Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer
File: CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer (raw, json)
Hash identifier: WSVJ1Odk20wNg2z8+syXnEKOx6OSD8QB91zKOY24SPQ=
Subject key identifier: 09:47:BF:06:FF:D6:AA:83:73:71:66:6A:C4:FB:48:5C:33:22:AF:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E1C3FC2423419AEE1EABC1D73109C116B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 12 May 2026 12:53:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.239.75.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:3f:c2:42:34:19:ae:e1:ea:bc:1d:73:10:9c:11:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 12 12:53:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0947bf06ffd6aa837371666ac4fb485c3322af30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:06:d8:ca:02:99:8e:bf:b4:5c:dc:ee:cc:
ce:00:78:a0:e4:d7:1b:40:9b:1a:7a:a0:bc:33:00:
e4:fb:e3:f2:ad:d9:f0:a8:58:f8:99:aa:e6:d3:b6:
50:ad:5b:3e:da:a5:d3:45:ad:c1:55:65:e9:23:a3:
92:70:18:03:03:08:d9:f4:b3:58:bf:1b:32:a9:b0:
1a:10:6b:d4:d6:11:7e:c5:d8:8d:14:93:12:59:8e:
4d:d8:35:23:2f:a0:b0:dd:67:67:3b:7c:9f:5a:35:
bd:1c:c7:d0:3b:72:44:63:18:d2:a8:50:4c:8d:fb:
10:69:f9:88:db:c2:20:be:af:ef:76:c6:6e:0c:b2:
9c:5b:38:16:02:54:94:81:5e:a4:34:56:36:f7:dc:
dc:e6:d4:ff:0e:89:91:63:70:a0:10:54:e8:5b:75:
aa:ae:59:ff:62:f7:e9:c0:95:55:19:ff:9b:d2:e1:
95:ec:91:52:0e:7b:49:19:89:2b:34:bb:8e:6c:e2:
28:81:62:2a:a4:78:5b:4d:15:17:c8:dd:da:28:ff:
e4:47:d4:a9:5e:f7:5d:47:44:05:ad:a5:0a:1d:42:
88:6c:1c:26:b6:2a:4c:d2:f0:74:71:ee:d0:d8:6b:
51:1c:dd:98:c9:58:b2:df:07:f8:94:1d:fc:15:97:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:47:BF:06:FF:D6:AA:83:73:71:66:6A:C4:FB:48:5C:33:22:AF:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.75.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ab:69:4a:a6:8c:b7:0d:ce:6b:e6:aa:80:ba:c1:b6:a7:7d:
be:b8:25:25:49:7b:ac:bc:8f:cf:93:d9:68:b8:61:01:fc:64:
29:60:bf:04:92:24:cf:79:fd:bd:4f:7c:c6:31:38:d1:92:ea:
94:3b:ac:05:d4:3a:77:78:8a:83:75:35:72:81:8b:dd:77:41:
35:b0:1c:d5:23:2f:a6:e4:d8:97:d0:3a:19:e6:83:49:e2:da:
f2:00:86:8f:47:43:d9:3c:70:b8:e2:84:af:df:a3:d1:6f:dc:
14:1d:e7:1f:58:4b:02:6f:23:02:98:7c:4e:70:20:c4:c7:62:
3e:3b:0e:15:2e:a2:11:7b:ca:a3:97:87:c2:15:12:dc:aa:20:
e6:57:e5:ca:c6:c4:de:a1:b0:3b:04:db:47:92:18:fc:25:f1:
eb:a1:11:7e:7a:b8:56:61:6d:b2:1c:4b:9c:dc:87:1a:ad:3c:
55:ce:7e:b9:dd:fe:34:73:ae:8d:b5:5c:60:17:64:a7:38:1f:
6f:48:e7:2d:69:cd:64:1d:24:c0:85:76:6f:16:62:4f:0d:c0:
0a:ca:c2:85:50:8a:a7:33:ea:f9:ca:1f:7a:11:e9:04:96:06:
66:eb:4f:87:b9:39:6a:4f:cd:30:91:72:63:89:c2:64:18:fe:
99:91:53:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:07:44 2026 by rpki-client