Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-UZaQJoWcCGvs8qIXEwT05zxWdc.cer
File: 1-UZaQJoWcCGvs8qIXEwT05zxWdc.cer (raw, json)
Hash identifier: 4Bmo68cwXMAku9YRV18E35fOeujbqdPke1PhFN9UhPc=
Subject key identifier: F9:46:5A:40:9A:16:70:21:AF:B3:CA:88:5C:4C:13:D3:9C:F1:59:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CF82269E345ADBF4105434F08F08FA18F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 16 Mar 2026 19:32:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200051
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:22:69:e3:45:ad:bf:41:05:43:4f:08:f0:8f:a1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 16 19:32:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9465a409a167021afb3ca885c4c13d39cf159d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:bf:9f:f0:98:c7:8c:8a:1d:57:a8:03:e0:
5d:d4:20:9c:14:a1:ba:18:28:e3:0c:a7:ee:01:be:
4e:fd:11:0f:a7:73:93:8c:d6:c3:d9:6c:b9:b0:35:
2d:e4:f7:2a:a5:9a:e0:73:4b:4b:f8:4c:4e:36:2b:
4c:71:4e:0d:07:9e:e3:8f:9d:ee:dd:e0:e9:0a:aa:
55:32:a1:70:ec:c0:48:2b:fe:73:11:99:a3:aa:0a:
6f:08:ba:d6:63:8e:93:3f:29:17:9c:b0:c7:52:82:
fd:04:98:04:ad:60:95:2c:44:dd:44:7e:28:94:99:
d4:09:c3:06:49:7a:a9:09:af:e1:ed:e7:fd:92:42:
ce:d4:7e:b0:0e:8c:c4:f1:c6:d3:85:9e:dd:5a:9f:
0a:ae:54:fa:69:15:2a:5e:3c:2b:96:67:5b:f8:3e:
83:f1:54:7b:5e:21:4e:5c:e9:f0:8d:9f:8a:a4:a6:
6c:97:12:f4:73:c6:f9:ef:20:ea:27:0e:c8:33:ce:
ae:69:c1:9d:d4:28:a0:55:32:ee:3f:4e:01:c3:bc:
80:4b:f2:20:e4:60:a8:5d:17:90:5a:38:60:7e:4d:
ac:81:05:d4:40:97:9f:01:8f:59:8c:77:75:2f:3b:
c4:78:05:bb:ba:14:21:4b:61:d8:f9:1f:95:4b:75:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:46:5A:40:9A:16:70:21:AF:B3:CA:88:5C:4C:13:D3:9C:F1:59:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c0c882-500d-4b57-91d1-2799a9733e33/1/1-UZaQJoWcCGvs8qIXEwT05zxWdc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200051
Signature Algorithm: sha256WithRSAEncryption
7e:27:e0:3b:c9:49:56:7d:81:1d:43:70:95:15:f6:bc:61:55:
71:46:42:cc:9a:fe:fd:ac:91:7b:92:9d:9e:8e:ff:3d:a9:71:
d9:da:c0:c8:0c:63:ab:d5:61:f1:77:2b:6c:a2:d6:1d:4b:66:
af:a0:bc:30:08:24:e0:f9:b2:33:b7:e0:96:d9:c7:fa:1b:51:
78:d9:a0:03:cc:ac:d6:ca:cd:88:18:c5:67:1d:c7:08:52:93:
2a:48:28:f4:7e:2f:c7:4b:3d:b1:0c:78:86:76:55:27:2a:74:
de:f4:2d:1a:eb:b8:f6:37:f2:ba:22:21:33:08:b3:83:76:14:
3f:51:c7:51:d8:1c:a2:85:fe:c2:89:72:98:a2:c6:8b:b1:9c:
3c:e8:33:ec:8a:61:3e:79:1a:5d:28:fc:91:17:a4:c3:71:ed:
d6:94:9f:3f:5f:2c:68:76:1b:22:7e:20:e8:94:1f:1a:e0:97:
92:45:97:67:23:8f:4f:7f:51:1c:e3:d6:82:37:e4:f7:71:28:
d1:50:34:65:c4:66:a5:30:17:9e:6b:06:7a:ae:2a:5d:1b:3f:
c5:ff:72:ba:43:13:36:7b:50:f7:ea:90:d5:b6:4b:14:ae:4a:
f8:5f:4a:c7:94:bd:75:35:87:4f:6b:54:2f:cb:2f:c3:b1:c8:
c4:5e:1a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:18:28 2026 by rpki-client