Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer
File: T1HrSeFu3RhEgrvMFjExdFOV9GI.cer (raw, json)
Hash identifier: ZNgmS6lVCqifXeuwgqBBo2w5RLOTdPDGPYE/LrTuc9w=
Subject key identifier: 4F:51:EB:49:E1:6E:DD:18:44:82:BB:CC:16:31:31:74:53:95:F4:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D1AAFB0DA8C0B87A886248378B4A44CD7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 Mar 2026 12:33:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215095
IP: 195.58.156.0/24
IP: 2a05:da00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:af:b0:da:8c:0b:87:a8:86:24:83:78:b4:a4:4c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 23 12:33:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f51eb49e16edd184482bbcc163131745395f462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:41:48:d0:4b:d7:77:90:16:9e:30:ff:7c:
66:ed:e7:1e:b4:8e:2f:ea:6f:5d:6c:6b:d7:fe:2f:
de:7e:b4:1b:9d:98:5b:07:f8:bb:ef:16:56:b4:f9:
3a:26:73:ac:b8:50:4a:fc:af:95:0b:0e:52:db:a9:
1f:d4:37:fc:d8:25:74:da:2d:ad:93:67:b1:d4:40:
3e:fd:4a:76:0b:fa:32:5b:8c:e3:e0:d8:f2:65:f1:
f5:65:8f:aa:72:d4:22:3e:d0:bd:c2:fb:ed:3d:f7:
ec:61:09:93:c6:83:46:9b:8b:d2:86:16:13:c4:5b:
f1:ec:7d:1e:ca:60:de:cd:36:44:26:12:0b:c8:1d:
cf:ab:fc:df:95:28:05:2f:8d:be:b1:1f:f7:08:ea:
86:1d:12:65:ad:59:6a:ec:7f:de:bf:8a:64:4e:36:
85:5c:63:a3:16:5f:66:f6:57:51:97:48:de:42:a6:
25:72:46:6c:56:4f:cc:cf:76:1b:51:eb:a9:bf:94:
d7:bf:f2:7a:20:15:83:de:a4:b7:d2:d3:90:51:f6:
f2:77:a7:56:e0:13:34:dd:64:45:b2:88:c4:94:96:
32:fe:df:03:9a:bf:7e:6a:29:d6:71:9c:2f:61:ba:
4b:ae:4e:55:45:a5:b0:38:ad:13:7d:d3:02:0f:8d:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:51:EB:49:E1:6E:DD:18:44:82:BB:CC:16:31:31:74:53:95:F4:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.156.0/24
IPv6:
2a05:da00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215095
Signature Algorithm: sha256WithRSAEncryption
6c:c8:f5:06:4e:1b:33:bc:46:7b:bf:fd:e1:31:ce:c4:58:8b:
80:e4:e1:df:40:6c:84:31:9a:f1:20:cf:77:f1:48:97:bd:ee:
27:3c:97:2b:22:e5:5f:a6:aa:7e:ee:ee:8d:6e:9a:09:5c:72:
f9:81:b6:96:b0:63:5a:ef:ff:e9:17:5d:5c:d9:99:1e:1f:a0:
45:8f:a1:d3:a6:7d:7a:4e:df:a1:4c:bc:a5:07:94:bb:4e:72:
24:87:7d:36:90:15:82:11:a8:b3:f7:f0:cf:2b:ef:0a:95:26:
e9:dd:36:f0:53:b8:18:43:f3:d7:5f:a0:90:15:54:c9:3f:96:
be:d8:c7:f5:25:b1:18:3a:0b:2d:e4:b5:e3:1c:9d:75:dd:3b:
76:2b:82:e9:22:e7:a8:6c:38:01:12:d9:57:0e:a9:d0:df:8d:
78:6f:02:0e:2b:6f:5f:5d:59:fb:05:e8:3d:8d:9a:a7:7c:fc:
12:26:9d:5b:11:74:10:92:a7:f1:bf:56:0d:4f:6b:c2:8c:c2:
83:fe:9b:d2:2b:d4:42:28:89:17:58:47:1e:7a:36:35:18:cc:
cd:b8:e3:b8:ac:01:ab:f0:c8:dc:99:6d:88:c3:f8:8c:42:25:
59:97:cf:21:d6:de:df:d5:0e:58:b8:d5:51:7f:fd:8e:17:1c:
90:9c:e7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:12:10 2026 by rpki-client