89:ce:54:2a:32:fd:3f:
a8:8e:0d:18:64:0e:77:77:ce:70:fc:64:8f:66:a8:
c6:be:07:ef:d0:c4:73:46:db:7d:d0:7e:e3:d8:a4:
36:41:39:61:eb:1f:03:6d:e0:b9:7c:e8:a5:9d:2d:
34:36:17:0e:8c:19:71:5f:a1:0e:cf:e5:b8:f0:be:
f2:50:a2:41:64:dc:b0:6f:4e:30:5e:e8:e6:8b:3c:
c1:75:94:5f:83:49:d0:e6:b3:44:8a:c9:d4:58:63:
a9:34:43:57:84:16:af:2a:fa:f1:29:c9:bd:e1:67:
76:c7:22:57:55:7b:47:98:ee:0f:43:32:09:1c:78:
44:9c:ac:ba:43:25:c9:b6:d5:b8:54:82:66:62:89:
96:12:a1:a5:9a:90:6c:36:c9:02:53:90:ad:4c:9b:
72:a8:c5:52:fe:76:a1:41:22:da:07:33:d4:85:a4:
e7:47:fa:d3:06:d4:24:8a:90:da:c5:cb:e7:78:19:
e6:6c:72:4b:31:dd:f0:ea:a4:8a:37:bd:3e:41:9d:
ea:e8:43:de:69:be:40:0d:37:c6:f2:db:62:57:f5:
b7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205135
Signature Algorithm: sha256WithRSAEncryption
18:7e:0e:8a:56:7b:cc:b3:c7:21:18:a4:22:73:25:ff:1a:e9:
38:93:ba:e1:26:46:9a:c5:b9:c9:dd:dc:f5:9f:7d:8d:36:12:
e3:f7:1b:3c:72:e8:30:f6:d6:d1:2a:17:b5:16:09:8a:43:e7:
91:8c:5e:3d:4b:93:78:5d:a2:39:eb:cf:d7:8c:9e:cc:f5:36:
82:ea:87:8d:74:12:7e:4d:d7:64:26:2a:60:29:da:06:c8:06:
00:82:0e:d7:6c:50:0a:dd:e4:ad:e7:a6:59:41:c3:2c:be:06:
77:cb:91:3b:df:a3:4d:c6:66:33:b8:95:88:8b:b4:48:9b:1e:
30:ca:6a:40:74:ca:dd:e5:d7:88:73:d1:6e:04:86:04:3d:a7:
1e:14:4a:9c:c2:c5:a8:89:55:5a:4d:49:a7:a5:4e:fe:1f:50:
0c:12:83:12:1a:fa:67:10:ed:9d:b7:ce:bc:01:5e:ca:1b:cd:
01:f2:d4:44:1e:67:06:3d:a4:83:10:dc:6a:62:9f:fe:99:a9:
ce:f6:c1:6e:e1:76:5b:bb:87:4e:14:77:e9:48:d7:b8:67:e3:
60:18:c6:98:cd:b5:99:fb:9a:71:dd:92:54:a8:03:c2:fe:2a:
28:20:18:dd:e5:eb:82:a1:7f:d3:48:c7:28:f7:4c:81:a8:aa:
dd:47:ef:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:55 2026 by rpki-client