Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/xTlPscJYAPoJAFZMEiYtsev1Hbg.cer
File: xTlPscJYAPoJAFZMEiYtsev1Hbg.cer (raw, json)
Hash identifier: v+O3733tcsEpfjyP9GBcpR1m0CBIiXo6UUYEG69W5RQ=
Subject key identifier: C5:39:4F:B1:C2:58:00:FA:09:00:56:4C:12:26:2D:B1:EB:F5:1D:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0C7EEBF71E4D14ABD2F6D9B0FB8FBDB72
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/xTlPscJYAPoJAFZMEiYtsev1Hbg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Sep 2026 07:05:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.39.212.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ee:bf:71:e4:d1:4a:bd:2f:6d:9b:0f:b8:fb:db:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 22 07:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5394fb1c25800fa0900564c12262db1ebf51db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:b6:b8:ac:f9:42:02:6c:2f:68:c9:11:f5:
d3:27:c2:9d:7e:6d:cf:74:e9:67:2d:32:76:cd:6c:
56:ae:4a:73:a3:6b:07:a3:a2:65:ff:ba:5a:f3:1c:
03:ff:71:b9:7b:e3:18:a4:e4:8f:e5:81:c8:0c:fa:
80:ab:a3:6b:f1:00:04:8f:31:18:35:23:34:72:a3:
f3:22:f9:3c:f3:62:12:4d:d5:4b:93:0c:9a:63:f2:
49:d9:25:81:4c:48:9f:fc:28:b1:8f:af:29:1b:55:
4b:97:51:df:2e:a2:d1:51:c3:7d:e0:c2:b4:ad:aa:
00:e0:96:0e:09:d7:21:4a:8b:83:aa:a4:6c:39:aa:
7b:0e:49:01:80:dc:56:2a:f4:8d:9e:5d:51:58:58:
91:51:55:3c:69:3f:21:d7:b6:24:8c:f1:7f:1a:40:
c2:1f:52:6b:b4:de:6a:3b:83:7c:c8:d3:c7:3a:cb:
ae:93:d2:ac:a5:e9:eb:d1:be:6a:c9:21:d9:4f:bd:
a0:37:e9:cc:bc:dc:dd:2e:77:03:6f:7d:de:bd:4e:
1c:e9:8b:d5:b2:12:97:8c:6f:1a:71:73:3b:cd:2b:
18:f8:7c:56:91:e2:ae:fd:43:1a:51:72:91:46:ac:
2c:2b:c1:d1:64:4b:26:21:ae:38:0a:e3:c4:c8:cd:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:39:4F:B1:C2:58:00:FA:09:00:56:4C:12:26:2D:B1:EB:F5:1D:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/xTlPscJYAPoJAFZMEiYtsev1Hbg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.212.0/24
Signature Algorithm: sha256WithRSAEncryption
10:49:7b:df:c3:53:4c:7f:26:c2:f2:be:d4:eb:68:c0:50:68:
b5:c1:e8:d9:80:6f:81:0a:02:45:4d:e0:90:f6:aa:ae:17:4f:
78:37:da:15:a7:5b:ec:d8:33:34:d9:44:3e:21:51:2e:b8:a2:
01:bd:ab:e0:dd:36:5a:b6:7b:90:03:3c:b8:de:bc:3f:d0:4f:
7b:58:43:19:eb:b9:db:f9:68:11:75:02:17:3d:39:5c:f8:52:
66:b0:0e:b1:12:ce:33:a7:43:2f:f1:4b:72:83:d1:1a:da:f4:
b2:c0:3a:6f:6e:3a:21:41:d4:4e:e2:ac:9a:0b:6f:2c:ea:9e:
3a:9f:37:9a:9e:7b:7c:6c:e7:64:b9:4a:c5:7c:1e:ca:1e:b3:
90:96:ec:5a:01:97:8c:e4:27:81:95:44:68:ba:de:d9:a7:16:
9b:bf:35:d3:59:cd:17:51:30:b5:55:87:4b:35:ed:b7:e8:32:
94:a9:2e:e9:e4:10:bf:97:1f:0d:8d:24:59:e1:17:d7:26:6a:
c9:1e:34:28:ac:28:57:73:ab:b7:c9:1d:23:dc:4a:5b:51:cd:
32:98:f0:4d:5e:66:03:0d:5d:59:66:bb:aa:af:e6:f8:a8:1e:
e9:b1:83:d5:0c:a8:8b:2e:09:66:62:35:28:47:55:ce:77:01:
fa:45:ac:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:27:16 2026 by rpki-client