Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Ru5BiZoPUXbfinKtFyseWb85md8.cer
File: Ru5BiZoPUXbfinKtFyseWb85md8.cer (raw, json)
Hash identifier: S2f/VYyePW2Sh+0BUQCWN/lEHuOJ4jJfOk0IZpzZf3Q=
Subject key identifier: 46:EE:41:89:9A:0F:51:76:DF:8A:72:AD:17:2B:1E:59:BF:39:99:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1A0796C8A9ED84D206C2BD68BE92F1DAF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/d8f285-57a7-4865-80c3-a62d938d35e6/1/Ru5BiZoPUXbfinKtFyseWb85md8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/d8f285-57a7-4865-80c3-a62d938d35e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 03 Nov 2026 08:14:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218218
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:79:6c:8a:9e:d8:4d:20:6c:2b:d6:8b:e9:2f:1d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 3 08:14:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46ee41899a0f5176df8a72ad172b1e59bf3999df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1d:e9:36:b6:ff:c6:40:ba:70:11:e5:21:25:
c9:38:3b:8e:7f:15:8b:51:c5:56:cc:b3:2f:cf:7a:
4a:fa:7f:ac:0c:da:b9:e7:59:33:ba:8e:7b:0b:f1:
89:80:3e:9f:f1:04:9f:40:b8:62:f4:67:e6:0e:e4:
d5:f8:97:dd:ff:1e:17:d1:e9:9f:f1:8b:a3:56:d1:
a9:be:7d:43:33:81:20:86:cd:2c:5d:e7:12:c3:37:
1f:45:27:2d:ab:f7:04:e9:da:e6:ae:9b:7c:4c:2b:
b0:92:ed:fa:18:1b:81:cc:b4:6e:a9:ad:3b:93:54:
07:2c:f0:23:30:37:5b:21:a7:da:9b:1d:5e:60:e4:
08:3d:38:8b:ca:f7:76:57:30:4f:17:34:3b:87:84:
a8:f0:ea:89:1c:6d:b9:d2:63:c2:87:7b:30:1a:be:
7b:14:10:c0:19:8e:e5:fe:1a:16:f4:6b:ad:ab:be:
a1:ab:75:a4:24:06:44:14:2d:2f:75:58:ab:47:4d:
e7:c0:fd:1d:99:ad:d7:26:95:1a:04:91:ce:1d:22:
1d:88:bb:73:7a:e2:9d:8f:c8:6e:cb:e0:5e:f0:a6:
47:07:16:cd:fd:3f:ca:8f:25:62:3f:83:4b:c4:5e:
3a:de:97:ab:cc:9c:74:ae:3a:ea:7c:30:8f:f3:d3:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EE:41:89:9A:0F:51:76:DF:8A:72:AD:17:2B:1E:59:BF:39:99:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d8f285-57a7-4865-80c3-a62d938d35e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d8f285-57a7-4865-80c3-a62d938d35e6/1/Ru5BiZoPUXbfinKtFyseWb85md8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218218
Signature Algorithm: sha256WithRSAEncryption
60:20:ec:22:c0:d5:bb:d2:0a:4e:21:12:1d:4e:9d:dc:9b:d8:
7a:c8:8b:77:5d:31:70:73:8d:48:03:75:50:58:6f:e5:57:69:
53:20:ee:5c:87:0a:09:cc:da:14:e2:db:a5:9e:57:93:7a:f8:
1e:7e:80:51:df:2d:0e:56:0f:45:91:78:bc:1d:8c:46:87:99:
bb:0a:8d:12:32:d4:97:e3:e3:83:66:21:9e:40:60:23:7e:4a:
b8:1d:81:46:dd:6f:1d:67:ff:e9:4e:37:ce:4b:ad:46:a0:f4:
a2:bc:41:bf:71:83:83:6d:d6:a3:ef:4c:29:42:24:c4:dc:4b:
65:ac:8b:3d:35:14:aa:9a:73:9d:6a:99:59:54:ae:c6:70:18:
2a:06:f6:c6:ca:81:63:6a:57:ee:f5:27:81:57:6e:01:12:db:
07:da:7c:86:9b:45:69:62:6f:14:aa:37:34:4b:e9:e5:21:8d:
ca:17:88:5a:ee:ae:45:68:5f:07:1e:69:b5:be:a9:b9:bd:ac:
a4:af:04:5d:07:1b:05:d9:13:b2:07:ce:ed:66:5f:2d:bc:4f:
be:a3:b4:57:4a:62:c3:19:b8:a4:b9:dd:d8:71:71:a9:f2:b3:
0e:10:00:16:bc:1d:3d:30:73:87:5d:40:dd:a9:f6:cf:63:f8:
23:37:d3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:23:20 2026 by rpki-client