Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
File: GNl5-JL-uBmXaiX-lH9devN-zH0.cer (raw, json)
Hash identifier: sT+B5/Rx3gebMy+i2UNmOP92x50MTqegaX70AOgj8d4=
Subject key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F14E5987E99AE3026DE4EDFC9A8284D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:20:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:67c:654::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:e5:98:7e:99:ae:30:26:de:4e:df:c9:a8:28:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:7f:50:4a:79:1e:af:5b:9f:df:7c:a0:5e:
59:f2:1d:4a:8e:d1:22:f1:96:fe:e3:fa:24:ac:9c:
d9:9a:83:ce:5c:4d:99:57:b0:5e:c1:8e:31:e4:7b:
1f:73:af:2f:16:6d:b4:5f:7a:ba:63:b7:c8:0b:4c:
e5:4a:99:63:2e:72:fe:55:6e:47:ce:5f:fd:7b:4f:
f2:31:6a:ba:ff:48:19:10:df:7d:72:58:b2:f8:fc:
91:eb:c5:17:3a:ac:67:7d:fe:83:96:0d:47:00:a5:
d1:e1:6f:70:a4:45:41:fd:cd:62:83:1c:c1:4c:c8:
d9:48:c7:26:a2:a9:9f:ec:b9:62:46:17:00:1a:cd:
74:c7:c8:c7:d3:23:b4:d1:91:a5:46:4b:e0:62:15:
e5:df:64:dc:f8:cf:f2:d1:7e:97:a7:f4:a4:e9:77:
81:b3:d0:6e:17:cc:62:ea:77:04:e8:c8:b6:26:36:
09:c2:21:35:22:e5:ce:06:44:4e:80:72:a0:ed:52:
53:ba:fd:10:c0:c1:59:14:35:9e:c3:0a:f9:a6:a6:
5e:8e:80:9f:18:1b:35:1c:fa:4e:e3:b7:1d:7b:55:
a5:28:2b:8d:c0:a6:30:02:ff:81:4e:81:7b:63:fc:
4e:84:44:ea:c0:d3:24:16:36:13:c7:80:64:76:09:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:654::/48
Signature Algorithm: sha256WithRSAEncryption
1e:d3:e8:6e:66:81:41:1d:a5:28:63:16:59:fb:87:66:8f:51:
e8:60:f9:67:a3:92:43:66:eb:c0:89:3c:96:63:52:fa:3d:de:
63:84:06:47:af:35:6d:71:06:eb:77:9b:e9:ca:59:62:5a:71:
dc:31:db:0c:91:e8:5b:41:f2:f3:b8:7c:63:14:09:2d:f4:b9:
bc:eb:9c:ad:89:ac:b7:1c:73:ad:fd:06:2b:64:d7:23:bd:fa:
03:32:4c:be:63:98:b7:d0:7e:1f:32:1e:62:2e:3b:63:1c:71:
06:6a:83:48:d8:65:c5:67:4e:a9:17:20:cc:72:98:ac:99:ec:
4f:12:df:2e:59:82:10:f0:65:80:32:f0:ab:ed:90:8f:ec:c7:
a4:81:7d:13:95:7b:c1:48:8e:25:24:90:24:fe:3c:3a:52:ed:
62:6b:d4:38:8d:99:8d:13:e8:96:c4:ed:fb:7a:7b:81:0f:c1:
7a:df:8d:07:11:00:88:fb:85:e2:d0:8c:78:b6:6d:db:4b:6b:
79:01:0c:c4:ae:d8:69:68:12:c8:99:12:f9:28:25:16:93:69:
04:d9:74:22:75:9a:12:e6:1b:20:00:6c:8c:93:df:8c:68:e9:
d2:5b:d2:69:49:30:0b:03:f2:b6:7a:72:94:a6:d0:43:fa:da:
06:2e:86:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:54:20 2026 by rpki-client