Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
File: Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer (raw, json)
Hash identifier: Ii9vxQhBjnTjgfkXW90QIOim+ufQMICv1UmolX+v4mA=
Subject key identifier: 3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CE35B6CCDFB29FC20B32C61067BEF5B06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Mar 2026 18:42:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214862
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:5b:6c:cd:fb:29:fc:20:b3:2c:61:06:7b:ef:5b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 12 18:42:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3efd44542413e79cc56be9831a397e7aa3f52d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:e1:98:11:23:aa:a3:c9:8f:8c:e2:6e:0a:
74:48:71:ca:0e:dd:b8:b4:25:85:4a:ea:d1:f3:89:
ac:16:4d:82:ca:72:40:67:57:ac:26:91:dc:83:f7:
f2:6e:6b:48:91:0b:6b:64:fe:36:90:2d:c4:51:43:
84:1f:cd:54:7d:2e:27:44:0f:d7:31:ac:e5:a8:ae:
ad:0c:46:3f:bd:2c:80:5e:d6:52:12:54:06:9b:2a:
37:87:b2:93:22:37:a8:8a:2c:b4:0d:65:b1:c1:b1:
61:4a:9e:b6:ef:41:45:2a:a2:2e:bd:f3:a9:bd:7b:
ec:1b:84:fd:69:62:4b:23:48:3a:30:2a:cf:be:f2:
b3:51:91:9b:f0:1b:56:df:c7:0f:94:57:9f:30:14:
4f:4c:73:26:f2:ec:c3:6b:19:d4:d5:e1:34:5b:f4:
7b:5b:5d:ef:41:18:9c:19:66:bd:bb:ee:52:3c:d6:
04:0f:69:88:f7:bc:63:06:29:78:c7:cc:c6:00:da:
ee:b3:bb:25:bd:bc:48:2e:6f:55:76:f5:0b:c6:b1:
9f:01:3f:16:78:d0:d2:0c:5e:c4:a7:ae:28:72:e4:
e1:bd:1b:20:4e:65:03:88:40:17:b2:fa:20:5a:9f:
09:8b:c2:8c:83:52:35:32:2b:9a:56:7b:bd:81:f7:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214862
Signature Algorithm: sha256WithRSAEncryption
18:c3:43:ec:fa:03:a3:d6:d0:1d:6a:3d:c8:e3:a5:99:22:c8:
18:a5:3d:1a:5e:7e:97:0f:56:dc:d3:ba:40:55:9f:e2:c0:6e:
7d:07:48:a1:22:32:89:1c:ca:af:91:53:35:06:c9:8b:bd:78:
26:73:c7:e7:50:f0:50:5a:f2:35:69:56:00:64:f1:29:99:95:
46:45:c6:85:9b:8f:c7:4b:f2:c6:44:ea:04:b8:e7:53:00:1d:
e9:78:76:31:c7:a6:26:f8:26:7c:45:c0:03:0c:68:eb:48:fd:
18:26:93:af:fc:e1:4b:08:c8:cd:12:40:24:0d:b1:a1:fb:3f:
34:91:0e:74:f3:86:93:d1:1a:7f:9e:db:7a:98:38:a5:63:f7:
79:7a:10:88:c4:d6:df:a2:2f:76:32:ab:2c:68:ea:84:7f:96:
3f:61:a2:e0:1e:36:e3:f6:e5:28:9f:53:8d:71:6f:ee:4e:84:
cd:32:8d:e2:96:ca:76:a6:eb:13:87:e2:74:a0:f6:8a:e7:e5:
0f:d3:8e:3d:09:8d:88:e7:cd:48:e3:f4:ac:c4:5a:fd:62:cd:
c3:8b:41:39:8a:34:a9:2a:c7:25:40:94:2c:0b:bf:6e:05:c0:
47:62:e0:be:6b:62:68:b6:8d:82:53:2e:9e:5c:14:94:01:0a:
f9:65:59:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:13:18 2026 by rpki-client