Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.cer (raw, json)
Hash identifier: LwkPcHXkfQhGVnKiDNuZjTshdP1F6vxtbQCI8/APp0g=
Subject key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DFC81D4C05599B1CCD68D4183F8C4E262
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 May 2026 08:57:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 31.22.8.0/24
IP: 185.10.92.0/24
IP: 2a14:9300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:81:d4:c0:55:99:b1:cc:d6:8d:41:83:f8:c4:e2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 6 08:57:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:63:64:70:24:69:25:dc:fb:3b:66:0c:db:
e3:e2:12:f7:5d:69:68:46:2a:56:cd:48:cc:5d:5f:
f0:d3:c1:20:95:1e:6e:2a:79:72:f2:7b:02:69:6b:
ce:be:ea:09:c5:1b:60:29:b1:00:7a:1f:c9:e4:1e:
d0:71:1e:94:4f:29:57:d5:60:31:41:18:52:0c:84:
4d:b0:38:ff:c2:d8:02:0b:d0:e6:f6:33:02:2e:5e:
5d:2e:74:bc:39:a0:c7:fe:46:07:ca:42:da:25:64:
d0:3e:b4:91:00:a1:b9:a3:59:f9:41:ca:24:b2:4f:
4e:b6:ff:0f:75:b3:8c:e1:cb:0c:08:b9:32:ac:54:
a7:8c:66:01:11:73:db:11:3e:bb:e5:4b:95:cb:48:
f8:d0:f9:38:f0:d6:22:67:5a:8c:3e:1b:ac:4f:60:
47:bb:37:07:03:f8:5d:95:2d:81:29:b0:80:72:d4:
4f:ae:56:9e:4a:91:bc:f4:ad:14:04:62:ba:0f:04:
d5:4b:10:f9:12:fa:27:cf:35:73:2f:66:2e:01:ea:
08:f4:9a:72:c1:7e:e3:17:25:41:ed:63:ab:52:57:
8b:5b:72:93:c0:76:d4:16:f1:1f:7c:13:86:bf:b7:
1d:e3:52:96:05:2c:22:03:af:c1:a9:28:b2:9d:08:
99:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.8.0/24
185.10.92.0/24
IPv6:
2a14:9300::/29
Signature Algorithm: sha256WithRSAEncryption
34:be:c3:6d:b5:7f:f2:a1:bf:2c:4d:6a:ac:31:e4:a3:6c:8a:
82:d9:eb:a3:e1:a6:ea:5a:06:25:79:59:ad:54:64:89:1f:7b:
64:b7:28:1f:b4:95:87:3b:6c:9b:d9:c4:40:49:45:05:7e:d4:
81:83:c9:aa:e4:0a:b2:3b:c4:3c:b9:df:b1:59:c9:72:bb:d7:
1d:cb:fa:1c:05:03:aa:dd:18:5c:0d:8a:b0:f8:84:60:0d:64:
1a:a6:40:a8:8e:9b:bc:60:64:a1:55:aa:54:d7:23:b7:d4:5d:
f1:f5:44:32:1b:3f:b9:71:8e:57:ca:b9:95:3d:f5:9c:ae:99:
98:15:f2:53:cf:d2:d4:28:86:3e:75:59:02:ca:69:3c:b7:94:
20:37:33:7f:a2:0a:8e:07:f2:f8:dc:ab:c2:34:39:e1:c7:ff:
92:d9:79:2b:0b:e3:bf:81:35:53:9c:ca:25:61:d6:1f:74:f7:
d7:07:7e:4d:c7:b2:2d:54:7d:87:5e:12:fe:17:c7:64:e3:f8:
35:1a:f9:90:8c:3a:23:c7:17:48:43:ac:00:f8:87:3e:0c:36:
84:30:c5:fe:c6:31:e0:b4:e3:68:e6:9b:02:22:b2:5a:d1:fc:
94:ff:3f:65:9d:81:47:29:e7:5a:6e:7c:e3:7b:3b:6a:b3:cc:
46:f5:04:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:23:43 2026 by rpki-client