Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/me99CIJJhFXF_BP4LXK07pMuHwI.cer
File: me99CIJJhFXF_BP4LXK07pMuHwI.cer (raw, json)
Hash identifier: kF7hRRsvMoohSvYwl7Yx7zmS52KJMurf5rLD9r0oL6I=
Subject key identifier: 99:EF:7D:08:82:49:84:55:C5:FC:13:F8:2D:72:B4:EE:93:2E:1F:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CDCF0FB872F6D8AD36020782E72955896
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/me99CIJJhFXF_BP4LXK07pMuHwI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Mar 2026 12:48:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 47930
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:f0:fb:87:2f:6d:8a:d3:60:20:78:2e:72:95:58:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 11 12:48:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99ef7d0882498455c5fc13f82d72b4ee932e1f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:8a:de:19:dc:be:4a:9a:00:8a:34:96:57:
2a:5e:4c:45:a1:3e:96:ae:b6:9a:6f:40:3d:54:1b:
7f:21:cd:40:c4:50:41:8d:43:9e:44:88:08:b5:17:
c1:4a:98:b4:2a:4d:88:e1:e9:52:55:73:50:82:12:
0c:90:c3:cc:98:8d:ac:07:16:61:c4:7d:fc:40:64:
33:9a:c7:cb:ed:0a:70:40:ce:01:5a:3c:ce:b3:0c:
3e:d6:60:fd:85:46:11:c0:f3:80:24:9d:0b:8b:b5:
1a:c7:be:0e:3c:32:00:cf:a3:ab:05:a8:a5:45:62:
23:2f:9f:92:be:71:e6:08:23:af:a9:a6:45:b9:b2:
19:20:f3:dc:39:ce:67:e0:aa:5c:ff:42:ef:a4:f8:
1b:68:a0:28:92:d3:15:0e:f3:87:44:88:38:5b:8d:
8e:a4:4b:32:b4:fd:5f:3f:cf:3f:1c:45:52:a8:b2:
6c:39:8c:6c:59:08:5e:b0:c8:fe:82:59:67:38:8f:
60:ee:99:28:4e:51:41:44:5e:94:73:a1:7d:b1:d9:
49:03:e2:4a:67:b0:73:a2:cb:90:ac:8a:f1:ed:42:
18:de:9f:9c:27:3c:a0:21:d6:8e:89:ab:e3:d3:3e:
57:9d:34:8b:85:2a:20:99:26:15:14:c9:43:db:76:
15:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:7D:08:82:49:84:55:C5:FC:13:F8:2D:72:B4:EE:93:2E:1F:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e451fe-3bd2-487b-94e8-eac4ceefaffb/1/me99CIJJhFXF_BP4LXK07pMuHwI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47930
Signature Algorithm: sha256WithRSAEncryption
62:aa:08:d0:22:3d:19:f9:ce:1a:76:6d:46:eb:8c:94:ea:25:
80:12:b5:54:ed:7b:1b:56:c6:00:7a:b2:70:ae:d4:e5:18:d3:
3b:8d:2d:7a:ef:76:d1:48:63:0c:ba:00:d6:86:74:64:cc:aa:
9f:49:60:69:51:0c:ae:90:d8:6e:f1:48:7a:00:6f:d3:a2:b9:
46:ba:d5:24:f1:88:05:40:63:8a:03:7d:00:8f:f7:23:a3:6b:
42:61:5f:52:0c:06:83:43:9f:35:e1:d5:c3:40:35:c9:3e:bf:
0b:f2:b5:dd:16:27:96:ae:7c:4f:11:82:9a:3d:df:a2:ee:5d:
b5:b0:fe:65:85:96:ef:eb:9a:a9:63:bc:db:fd:b8:7f:4f:7e:
83:f2:7c:a2:1d:91:a4:e8:4d:60:86:b0:c2:d1:30:39:fb:0b:
3a:10:5d:2d:d0:bf:92:5a:d7:f7:3d:70:95:7d:b2:4c:6c:4b:
8f:fc:8f:7b:35:47:b4:35:ba:44:a8:09:90:7a:ef:11:e6:8b:
2c:cd:aa:d8:63:82:bb:7f:b9:f2:df:7a:75:95:fc:26:f8:3d:
f0:38:28:27:71:2e:6b:cb:c8:7b:cd:db:c1:2b:62:72:db:9f:
89:74:3c:c0:e6:a4:8a:0d:a2:08:55:4b:79:29:4f:6e:3a:99:
da:af:1e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:41:39 2026 by rpki-client