Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4uzSetVAjbZqXkEoCNoG5gStTHc.cer
File: 4uzSetVAjbZqXkEoCNoG5gStTHc.cer (raw, json)
Hash identifier: GCPXNJ0PzK6RYqtcrF0yFKbN/fthfvBKhhq+V9Wi4VU=
Subject key identifier: E2:EC:D2:7A:D5:40:8D:B6:6A:5E:41:28:08:DA:06:E6:04:AD:4C:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1851331584E4604BE4772C245F9A7F1CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/8a45af-9caf-494f-8669-78eaef975afa/1/4uzSetVAjbZqXkEoCNoG5gStTHc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/8a45af-9caf-494f-8669-78eaef975afa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Oct 2026 00:33:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 164.37.68.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:13:31:58:4e:46:04:be:47:72:c2:45:f9:a7:f1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 29 00:33:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2ecd27ad5408db66a5e412808da06e604ad4c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:13:b7:00:8e:ef:4d:02:e2:0c:da:d8:13:
95:bd:94:86:41:44:a3:c6:4d:63:04:17:44:9b:3e:
d2:c8:21:e9:dd:f4:ad:c9:05:e3:bf:5a:c3:8e:02:
88:19:4e:6e:ef:ba:6a:cb:1c:61:2a:df:e4:3c:bc:
49:22:f8:28:23:0d:fb:21:b5:11:26:8d:42:59:e4:
ca:d9:6f:47:08:d1:12:e4:bd:00:00:6c:d0:d2:88:
3d:a9:e2:b1:11:37:d2:f9:93:d9:36:4c:2c:75:0b:
74:0a:21:8a:6f:8e:81:8f:7e:9e:27:de:52:1f:a3:
aa:59:bf:3c:ff:59:ea:5c:41:db:ef:82:84:7f:89:
00:20:f3:03:33:a9:5f:03:80:40:d8:82:1f:70:c9:
6b:a2:4c:99:88:21:3f:55:f9:1e:38:79:f1:61:fb:
60:7c:c0:35:4d:a7:8f:be:cc:61:b2:b8:74:74:f4:
c2:fe:da:81:6a:89:9d:7a:01:ac:bf:0d:67:95:60:
1c:9a:58:85:9d:da:b5:6d:46:3c:11:be:8f:c8:22:
0f:a9:c0:10:c5:38:41:e2:ad:f8:f4:01:ed:d5:5b:
05:37:7a:d7:68:90:de:1a:4e:33:04:b8:51:73:4d:
a6:ad:92:89:66:78:73:8e:e5:bc:61:9b:c1:96:3e:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EC:D2:7A:D5:40:8D:B6:6A:5E:41:28:08:DA:06:E6:04:AD:4C:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/8a45af-9caf-494f-8669-78eaef975afa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/8a45af-9caf-494f-8669-78eaef975afa/1/4uzSetVAjbZqXkEoCNoG5gStTHc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.68.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:2e:d8:3f:06:38:e4:f9:e5:5f:ce:b2:84:fe:de:86:7e:82:
82:19:c9:50:b9:ba:bc:86:8f:f6:6d:a1:cc:84:cb:56:94:e8:
f3:be:18:10:d6:e1:0c:72:33:d8:35:3f:e7:7e:98:89:b0:5e:
6a:68:65:35:37:db:5d:a5:72:d6:7b:08:02:00:cf:5c:32:01:
ef:94:89:94:8d:d1:51:f2:e5:2f:1e:be:64:8a:65:fe:33:90:
2c:fb:fe:20:96:78:73:00:c1:d0:46:93:08:74:e5:a7:fc:49:
51:14:a0:81:21:7a:60:db:4f:da:74:8e:ed:f2:c8:fc:31:ff:
fb:e3:8e:c5:7f:ed:33:62:d0:69:4e:64:04:f3:fc:59:b7:0d:
5a:38:2f:32:d2:b3:06:bb:fe:08:2e:ab:71:bd:06:3d:d2:1e:
f8:9f:93:a8:54:4f:57:6b:17:80:fa:52:d0:02:dd:c4:55:bd:
26:c2:38:14:29:f5:34:85:e2:bd:b8:c0:b3:8f:18:e4:18:4c:
40:38:70:9b:4f:c1:94:58:a3:6f:40:c8:3d:6b:05:47:84:69:
33:34:5e:0b:15:5f:c2:f5:bc:00:35:54:92:15:7b:a4:6f:50:
05:4d:25:d4:62:3f:01:65:6d:27:09:2c:f9:06:2d:ca:09:1a:
4d:3d:27:56
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAaGFEzFYTkYEvkdywkX5p/HKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDI5MDAzMzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmVjZDI3YWQ1NDA4ZGI2NmE1ZTQxMjgwOGRhMDZlNjA0YWQ0Yzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD0TtwCO700C4gza2BOVvZSGQUSj
xk1jBBdEmz7SyCHp3fStyQXjv1rDjgKIGU5u77pqyxxhKt/kPLxJIvgoIw37IbUR
Jo1CWeTK2W9HCNES5L0AAGzQ0og9qeKxETfS+ZPZNkwsdQt0CiGKb46Bj36eJ95S
H6OqWb88/1nqXEHb74KEf4kAIPMDM6lfA4BA2IIfcMlrokyZiCE/VfkeOHnxYftg
fMA1TaePvsxhsrh0dPTC/tqBaomdegGsvw1nlWAcmliFndq1bUY8Eb6PyCIPqcAQ
xThB4q349AHt1VsFN3rXaJDeGk4zBLhRc02mrZKJZnhzjuW8YZvBlj40IwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOLs0nrVQI22al5BKAjaBuYErUx3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzhhNDVh
Zi05Y2FmLTQ5NGYtODY2OS03OGVhZWY5NzVhZmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvOGE0NWFm
LTljYWYtNDk0Zi04NjY5LTc4ZWFlZjk3NWFmYS8xLzR1elNldFZBamJacVhrRW9D
Tm9HNWdTdFRIYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQApCVEMA0GCSqGSIb3DQEBCwUAA4IBAQCcLtg/
Bjjk+eVfzrKE/t6GfoKCGclQubq8ho/2baHMhMtWlOjzvhgQ1uEMcjPYNT/nfpiJ
sF5qaGU1N9tdpXLWewgCAM9cMgHvlImUjdFR8uUvHr5kimX+M5As+/4glnhzAMHQ
RpMIdOWn/ElRFKCBIXpg20/adI7t8sj8Mf/7447Ff+0zYtBpTmQE8/xZtw1aOC8y
0rMGu/4ILqtxvQY90h74n5OoVE9XaxeA+lLQAt3EVb0mwjgUKfU0heK9uMCzjxjk
GExAOHCbT8GUWKNvQMg9awVHhGkzNF4LFV/C9bwANVSSFXukb1AFTSXUYj8BZW0n
CSz5Bi3KCRpNPSdW
-----END CERTIFICATE-----
Generated at Wed Nov 11 19:27:32 2026 by rpki-client