Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
File: 1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer (raw, json)
Hash identifier: zBZidHSqq/qdc54CBZz4BI7ni7mo4wu6qnb9ZRKvKrY=
Subject key identifier: FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F1583DD5D01C87A564F398FFF239018
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:21:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205648
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:83:dd:5d:01:c8:7a:56:4f:39:8f:ff:23:90:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:21:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:b4:3c:9f:13:45:2d:35:90:ae:2a:57:89:
b4:0b:39:4f:03:e0:43:9d:a9:99:07:3d:b5:73:99:
d6:32:aa:eb:d3:53:fd:42:d3:eb:01:46:1f:2d:13:
e8:71:1b:5a:c4:62:f6:f3:0b:da:2a:38:cb:64:eb:
74:88:e2:13:2f:4f:00:28:ce:0b:ad:a6:80:8f:2b:
5e:31:50:51:4b:da:fe:b2:04:90:8f:1c:82:db:1e:
99:59:e4:b3:e6:fe:92:5f:d3:7f:a5:f8:9b:12:21:
77:b1:e6:4d:d4:30:5e:45:10:d1:69:b5:a4:5a:c6:
45:ce:ab:b0:c8:ca:33:ba:3a:a2:56:a5:47:72:74:
45:d3:d6:dd:0c:0b:4d:17:44:5e:00:5d:c1:77:0f:
f5:7c:36:ce:af:5f:0b:89:78:80:1b:e9:4f:82:4f:
bf:bb:8d:f4:db:a0:de:85:c1:18:cb:27:f9:76:52:
c2:87:32:fc:66:8a:c4:62:2f:7b:fb:2a:fc:38:9c:
a7:d7:d4:9c:53:84:69:ea:8d:89:b3:bc:8a:6d:fe:
88:12:60:a8:23:ea:88:05:81:da:a0:dc:85:2e:15:
d6:a9:02:4d:c7:c0:61:a6:c0:ac:ba:ab:fa:c8:de:
5a:fd:b8:52:51:00:a7:3a:f9:16:3e:cf:ac:f6:e7:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205648
Signature Algorithm: sha256WithRSAEncryption
95:f8:d9:a8:e4:6c:ce:17:f9:d3:aa:8e:c6:54:62:08:e0:80:
95:ac:bc:c0:39:a8:8c:00:2a:36:a0:30:8c:0e:e9:d8:17:87:
ff:a2:d0:18:46:fa:33:89:7c:4a:94:10:23:a1:ff:80:6d:83:
30:30:13:00:9b:3f:45:e3:8e:28:05:ba:5e:91:1d:6c:92:d0:
49:cc:90:28:2d:d8:0b:28:ea:b1:5f:2f:a6:79:e3:90:39:6c:
31:3f:81:da:48:d2:b2:3d:0d:a5:10:96:27:fb:6f:14:fd:61:
18:71:b5:2d:17:b7:cb:11:70:d7:f9:07:d0:f1:40:c5:ac:5b:
09:63:0c:f2:aa:1d:b5:5d:2a:46:a5:e6:9b:a4:18:38:2d:6b:
8a:3e:96:19:16:9f:1f:1b:4c:50:88:23:ad:18:ab:9a:c1:1c:
4f:d9:cd:ec:1c:2a:da:1e:8f:35:80:eb:b5:b1:52:a8:c5:78:
e5:46:60:76:f1:07:fb:c3:99:c2:b2:63:13:08:a1:38:6e:7f:
7a:07:05:2c:9c:6e:70:b2:b4:37:d3:68:bb:24:67:3f:5f:76:
8c:d4:bd:08:d0:f8:6d:5a:5d:5b:67:48:0c:5f:89:ba:6d:35:
b4:4d:0f:c1:72:38:ce:ef:40:ec:3f:ab:f0:ec:e5:5b:5f:5c:
23:16:f4:c6
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAZt/FYPdXQHIelZPOY//I5AYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWViZjEwN2YwNWZiYTlkNGU0Y2E2MWFlYTBjMTc3MjUxOWY1ZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXm0PJ8TRS01kK4qV4m0CzlPA+BD
namZBz21c5nWMqrr01P9QtPrAUYfLRPocRtaxGL28wvaKjjLZOt0iOITL08AKM4L
raaAjyteMVBRS9r+sgSQjxyC2x6ZWeSz5v6SX9N/pfibEiF3seZN1DBeRRDRabWk
WsZFzquwyMozujqiVqVHcnRF09bdDAtNF0ReAF3Bdw/1fDbOr18LiXiAG+lPgk+/
u43026DehcEYyyf5dlLChzL8ZorEYi97+yr8OJyn19ScU4Rp6o2Js7yKbf6IEmCo
I+qIBYHaoNyFLhXWqQJNx8BhpsCsuqv6yN5a/bhSUQCnOvkWPs+s9uc1WQIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFPrr8QfwX7qdTkymGuoMF3JRn144MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzA2OTYy
OC05N2RhLTQwZmUtOWEwOC02OGVmODgyYmM5NzMvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvMDY5NjI4
LTk3ZGEtNDBmZS05YTA4LTY4ZWY4ODJiYzk3My8xLzEtdXZ4Ql9CZnVwMU9US1lh
Nmd3WGNsR2ZYamcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMDI1AwDQYJKoZIhvcNAQELBQADggEBAJX42ajkbM4X
+dOqjsZUYgjggJWsvMA5qIwAKjagMIwO6dgXh/+i0BhG+jOJfEqUECOh/4BtgzAw
EwCbP0XjjigFul6RHWyS0EnMkCgt2Aso6rFfL6Z545A5bDE/gdpI0rI9DaUQlif7
bxT9YRhxtS0Xt8sRcNf5B9DxQMWsWwljDPKqHbVdKkal5pukGDgta4o+lhkWnx8b
TFCII60Yq5rBHE/ZzewcKtoejzWA67WxUqjFeOVGYHbxB/vDmcKyYxMIoThuf3oH
BSycbnCytDfTaLskZz9fdozUvQjQ+G1aXVtnSAxfibptNbRND8FyOM7vQOw/q/Ds
5VtfXCMW9MY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:39:28 2026 by rpki-client