Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
File: UzYFdCt-Ei_Psq66n7ENb8pI544.cer (raw, json)
Hash identifier: VwojovqlJbk+lKXZPhEo5wQBFJ/Ysu/INvsn4u0f2jE=
Subject key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C11C11C59CD098D9317B24DCEBDB723
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:18:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 147.122.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:c1:1c:59:cd:09:8d:93:17:b2:4d:ce:bd:b7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:b6:dd:d9:5f:b7:a0:2e:43:0f:35:c7:44:
d9:6b:08:56:c7:72:e7:18:07:61:2c:1a:2e:e1:ee:
4d:2c:a1:58:2e:9d:c5:18:8c:28:24:7f:7a:3b:c6:
61:e2:a6:9c:86:7d:5a:ea:9b:27:74:31:04:ee:87:
16:7c:e4:ca:24:dc:64:5a:65:06:5c:77:36:9a:b8:
d5:72:fe:ba:82:2e:cb:d0:58:e5:b9:2f:84:4e:43:
9e:5a:66:29:0a:a6:53:66:7a:e5:34:f4:6f:08:ec:
54:f8:71:0f:18:c6:14:0e:c2:f4:e2:bd:21:32:da:
80:bb:d1:25:fa:a2:96:31:ec:e9:75:6f:17:1b:59:
61:ce:ea:2d:fc:63:e9:24:83:c4:92:0e:ae:c0:22:
80:65:2c:8d:fa:e7:7b:b1:da:f1:76:e3:88:7a:1b:
03:85:af:0f:83:e4:cf:03:d0:08:6c:da:90:0a:48:
45:5b:71:1e:d0:50:21:e3:3e:ff:1c:63:f6:d8:a4:
69:1e:98:ff:2b:31:dc:43:dd:39:12:0b:b0:a0:27:
41:fe:70:a5:a9:39:f0:35:73:78:98:da:7b:e7:e9:
4c:ac:2d:02:59:2d:63:57:c2:80:52:11:3c:b1:08:
b2:29:b9:e5:89:99:85:ed:cd:a7:15:80:72:7d:52:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.122.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:76:64:d3:7a:72:fc:9f:71:f1:1f:b0:ba:22:d4:a0:51:72:
83:55:97:65:5d:67:7a:1a:a5:29:d5:e5:40:ad:a9:79:f7:58:
46:76:f6:71:77:49:87:ba:f7:0b:1f:b9:e9:f1:a8:ac:0a:ad:
b5:10:31:66:fd:30:85:d5:eb:2e:e2:49:56:93:d9:1f:7e:a0:
38:13:fb:72:13:f6:49:95:23:d6:10:ba:5d:2a:0a:af:bc:78:
bb:de:f9:75:e3:f8:4d:89:07:a1:12:09:83:65:d6:63:9c:15:
ae:e2:0d:4f:3f:20:6e:67:9d:20:5a:d2:89:bf:f9:04:fa:4a:
a1:14:38:0c:b4:a9:d6:07:ac:ec:71:07:ff:ee:58:0e:b7:fa:
51:f6:6e:d0:0a:34:d9:ad:66:2a:c2:f0:5d:ca:21:22:5e:bf:
95:1d:de:7b:b8:9a:0d:1e:73:4d:cb:79:19:d3:82:f4:54:4c:
db:e3:a9:77:f3:eb:8b:49:83:00:18:ee:14:29:c0:42:57:c5:
25:19:2a:40:f6:b3:71:25:74:99:9e:ee:f3:3b:d2:31:70:52:
44:d4:43:73:12:ac:ac:79:31:59:fa:6a:78:7e:40:f6:51:23:
cd:78:02:cf:86:04:24:1c:6e:0d:6f:a8:f4:37:25:70:5b:8c:
b4:57:94:b9
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZt8EcEcWc0JjZMXsk3OvbcjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzM2MDU3NDJiN2UxMjJmY2ZiMmFlYmE5ZmIxMGQ2ZmNhNDhlNzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BK23dlft6AuQw81x0TZawhWx3Ln
GAdhLBou4e5NLKFYLp3FGIwoJH96O8Zh4qachn1a6psndDEE7ocWfOTKJNxkWmUG
XHc2mrjVcv66gi7L0FjluS+ETkOeWmYpCqZTZnrlNPRvCOxU+HEPGMYUDsL04r0h
MtqAu9El+qKWMezpdW8XG1lhzuot/GPpJIPEkg6uwCKAZSyN+ud7sdrxduOIehsD
ha8Pg+TPA9AIbNqQCkhFW3Ee0FAh4z7/HGP22KRpHpj/KzHcQ905EguwoCdB/nCl
qTnwNXN4mNp75+lMrC0CWS1jV8KAUhE8sQiyKbnliZmF7c2nFYByfVLltQIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFFM2BXQrfhIvz7Kuup+xDW/KSOeOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzL2YyYzhh
NS0zYjQzLTRiYWEtOGEwZS00ZmY5MGQzNzg2NDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvZjJjOGE1
LTNiNDMtNGJhYS04YTBlLTRmZjkwZDM3ODY0Mi8xL1V6WUZkQ3QtRWlfUHNxNjZu
N0VOYjhwSTU0NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAk3owDQYJKoZIhvcNAQELBQADggEBAFZ2ZNN6
cvyfcfEfsLoi1KBRcoNVl2VdZ3oapSnV5UCtqXn3WEZ29nF3SYe69wsfuenxqKwK
rbUQMWb9MIXV6y7iSVaT2R9+oDgT+3IT9kmVI9YQul0qCq+8eLve+XXj+E2JB6ES
CYNl1mOcFa7iDU8/IG5nnSBa0om/+QT6SqEUOAy0qdYHrOxxB//uWA63+lH2btAK
NNmtZirC8F3KISJev5Ud3nu4mg0ec03LeRnTgvRUTNvjqXfz64tJgwAY7hQpwEJX
xSUZKkD2s3EldJme7vM70jFwUkTUQ3MSrKx5MVn6anh+QPZRI814As+GBCQcbg1v
qPQ3JXBbjLRXlLk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:36 2026 by rpki-client