Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
File: U9To6fSiMLDlaFh2X3EwrNNOni0.cer (raw, json)
Hash identifier: nUmfC3RhFe5dLDxFhjrEixECskyPh00bRQFE2OmGBdM=
Subject key identifier: 53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C517AFDD1AA6D250D93C83553CA172512
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Feb 2026 10:52:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204762
IP: 62.133.58.0/24
IP: 2a14:2440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:7a:fd:d1:aa:6d:25:0d:93:c8:35:53:ca:17:25:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 12 10:52:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:ef:67:f1:37:c2:3a:b6:0b:df:ce:48:3c:
3b:8c:4e:94:86:5a:b8:91:dc:a7:88:73:3a:ba:46:
66:90:69:b7:96:df:09:0b:a1:98:99:24:a9:d5:49:
db:92:35:ff:92:d2:9e:03:5c:d9:be:82:e7:b0:5b:
1a:f5:8a:7a:23:c8:e2:5a:08:81:2a:c2:e4:99:af:
cc:c0:5e:8e:b0:ce:e6:58:f8:42:0a:f2:90:f0:d2:
25:19:5b:8e:a3:9b:93:0c:0f:c0:4a:a7:e1:0b:40:
5f:ec:09:33:1b:62:04:fd:38:b7:e8:7a:ac:fb:af:
f8:0f:9d:ea:71:07:92:a3:1c:7c:27:e4:b0:84:db:
b5:1c:6c:b0:5b:64:2b:66:67:cf:b1:c5:e1:0e:12:
5f:58:71:7b:1a:41:e1:d2:7d:4b:31:58:97:4a:f5:
65:a7:a0:d9:63:15:78:59:97:f5:18:31:f4:56:0c:
07:9d:fe:54:36:17:de:84:d6:8c:fd:dc:88:12:b7:
fe:a5:62:29:95:a8:31:ee:52:89:0b:5d:53:e1:e4:
d9:a2:c5:f2:13:49:88:7f:2e:6e:07:9e:42:aa:b3:
6d:7e:3b:47:32:3d:10:72:d8:08:ad:4d:ef:7f:99:
21:cf:5d:8f:82:4e:16:d7:69:7e:08:f4:f0:d8:f8:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.133.58.0/24
IPv6:
2a14:2440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204762
Signature Algorithm: sha256WithRSAEncryption
33:05:8e:67:b8:15:b6:4f:ef:17:9f:5c:54:f1:b0:1f:37:e3:
60:c2:33:39:00:89:e2:ef:36:4a:24:4d:fa:d2:6e:ac:5a:08:
12:8f:5e:85:d6:d7:46:13:fb:b1:ef:52:cd:9d:70:9f:7e:99:
f1:b5:de:09:65:4f:8c:4b:c1:1d:bf:d4:ac:36:b7:a0:ed:f3:
34:05:10:49:ca:cf:91:a0:55:60:9d:3e:3e:a5:2d:6a:3f:cb:
a4:b2:28:1c:bb:16:e8:6a:75:fd:9a:e4:1a:c1:e9:31:26:1e:
8b:e8:00:e0:34:2c:3e:cc:9b:ba:b1:8e:8b:54:00:95:ab:db:
a3:48:84:54:50:b9:d4:b6:da:5e:d1:ff:32:6f:13:ad:b2:04:
70:12:ca:f4:22:73:d9:e6:7f:4a:5e:ce:43:dc:29:b9:ae:1f:
07:de:6d:b0:22:45:dd:5b:a4:e5:e1:48:a9:c2:6f:d0:40:14:
f3:9a:ad:c8:7c:c3:cb:a6:c0:d1:55:ab:4d:d4:d1:76:69:b9:
e8:9f:c7:62:2a:d3:5a:a5:48:18:7a:dc:7b:3f:b2:91:d2:58:
6e:b1:1d:4d:94:97:b1:b8:76:62:0e:e6:c2:7e:ab:d5:66:d1:
84:be:d5:97:c1:d5:c4:61:30:7e:98:a8:e4:61:33:da:fd:32:
0d:13:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:44 2026 by rpki-client