Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ArFBLevtuB3nx4ElHvnWc8FqL9c.cer
File: ArFBLevtuB3nx4ElHvnWc8FqL9c.cer (raw, json)
Hash identifier: TBGLKkZdHZKAC3/SzsuiFYc5dXE0hM5ClezWF36/Wh0=
Subject key identifier: 02:B1:41:2D:EB:ED:B8:1D:E7:C7:81:25:1E:F9:D6:73:C1:6A:2F:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A11B4C077EA247F0F26D727567EA01F5A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/8f5f7d-c87e-4a78-9e38-c88cf13adef5/1/ArFBLevtuB3nx4ElHvnWc8FqL9c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/8f5f7d-c87e-4a78-9e38-c88cf13adef5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 Oct 2026 11:35:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197694
AS: 199630
IP: 193.35.102.0 -- 193.35.107.255
IP: 2001:67c:216c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:4c:07:7e:a2:47:f0:f2:6d:72:75:67:ea:01:f5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 8 11:35:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02b1412debedb81de7c781251ef9d673c16a2fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:d1:e3:ee:91:e4:ce:d2:e9:29:8b:30:fb:
26:56:df:57:36:b3:68:51:22:fb:47:0a:62:3e:bc:
10:26:3b:57:2f:e0:fb:4a:2c:fd:b1:3c:b9:e8:6b:
ce:eb:de:2f:da:62:62:0d:c4:d0:1b:fb:e4:4c:88:
11:62:b2:00:c1:81:83:23:73:8e:5d:6d:47:d8:6a:
37:cf:02:89:76:92:4f:e1:b6:87:37:11:a8:c0:be:
1e:60:17:ac:65:86:3c:ed:3c:8c:5d:60:bf:94:12:
83:67:de:da:a2:04:ad:8f:ed:e9:2b:56:1a:03:ef:
54:be:a2:77:5f:96:2b:35:12:bd:1b:d3:9f:95:8d:
09:7a:8d:0e:d7:29:3b:f9:89:de:b0:ec:4c:33:fd:
a1:0e:e3:67:1c:a4:aa:b2:36:78:24:af:72:a7:0a:
58:1b:68:16:9b:82:84:6e:69:70:54:5a:84:38:aa:
d6:aa:62:3d:36:23:65:c3:56:aa:1d:62:8d:a3:83:
a8:9a:95:7b:b5:71:f4:00:8f:61:08:1b:2d:d6:fb:
ca:2c:f3:eb:f8:0b:95:d3:7e:a8:ba:2b:ea:ad:ab:
8d:ae:cc:81:c0:51:9f:b0:b9:fa:92:46:a1:47:c4:
b9:1d:38:cf:98:0a:13:c1:a4:d7:36:57:df:ea:98:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B1:41:2D:EB:ED:B8:1D:E7:C7:81:25:1E:F9:D6:73:C1:6A:2F:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8f5f7d-c87e-4a78-9e38-c88cf13adef5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8f5f7d-c87e-4a78-9e38-c88cf13adef5/1/ArFBLevtuB3nx4ElHvnWc8FqL9c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.102.0-193.35.107.255
IPv6:
2001:67c:216c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197694
199630
Signature Algorithm: sha256WithRSAEncryption
00:50:64:8b:5b:95:a7:88:8a:3c:02:c3:b7:af:3e:50:8a:28:
92:c9:5f:4c:1c:99:82:7b:41:be:e9:3b:c3:01:4d:11:75:39:
ea:1f:16:30:3c:88:df:81:b2:14:ce:2b:ee:4f:f7:bb:17:26:
c8:ff:ea:a4:af:0e:62:fd:c0:c9:a5:ac:7e:dd:0e:99:ea:7c:
a5:8c:99:9c:df:1d:20:0f:d1:b7:d8:51:05:ef:0d:9f:52:d3:
ab:81:80:9a:30:84:07:ab:05:93:3e:9d:f0:d5:7a:c4:a0:e6:
cb:e6:cc:18:fb:96:0c:ea:05:c9:64:8c:44:8f:ba:76:dd:78:
46:db:2c:00:1b:fc:4c:72:91:7f:4e:c7:e4:94:52:31:2d:f3:
c0:7f:53:f7:1e:fe:2f:45:2c:6a:0d:70:80:cb:c8:f4:78:7d:
1e:48:a2:65:60:b9:3b:98:0c:74:f0:15:29:ef:d7:a3:be:8e:
e7:a5:5d:cf:59:8d:9f:5f:2c:3f:6c:df:d9:5b:0d:42:7b:89:
4d:fb:c6:aa:04:50:22:eb:42:b5:1f:b6:be:46:2e:60:fd:ca:
6d:01:a5:ec:a5:69:49:d0:02:a2:50:f6:7d:06:b4:bd:a2:10:
69:4b:f4:80:8d:25:6b:4d:5f:94:e6:59:cd:d7:ae:0a:10:be:
46:ee:80:a2
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgISAaEbTAd+okfw8m1ydWfqAfWmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDA4MTEzNTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmIxNDEyZGViZWRiODFkZTdjNzgxMjUxZWY5ZDY3M2MxNmEyZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiXR4+6R5M7S6SmLMPsmVt9XNrNo
USL7RwpiPrwQJjtXL+D7Siz9sTy56GvO694v2mJiDcTQG/vkTIgRYrIAwYGDI3OO
XW1H2Go3zwKJdpJP4baHNxGowL4eYBesZYY87TyMXWC/lBKDZ97aogStj+3pK1Ya
A+9UvqJ3X5YrNRK9G9OflY0Jeo0O1yk7+YnesOxMM/2hDuNnHKSqsjZ4JK9ypwpY
G2gWm4KEbmlwVFqEOKrWqmI9NiNlw1aqHWKNo4OompV7tXH0AI9hCBst1vvKLPPr
+AuV036ouivqrauNrsyBwFGfsLn6kkahR8S5HTjPmAoTwaTXNlff6pjqqQIDAQAB
o4ICvjCCArowHQYDVR0OBBYEFAKxQS3r7bgd58eBJR751nPBai/XMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzhmNWY3
ZC1jODdlLTRhNzgtOWUzOC1jODhjZjEzYWRlZjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvOGY1Zjdk
LWM4N2UtNGE3OC05ZTM4LWM4OGNmMTNhZGVmNS8xL0FyRkJMZXZ0dUIzbng0RWxI
dm5XYzhGcUw5Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDgGCCsGAQUF
BwEHAQH/BCkwJzAUBAIAATAOMAwDBAHBI2YDBALBI2gwDwQCAAIwCQMHACABBnwh
bDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDBD4CAwMLzjANBgkqhkiG9w0BAQsF
AAOCAQEAAFBki1uVp4iKPALDt68+UIookslfTByZgntBvuk7wwFNEXU56h8WMDyI
34GyFM4r7k/3uxcmyP/qpK8OYv3AyaWsft0Omep8pYyZnN8dIA/Rt9hRBe8Nn1LT
q4GAmjCEB6sFkz6d8NV6xKDmy+bMGPuWDOoFyWSMRI+6dt14RtssABv8THKRf07H
5JRSMS3zwH9T9x7+L0Usag1wgMvI9Hh9HkiiZWC5O5gMdPAVKe/Xo76O56Vdz1mN
n18sP2zf2VsNQnuJTfvGqgRQIutCtR+2vkYuYP3KbQGl7KVpSdAColD2fQa0vaIQ
aUv0gI0la01flOZZzdeuChC+Ru6Aog==
-----END CERTIFICATE-----
Generated at Wed Nov 11 17:03:18 2026 by rpki-client