Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
File: ML5SuuTUjd3Jy-wgdqupHJU64S4.cer (raw, json)
Hash identifier: iVDIrbcHH0xzI/bB5mAjCeNWgkZQY6Dw7uHrdxhGPO0=
Subject key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ECFDFC26AEEA544BE456EE28D8B452
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43305
IP: 91.198.35.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:fd:fc:26:ae:ea:54:4b:e4:56:ee:28:d8:b4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:06:11:f4:e5:0b:49:49:01:3d:db:e4:30:
51:26:3e:85:c6:3e:f8:3a:df:0a:93:9c:b0:c9:2f:
36:49:79:83:51:cc:0c:51:f1:ce:ed:4d:29:23:6c:
2d:cc:84:cd:e6:9e:43:15:6c:92:6d:56:76:9b:de:
7e:0c:cb:ac:46:5f:c4:9d:71:56:e3:b7:46:fe:87:
4e:35:7c:85:85:32:f7:2b:66:06:a6:92:3a:14:ee:
b6:a8:d5:d2:d0:94:60:e9:78:56:15:19:2f:29:1b:
f8:44:e0:be:87:cd:15:3c:fe:c8:a3:81:aa:fd:07:
34:19:f8:96:13:c8:2b:9d:b2:b3:c1:86:c5:f2:3a:
7a:99:06:49:fb:27:28:78:3a:3e:5f:f6:0b:fe:51:
23:71:20:85:6e:52:ed:f6:a8:c4:fa:87:c1:87:3f:
59:7e:64:ad:72:87:14:6c:bd:b5:06:63:11:55:db:
24:e3:6b:0d:6c:cc:20:71:4f:89:a1:ad:47:cf:4b:
54:d9:aa:f8:13:54:22:24:39:53:b7:30:db:03:eb:
82:78:ab:2c:72:72:83:b2:48:05:e4:b2:e2:47:c9:
88:a4:60:bb:fb:d3:61:fa:c3:47:45:2b:82:c6:69:
85:5b:62:d8:3b:cd:14:25:8a:bb:73:0b:c7:f8:6d:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.35.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43305
Signature Algorithm: sha256WithRSAEncryption
78:25:d7:25:74:0c:68:e5:50:53:ea:b2:fc:eb:37:2c:13:2b:
70:ef:2c:70:aa:c3:5e:d1:50:2c:6f:21:26:d6:94:f2:89:9d:
16:f7:cf:63:16:8d:04:53:5a:a0:b2:1d:80:c4:42:b0:9e:dd:
cf:27:61:f9:55:ea:91:2b:41:a6:32:8a:4e:f0:77:92:bd:5e:
dc:36:19:27:17:5e:24:01:b4:b9:6f:0f:33:f6:16:7f:aa:b3:
64:70:ac:1b:13:90:21:ca:2d:09:48:0a:87:c9:5f:9f:ff:c6:
f1:a0:25:82:48:9f:e3:9f:65:c3:1f:99:f1:98:9d:0a:11:f1:
8d:be:31:7b:e9:c0:9e:32:17:17:11:d8:f9:9c:d5:ff:10:d6:
c3:83:a2:f9:7f:83:f1:a3:8e:01:e6:70:84:24:56:6b:59:5d:
58:3e:7e:17:5b:0f:df:e0:f8:ce:bd:8d:34:b1:18:b7:0d:52:
9f:42:55:b8:23:17:7c:52:8e:ac:1e:18:a2:fe:43:d1:03:38:
c4:0b:5f:31:39:ee:68:f7:d2:0e:d5:e6:e8:2a:23:cc:d7:3b:
46:ec:80:25:a1:3d:26:65:e9:d4:cb:6f:bf:f6:60:12:c3:8b:
69:b0:c2:dc:21:30:1a:de:ab:e6:01:f9:8e:b3:a9:76:8a:ea:
e9:ad:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:51:59 2026 by rpki-client