Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
File: Vf5QzPzvDofMGfgswJK7m3mj468.cer (raw, json)
Hash identifier: E4fQFtXoneg179FEpIYx3bnN+dbEx0oaBmw30i3F21E=
Subject key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E38118B19D82AA64F1925FF2CF6D53A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:19:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 51098
IP: 194.116.136.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:11:8b:19:d8:2a:a6:4f:19:25:ff:2c:f6:d5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:19:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fa:34:4f:23:34:8a:c3:ba:2a:20:27:56:cb:
f5:0b:fe:2d:f4:f3:e4:da:84:1f:7a:a7:74:02:2d:
a2:80:9b:e0:14:b4:5b:52:38:fe:30:5f:bb:05:32:
99:59:1e:61:2a:f0:8f:c8:c3:27:54:75:9d:f2:1b:
5a:49:eb:14:5a:53:8a:ef:3e:21:d3:18:04:cf:3b:
44:88:28:c6:1a:50:5f:16:81:09:d8:1a:f0:81:fa:
97:6c:e9:12:b9:1a:3e:b5:e6:df:80:80:c4:3a:b1:
a3:9f:43:e0:86:b7:5b:4f:f8:b4:85:6d:c2:d9:14:
ea:e4:bb:cb:23:1d:90:3a:6f:70:33:41:0b:ef:24:
4a:e5:cc:53:e3:c2:37:d4:02:50:ed:2d:e1:80:bc:
24:01:f0:50:cb:32:03:d9:62:75:ec:3f:d3:4f:8b:
52:d3:82:15:b1:2c:5e:42:e3:80:81:6e:7f:ec:42:
fa:75:cd:2d:2d:4a:23:03:e1:1e:79:b0:09:74:3d:
8e:bd:7d:d3:45:ec:c9:1d:5c:12:f3:7a:36:a3:8a:
34:08:d7:e0:8a:60:a2:c2:c6:07:9f:c5:e0:f5:a9:
04:93:55:a2:ad:c4:54:46:73:d8:54:da:91:f8:bf:
0d:71:7f:a1:ba:c9:01:de:41:5b:b9:24:8e:df:d2:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.136.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51098
Signature Algorithm: sha256WithRSAEncryption
59:c5:39:66:87:59:cb:71:2c:63:2f:d1:aa:b1:46:ea:fa:cd:
e4:36:67:6a:c5:4f:84:3b:be:48:14:a2:02:fc:38:6e:81:b2:
2e:fa:c4:c3:aa:19:91:aa:e6:25:ca:62:e4:d8:1a:41:54:63:
0b:4d:15:60:76:29:73:a4:a8:dd:dd:52:48:49:b9:b7:f8:36:
c2:35:1a:27:36:03:81:d9:ea:e1:fa:32:85:90:c7:5c:ff:89:
29:b2:49:a0:0e:e7:a4:43:ab:0a:42:ac:f6:60:3b:70:6d:a4:
48:21:48:b6:77:98:ef:15:93:a1:6f:43:8e:98:1c:71:c9:96:
24:63:2e:f2:ad:9b:fe:c1:0e:f2:d2:45:ff:dd:20:bd:6f:4d:
fb:dc:aa:ab:64:5d:2e:ba:1c:66:2f:7a:d3:f3:fa:7b:f1:44:
4f:26:24:d9:51:8b:63:87:6f:c5:a8:61:d2:e9:7b:0c:53:48:
66:1a:7a:fc:f7:04:20:00:fa:c5:ec:f4:4f:b7:0e:d1:5c:e4:
06:db:06:05:2a:e5:85:da:d0:ec:cb:94:74:d1:7b:51:25:38:
49:57:7d:e0:e2:5f:d1:57:5c:b6:e0:f3:50:f8:23:93:e4:d6:
9d:34:8c:c0:00:fe:10:05:89:57:3c:a5:13:15:8b:af:47:88:
6a:47:1c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:17 2026 by rpki-client