Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer (raw, json)
Hash identifier: U/SzL361L9pQkkOLwMGNUMkZFIzCh1jic69FTMSkU7M=
Subject key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A30B44BB9CB0F4A744055AE7A33202
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 147.88.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:0b:44:bb:9c:b0:f4:a7:44:05:5a:e7:a3:32:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:ad:d3:64:15:ca:75:1d:d2:f8:e2:ea:d8:
93:83:67:3d:93:f1:03:6a:a0:91:c5:45:d2:54:b2:
88:50:c0:e7:8e:e5:04:cb:43:d3:5a:cc:57:d4:54:
92:1d:f2:b9:1b:25:92:d9:71:ea:64:6c:6f:61:6c:
85:1e:df:4c:bf:a2:32:b8:80:c1:75:a5:b7:6a:19:
51:0b:94:77:ce:27:68:45:a8:39:d4:11:67:41:2d:
73:15:29:a5:b7:f4:ae:5d:14:43:20:2d:77:5d:63:
f6:98:9c:31:05:23:75:15:b8:4e:da:25:34:11:17:
39:a5:56:6f:36:90:c9:1c:5a:ef:b4:c4:e4:c8:7c:
70:93:3b:ac:4c:49:0e:d6:82:14:f0:80:e8:75:3c:
3b:ec:96:8c:3e:23:56:b5:29:2f:69:00:1e:d8:56:
ef:d4:9b:f9:03:f5:54:87:0b:b2:0c:eb:5a:69:55:
f6:df:b4:6e:6e:5b:84:51:a0:ca:b0:41:ea:ac:ba:
61:d8:99:31:63:90:fd:88:eb:44:92:3a:85:9c:36:
98:a5:05:7b:31:e8:c6:e7:b2:50:ee:91:8a:6c:b0:
6e:01:ca:c3:32:14:89:84:90:e2:56:1c:88:29:cd:
a0:27:de:c5:70:54:78:3c:00:c9:94:b2:06:79:98:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.88.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:32:c0:70:02:37:42:af:9b:ca:0d:38:62:e5:9f:6e:aa:c1:
79:02:41:20:de:73:63:be:9c:e9:5f:07:c4:21:ec:da:ab:45:
17:50:90:68:06:55:47:c3:40:8f:22:81:2a:36:6b:a3:f3:ea:
b8:1e:8c:aa:6e:6c:3b:a3:b7:ba:51:cc:7d:71:37:f0:14:74:
c4:3d:45:e1:c7:8a:64:61:41:af:bb:40:c2:85:ee:9d:69:70:
45:30:ea:9a:a9:3c:b8:ac:ad:80:c8:d4:0c:ee:8a:27:dc:98:
e1:95:a5:65:e0:12:63:03:2f:6f:45:1a:67:f8:db:7f:fe:4f:
4e:83:94:2f:dd:bd:4c:f0:cb:7e:2d:9e:67:bb:32:ff:6a:f4:
ee:54:48:85:8d:68:d7:13:1d:26:f0:2f:ee:66:fd:e8:7a:26:
3c:3a:22:9c:79:63:15:78:dd:24:8d:6c:29:7e:3e:a9:c4:0a:
b7:ba:cf:c0:17:19:15:51:67:ea:cd:6c:82:01:54:f7:99:b4:
8b:83:21:0a:bf:37:82:b4:6b:42:56:91:e9:d7:47:46:59:66:
32:af:0c:7d:bc:90:3d:45:00:7a:97:ac:f2:11:3a:cc:00:9a:
e6:eb:ad:75:a6:a7:53:18:df:8b:a9:3b:e1:35:b4:46:96:dd:
cc:23:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:25:19 2026 by rpki-client