Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
File: UIJpb7xB2QYWimDOCUlJAiz2Keg.cer (raw, json)
Hash identifier: 9y0/3l+priPSoDjRQULTr69s/xcX+Zd6YrFafGqcyr4=
Subject key identifier: 50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EB9BD06D1753F78ECAB23F9DB054AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:18:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2ce4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:9b:d0:6d:17:53:f7:8e:ca:b2:3f:9d:b0:54:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5082696fbc41d906168a60ce094949022cf629e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:49:22:e7:39:66:2f:79:bc:da:ef:71:8c:
c2:e6:6c:fe:69:e1:63:b6:6f:e4:52:ae:3b:31:45:
7a:c7:85:4c:27:c0:d3:63:26:13:45:df:5c:3c:d5:
03:f2:40:b9:51:5a:db:a8:a4:21:b5:86:b2:13:9c:
14:e6:89:f3:1a:95:28:98:41:d6:b8:e4:56:63:93:
45:d4:53:2f:67:68:3c:e2:ef:ad:91:0f:a6:bb:69:
a6:59:ca:58:30:c9:41:54:5e:71:6d:4a:d1:79:df:
84:5e:a3:07:9a:d3:3a:06:b4:b0:32:c7:07:33:50:
8c:ab:51:46:af:65:ef:36:39:2a:66:05:39:af:2e:
32:18:11:06:2c:f2:49:3c:b6:e1:c5:c4:8a:97:ce:
f9:82:1a:19:3e:bc:61:14:d8:fa:46:4f:0f:b5:a4:
92:e0:75:b9:9f:2c:bc:53:5f:45:e9:b0:13:a7:ff:
ab:13:44:e8:f6:00:cc:36:4e:d0:bf:3f:af:93:31:
49:c1:12:5d:a1:25:18:12:99:81:1d:72:f4:d1:07:
ce:f9:1c:50:78:8d:d2:01:b5:7f:ce:14:fe:cf:e2:
ec:0e:a1:da:66:19:7c:b6:f7:ff:b7:a8:d2:6f:1e:
57:1e:83:63:07:e8:e6:d0:b2:1d:0b:80:2e:74:3f:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ce4::/48
Signature Algorithm: sha256WithRSAEncryption
27:b9:75:2c:84:fc:a2:1d:b9:6e:29:30:dc:5a:47:4b:06:ca:
73:1c:3a:69:47:90:77:f1:4b:70:42:71:95:0c:0b:47:fb:90:
81:43:d7:75:21:60:09:89:ef:89:55:06:72:4b:36:64:ee:fc:
3b:8d:c2:f6:7d:79:7e:50:0f:fc:14:a1:dc:93:20:c9:83:ea:
c5:df:ab:2c:37:b3:aa:2f:d8:83:cb:2d:cd:b3:8b:2e:80:5f:
bf:c0:3c:d6:21:52:eb:20:2f:bd:c0:65:50:52:88:c6:8a:b9:
1b:98:b0:7b:8b:bb:b9:ee:c1:9c:6c:06:1d:f0:35:72:e4:74:
9c:0d:ba:94:7f:69:c8:da:62:19:2f:9b:72:97:a1:7f:2b:26:
f4:e2:90:f3:d0:39:1e:70:ff:d7:78:be:69:6c:30:94:8d:27:
86:9f:c1:81:e9:61:50:31:db:2e:1a:cb:fd:61:d9:72:52:9f:
2b:94:b4:76:f3:47:6e:a2:36:7a:d7:3a:6a:fb:fe:61:84:d9:
48:cf:81:10:17:e1:14:f8:e6:00:c6:ee:3a:27:9e:f7:54:c9:
97:0c:27:3f:5b:89:dd:d3:79:35:05:47:de:f6:23:f8:eb:df:
eb:c0:02:71:d2:57:b3:47:56:c6:fe:83:a7:79:4e:04:d7:cb:
7b:c6:2f:9f
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZt265vQbRdT947Ksj+dsFSsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDgyNjk2ZmJjNDFkOTA2MTY4YTYwY2UwOTQ5NDkwMjJjZjYyOWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8dJIuc5Zi95vNrvcYzC5mz+aeFj
tm/kUq47MUV6x4VMJ8DTYyYTRd9cPNUD8kC5UVrbqKQhtYayE5wU5onzGpUomEHW
uORWY5NF1FMvZ2g84u+tkQ+mu2mmWcpYMMlBVF5xbUrRed+EXqMHmtM6BrSwMscH
M1CMq1FGr2XvNjkqZgU5ry4yGBEGLPJJPLbhxcSKl875ghoZPrxhFNj6Rk8PtaSS
4HW5nyy8U19F6bATp/+rE0To9gDMNk7Qvz+vkzFJwRJdoSUYEpmBHXL00QfO+RxQ
eI3SAbV/zhT+z+LsDqHaZhl8tvf/t6jSbx5XHoNjB+jm0LIdC4AudD/eLQIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFFCCaW+8QdkGFopgzglJSQIs9inoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlL2E5ZjBi
Yi04NmY2LTRjYTMtYTUzZi0yZTk3MjFkODZjM2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvYTlmMGJi
LTg2ZjYtNGNhMy1hNTNmLTJlOTcyMWQ4NmMzZC8xL1VJSnBiN3hCMlFZV2ltRE9D
VWxKQWl6MktlZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCzkMA0GCSqGSIb3DQEBCwUAA4IBAQAn
uXUshPyiHbluKTDcWkdLBspzHDppR5B38UtwQnGVDAtH+5CBQ9d1IWAJie+JVQZy
SzZk7vw7jcL2fXl+UA/8FKHckyDJg+rF36ssN7OqL9iDyy3Ns4sugF+/wDzWIVLr
IC+9wGVQUojGirkbmLB7i7u57sGcbAYd8DVy5HScDbqUf2nI2mIZL5tyl6F/Kyb0
4pDz0DkecP/XeL5pbDCUjSeGn8GB6WFQMdsuGsv9YdlyUp8rlLR280duojZ61zpq
+/5hhNlIz4EQF+EU+OYAxu46J573VMmXDCc/W4nd03k1BUfe9iP469/rwAJx0lez
R1bG/oOneU4E18t7xi+f
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:48:30 2026 by rpki-client