Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/umRE3CHMvvATTXZD6u_X7I-pWLg.cer
File: umRE3CHMvvATTXZD6u_X7I-pWLg.cer (raw, json)
Hash identifier: ybKfeBQPfaFzz4sJCjtDQE6bg8eAzr8teemQ6BZXBRo=
Subject key identifier: BA:64:44:DC:21:CC:BE:F0:13:4D:76:43:EA:EF:D7:EC:8F:A9:58:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CE664EB7E3739AF2A835CCDA2BB16286B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/umRE3CHMvvATTXZD6u_X7I-pWLg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Mar 2026 08:51:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.250.232.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:64:eb:7e:37:39:af:2a:83:5c:cd:a2:bb:16:28:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 13 08:51:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba6444dc21ccbef0134d7643eaefd7ec8fa958b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:17:e9:01:ce:4c:4a:c1:87:d4:ba:e5:cf:53:
44:e9:1b:cd:ff:e7:8b:b5:eb:ab:a8:54:27:20:98:
03:6f:d6:f5:3a:7c:a7:c4:f9:4e:f7:2b:ce:1f:7f:
8e:c6:f7:25:9e:49:13:4e:ec:e2:33:9b:da:18:5c:
b8:1f:67:df:e9:45:d4:18:ca:1b:f1:c5:11:a5:bc:
f5:e0:43:cb:65:4f:f7:3f:61:5c:c8:ab:12:00:fa:
0d:13:ba:88:38:07:16:18:58:bc:6a:6c:56:29:b8:
a0:06:f0:0c:91:c9:6c:96:71:52:bc:4a:ca:f0:a8:
30:1f:ff:c8:c1:e0:8a:b3:47:53:52:8c:79:48:7b:
86:0c:b5:93:95:cf:c5:81:25:8b:53:c0:40:a5:23:
71:39:45:5c:a2:44:e3:d8:b0:40:97:46:be:84:74:
d8:01:b2:15:c7:47:fd:71:23:3d:34:d4:e4:ef:aa:
2d:82:93:c8:b7:d8:82:d0:1b:13:be:12:16:ce:a0:
a8:23:11:07:31:e9:8a:fb:65:63:b0:d1:a7:05:d1:
b6:a4:b4:ca:88:25:f5:3c:17:73:f2:46:55:20:dd:
78:65:10:e8:51:97:43:9b:71:61:19:75:62:94:df:
ed:7a:32:1e:d3:60:6b:e8:3d:4a:33:b9:43:8f:08:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:64:44:DC:21:CC:BE:F0:13:4D:76:43:EA:EF:D7:EC:8F:A9:58:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a48585-7ca7-4195-8bff-502004240e1f/1/umRE3CHMvvATTXZD6u_X7I-pWLg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.232.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:ec:e8:f7:b8:b7:92:a3:3d:c5:fa:ed:78:49:4c:04:9f:2c:
ac:65:03:9a:2c:d3:37:f2:89:2f:44:b8:3d:39:1b:e0:bf:4c:
15:db:a7:3d:14:d3:c7:db:c5:71:69:f4:e6:1d:ad:29:75:06:
a3:1e:c5:74:31:45:94:15:4a:5e:a7:69:89:74:c1:64:ab:63:
c2:4b:12:e4:7d:0d:de:98:df:de:39:5f:47:c5:74:bd:7e:50:
3c:55:61:36:09:47:ef:57:d3:ba:e2:1e:1b:b1:cc:a1:7b:80:
e3:b7:29:69:29:ac:62:5f:ce:44:80:2c:37:7a:81:9d:e7:78:
59:77:6b:77:6d:9f:6c:f0:b1:04:fe:2c:d6:f5:f4:48:6b:02:
00:a0:1c:15:0d:c4:b3:4e:2d:e4:93:a2:92:56:e1:9c:bd:22:
69:c0:c5:f4:b4:6c:db:d7:5d:1e:b7:61:82:75:c5:2d:c9:42:
e8:44:83:c5:87:df:dc:85:dd:c9:dd:19:1b:09:fe:b4:3d:72:
54:e4:c1:7a:64:e9:ef:31:8e:50:44:12:cf:8f:55:50:fe:4e:
f8:69:c9:aa:56:e7:db:be:4a:c9:04:84:62:01:fb:a0:76:8d:
50:22:53:6d:15:dc:47:cc:b9:91:97:31:c6:8c:ab:f2:01:98:
05:0b:f0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:35 2026 by rpki-client