Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
File: TuUnUqgb3-CkAfmiYdef7kthcRU.cer (raw, json)
Hash identifier: kAKAoLR/QYI7NjOKxAC7NQDDFazsS5160q+Ijrpyq/Y=
Subject key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F15B24F62C734359A80DFA1A8010CDE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:21:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 8303
IP: 149.219.0.0/16
IP: 2001:3880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:b2:4f:62:c7:34:35:9a:80:df:a1:a8:01:0c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:42:ac:05:86:b6:e1:b7:8e:e3:fd:e1:29:
e6:d4:83:94:37:ff:8f:47:ab:b8:c0:59:4b:bc:4a:
41:d7:8d:4b:7e:05:d2:85:28:b5:a3:cd:ef:19:3d:
d8:23:ed:75:f5:33:96:0d:7c:ed:18:b5:cd:1f:25:
fc:79:07:56:64:7b:a6:a0:1b:bf:b7:57:90:ea:f3:
4b:24:64:d2:5a:3c:0b:82:60:d6:84:ec:39:ed:8b:
57:25:ad:13:78:a5:fe:15:1d:59:d2:63:72:ed:85:
cc:25:cc:91:6e:8f:78:81:be:12:8c:23:37:4c:80:
39:3f:6b:61:a2:0c:91:2e:e1:f4:70:83:8b:44:de:
78:e7:0b:d9:fa:68:af:fc:b4:61:e8:a6:e2:95:d8:
de:9f:82:ae:f5:71:c1:eb:b2:3e:39:da:45:de:d7:
59:5a:89:27:81:ea:27:c1:56:b9:29:e1:5b:0c:ce:
71:8b:7c:f2:b2:e5:ca:3e:62:fa:2e:d2:d4:24:03:
5d:7d:c3:0f:f8:71:eb:46:fb:34:fb:bf:9c:13:4e:
20:d9:9f:da:81:8c:8c:ff:ea:8a:6c:cf:7f:79:b0:
5d:ca:57:c4:62:73:01:e2:dc:30:56:9c:88:0c:56:
09:95:9b:e6:d6:4b:fb:18:9d:94:5c:1e:2a:d8:91:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.219.0.0/16
IPv6:
2001:3880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8303
Signature Algorithm: sha256WithRSAEncryption
a6:2c:6b:fa:3f:a6:80:8b:67:a1:37:d7:cc:b3:f6:6b:85:87:
e5:8f:04:54:ea:eb:74:f6:38:f3:7b:db:af:75:8e:6b:e6:70:
e3:9b:2b:01:63:7c:ee:3c:f9:3b:da:e8:3e:e4:82:41:3a:d2:
88:c1:37:24:b9:22:a9:b5:8c:cd:73:0d:35:8d:52:f4:41:c7:
7b:91:ba:71:95:12:00:6f:29:ce:53:99:c5:d7:27:f1:a6:c7:
a7:98:25:72:bb:0f:6b:e7:4a:3f:eb:9a:6c:f7:4d:8f:ec:5d:
fe:f4:ff:3a:34:05:fe:69:e7:97:dc:81:5f:a5:a3:92:07:7d:
6b:77:ad:8a:53:bb:c2:aa:d4:db:d6:01:2a:c9:4d:93:2b:34:
de:8c:ac:06:5d:7e:0c:1b:fa:f3:b4:46:31:85:00:e8:11:5b:
be:a5:b0:ec:11:6d:c0:8a:4a:76:7e:ff:e7:79:96:a7:d3:04:
d8:bd:30:19:86:c7:1e:17:11:d2:40:f9:73:be:df:b0:f5:54:
19:ac:9a:6d:17:a2:bf:9d:41:7c:c7:7a:8a:90:6f:14:13:33:
80:91:e4:48:e2:75:71:81:8b:d6:66:33:bc:81:e3:66:8e:46:
36:d9:31:43:76:43:1a:6d:43:33:66:fd:2d:fc:57:fc:9b:e5:
63:a9:3a:4c
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgISAZt/FbJPYsc0NZqA36GoAQzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTQyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWU1Mjc1MmE4MWJkZmUwYTQwMWY5YTI2MWQ3OWZlZTRiNjE3MTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0hCrAWGtuG3juP94Snm1IOUN/+P
R6u4wFlLvEpB141LfgXShSi1o83vGT3YI+119TOWDXztGLXNHyX8eQdWZHumoBu/
t1eQ6vNLJGTSWjwLgmDWhOw57YtXJa0TeKX+FR1Z0mNy7YXMJcyRbo94gb4SjCM3
TIA5P2thogyRLuH0cIOLRN545wvZ+miv/LRh6Kbildjen4Ku9XHB67I+OdpF3tdZ
WokngeonwVa5KeFbDM5xi3zysuXKPmL6LtLUJANdfcMP+HHrRvs0+7+cE04g2Z/a
gYyM/+qKbM9/ebBdylfEYnMB4twwVpyIDFYJlZvm1kv7GJ2UXB4q2JFomQIDAQAB
o4ICrTCCAqkwHQYDVR0OBBYEFE7lJ1KoG9/gpAH5omHXn+5LYXEVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzMxZTBk
NC0zNWNlLTRkMDItOTczNC1kNzhmYjk3Zjk4MjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMzFlMGQ0
LTM1Y2UtNGQwMi05NzM0LWQ3OGZiOTdmOTgyOC8xL1R1VW5VcWdiMy1Da0FmbWlZ
ZGVmN2t0aGNSVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF
BwEHAQH/BB4wHDALBAIAATAFAwMAldswDQQCAAIwBwMFAyABOIAwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICIG8wDQYJKoZIhvcNAQELBQADggEBAKYsa/o/poCLZ6E3
18yz9muFh+WPBFTq63T2OPN72691jmvmcOObKwFjfO48+Tva6D7kgkE60ojBNyS5
Iqm1jM1zDTWNUvRBx3uRunGVEgBvKc5TmcXXJ/Gmx6eYJXK7D2vnSj/rmmz3TY/s
Xf70/zo0Bf5p55fcgV+lo5IHfWt3rYpTu8Kq1NvWASrJTZMrNN6MrAZdfgwb+vO0
RjGFAOgRW76lsOwRbcCKSnZ+/+d5lqfTBNi9MBmGxx4XEdJA+XO+37D1VBmsmm0X
or+dQXzHeoqQbxQTM4CR5EjidXGBi9ZmM7yB42aORjbZMUN2QxptQzNm/S38V/yb
5WOpOkw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:44 2026 by rpki-client