Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
File: X5K_96iahZDmq7rsAoKw8k4K_rI.cer (raw, json)
Hash identifier: EpL2UcFy/Ke8cB79FQwrv1vo+JWaGAjaJe+ReFewtGg=
Subject key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199524C8C2BEC96000D27F62D5E9BA4C475
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 Sep 2025 11:32:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57920
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:4c:8c:2b:ec:96:00:0d:27:f6:2d:5e:9b:a4:c4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 16 11:32:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:29:25:49:f8:80:70:98:15:45:ad:ea:d5:
62:09:9c:6e:d1:c7:0f:f4:50:12:d4:28:52:b6:18:
30:07:72:31:f4:c8:f7:d5:7d:35:d9:f0:d6:95:b3:
ef:2e:8a:f3:ce:f1:21:cc:6d:f4:18:d8:92:8f:ab:
2b:cc:fe:4c:e6:59:74:42:0b:1b:28:c1:00:05:2d:
ac:6d:8a:b6:86:00:6f:4f:a5:ed:d8:84:fc:cd:e0:
7d:83:8f:5d:b3:b9:bb:b5:89:43:aa:6c:6d:ca:80:
a8:07:28:d9:32:20:a6:11:d3:30:a4:ff:51:16:94:
ac:32:9d:e0:07:61:67:ba:ef:0a:c7:f8:07:e2:66:
ff:10:0a:78:cf:ab:a6:2c:b3:d6:3d:4b:a2:9f:46:
ab:42:59:42:7f:ae:b6:85:03:c3:a0:3d:b7:8d:78:
24:05:c6:15:4a:f0:1c:c4:77:7f:6a:f6:c3:a3:40:
d9:e2:38:eb:c8:c4:06:74:57:44:b3:96:9c:3c:54:
f6:22:ad:8d:b4:24:ae:18:7f:8a:37:f2:b7:bc:fb:
be:64:95:2f:75:1d:68:12:70:7d:c9:2d:91:fd:f0:
9c:ba:ce:9e:56:7e:f1:ab:30:d4:92:c4:99:11:90:
bf:64:a9:48:f0:ba:67:c6:d9:e4:a2:e0:04:a5:4e:
cd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57920
Signature Algorithm: sha256WithRSAEncryption
63:29:12:df:78:31:c4:8e:7e:81:5d:8c:ee:44:02:22:45:11:
ff:56:c7:67:0c:40:5a:81:23:80:c5:e0:5a:64:1d:09:59:29:
b4:2b:02:d0:b5:18:8a:71:dc:ac:df:22:e3:61:ee:37:08:96:
c1:cc:bc:67:0f:12:61:c7:2a:0f:ba:5c:bb:fd:3c:30:93:84:
55:41:11:42:d3:b4:58:e9:10:d2:1d:5a:ce:5b:53:b6:1d:1f:
17:f6:35:82:81:d4:3a:c0:14:63:b7:de:91:9a:6d:72:4c:a4:
b3:7f:30:89:9e:7d:a1:57:10:80:54:b1:00:72:f1:3e:97:3b:
20:59:6d:5d:e8:6e:bb:4b:93:c5:0f:f6:ad:90:10:f0:2c:8b:
82:71:ee:bc:67:c7:20:bd:20:38:2d:0e:cf:58:59:0d:3b:b5:
5d:7c:3c:d6:11:3c:95:46:13:8c:5d:46:af:15:fe:01:7c:95:
5a:e8:6c:dc:e5:e5:64:d2:f0:f8:25:52:64:76:d6:a1:5d:5b:
24:3b:7f:95:dc:13:30:b1:a3:9b:72:06:8e:f8:18:b2:80:19:
69:a4:4f:84:d0:f1:af:11:29:25:94:62:90:ad:89:d5:4f:24:
02:db:b5:56:09:6b:ca:82:4b:0c:55:7e:7c:8c:e8:d6:80:ac:
3d:04:f3:60
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZlSTIwr7JYADSf2LV6bpMR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwOTE2MTEzMjUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjkyYmZmN2E4OWE4NTkwZTZhYmJhZWMwMjgyYjBmMjRlMGFmZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjYpJUn4gHCYFUWt6tViCZxu0ccP
9FAS1ChSthgwB3Ix9Mj31X012fDWlbPvLorzzvEhzG30GNiSj6srzP5M5ll0Qgsb
KMEABS2sbYq2hgBvT6Xt2IT8zeB9g49ds7m7tYlDqmxtyoCoByjZMiCmEdMwpP9R
FpSsMp3gB2Fnuu8Kx/gH4mb/EAp4z6umLLPWPUuin0arQllCf662hQPDoD23jXgk
BcYVSvAcxHd/avbDo0DZ4jjryMQGdFdEs5acPFT2Iq2NtCSuGH+KN/K3vPu+ZJUv
dR1oEnB9yS2R/fCcus6eVn7xqzDUksSZEZC/ZKlI8LpnxtnkouAEpU7N0wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFF+Sv/eomoWQ5qu67AKCsPJOCv6yMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5L2E3OGVm
MS1jM2M5LTQzYTAtOWIxYy0xZDlkOGQwMDQxMTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvYTc4ZWYx
LWMzYzktNDNhMC05YjFjLTFkOWQ4ZDAwNDExMS8xL1g1S185NmlhaFpEbXE3cnNB
b0t3OGs0S19ySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDiQDANBgkqhkiG9w0BAQsFAAOCAQEAYykS33gxxI5+
gV2M7kQCIkUR/1bHZwxAWoEjgMXgWmQdCVkptCsC0LUYinHcrN8i42HuNwiWwcy8
Zw8SYccqD7pcu/08MJOEVUERQtO0WOkQ0h1azltTth0fF/Y1goHUOsAUY7fekZpt
ckyks38wiZ59oVcQgFSxAHLxPpc7IFltXehuu0uTxQ/2rZAQ8CyLgnHuvGfHIL0g
OC0Oz1hZDTu1XXw81hE8lUYTjF1GrxX+AXyVWuhs3OXlZNLw+CVSZHbWoV1bJDt/
ldwTMLGjm3IGjvgYsoAZaaRPhNDxrxEpJZRikK2J1U8kAtu1VglryoJLDFV+fIzo
1oCsPQTzYA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:48:32 2025 by rpki-client