Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
File: RUH1XBZZBCT7NMZeDi6sIogkcNs.cer (raw, json)
Hash identifier: 6C2QAQlMp47Ncg+Qe6dNVUJ72PQbOrlnp5cGWYA8l7A=
Subject key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C135C8339016B4102710BCD8D8BEFEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:20:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216435
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:5c:83:39:01:6b:41:02:71:0b:cd:8d:8b:ef:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:20:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4541f55c16590424fb34c65e0e2eac22882470db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:61:b3:bc:25:b4:76:af:e8:bb:c4:db:d2:
46:11:19:8e:03:09:1c:11:3c:ce:ae:72:fd:2a:fe:
41:c5:92:22:34:b6:c7:84:1b:2f:b2:b7:68:ab:79:
08:67:5b:b3:04:d7:41:0f:cc:15:22:90:08:d5:bf:
0f:7e:ad:fb:88:d2:eb:dc:15:af:2d:f8:74:25:8f:
f2:82:8c:a7:e5:a0:5f:64:d1:c6:d3:67:64:3c:66:
ed:ea:20:b8:6a:8d:46:5e:b2:26:f7:31:ee:f2:1a:
4a:66:39:26:1f:8c:35:ff:0b:65:bc:d2:54:9f:61:
38:aa:21:5d:3f:34:bb:8d:7c:2d:81:53:4e:8d:57:
c0:2d:33:81:81:50:d9:60:97:29:6e:26:de:1a:45:
f6:e8:6f:48:a4:fc:3b:53:bb:21:ae:17:39:75:ad:
1f:64:f9:8d:e1:0b:4c:fe:ef:5b:30:0c:47:e7:78:
1b:1e:fa:aa:61:4f:d5:56:cc:c5:48:41:4d:c3:32:
ac:40:b0:a3:8a:e3:9e:50:be:16:10:9d:a8:1e:32:
65:1e:43:59:ed:3e:4b:fc:c4:2a:5a:95:52:4e:25:
26:ba:3b:9e:a5:68:38:15:4e:54:9e:b6:51:6b:62:
94:1d:17:53:c9:d5:28:0d:39:4c:ac:fb:19:bb:75:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216435
Signature Algorithm: sha256WithRSAEncryption
7b:f9:09:6d:86:11:66:94:19:90:4e:3f:28:4f:73:c1:04:31:
06:e9:0b:92:a6:36:c5:2c:67:80:e1:76:b3:92:54:be:7b:16:
33:a8:bd:66:19:1d:45:e1:cc:d0:4f:8b:56:64:b1:53:97:8b:
b9:4f:a6:16:4a:49:12:a3:b8:00:9f:a2:6f:a6:f6:32:a3:88:
a9:03:90:bf:ef:90:9d:7d:3c:96:2f:01:c3:0f:51:dc:c9:ff:
71:d7:1e:35:04:4e:4e:7e:ba:03:12:03:99:8c:9d:ec:b1:5b:
91:82:45:15:fa:7f:be:06:84:70:81:33:6f:6d:75:2f:be:e7:
a4:65:9c:aa:96:3e:e4:b1:91:2e:a4:82:77:be:69:0a:cb:ed:
37:4f:4e:cd:bb:6e:18:a0:28:a8:fb:61:94:ec:49:18:8a:6b:
99:a8:4f:71:0d:cc:b6:9b:38:37:d5:76:b5:db:af:99:26:39:
d6:21:bd:c9:de:c5:f5:cc:b2:e9:d6:90:62:4e:2b:2e:73:50:
fa:13:b8:1b:7f:7c:40:28:8d:2a:98:be:62:75:a1:20:46:20:
25:51:1a:a4:fe:4c:ef:b8:7f:18:fa:c9:90:f4:ce:10:9f:05:
00:f8:30:a4:98:97:81:0c:a9:e5:4a:31:6f:71:8f:c4:c0:1d:
e9:74:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:59 2026 by rpki-client