Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UXe0Xb5JWCmDhxSY6Siu53YH5NI.cer
File: UXe0Xb5JWCmDhxSY6Siu53YH5NI.cer (raw, json)
Hash identifier: WJCNKYtXwDgLMYjiPqaIig+PkwEYLeEKgunjezTq9/E=
Subject key identifier: 51:77:B4:5D:BE:49:58:29:83:87:14:98:E9:28:AE:E7:76:07:E4:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA22500FDD184EB5DA4A7A207B5341
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 217.12.160.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:22:50:0f:dd:18:4e:b5:da:4a:7a:20:7b:53:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5177b45dbe49582983871498e928aee77607e4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:32:af:c4:b5:5c:cc:d3:6a:d8:29:d8:0b:
f3:c4:34:5f:00:7b:b4:f4:b5:a1:52:85:53:1d:0e:
be:ea:c1:c0:cd:50:bf:6d:e3:b3:a0:50:10:76:f5:
52:a5:ff:4b:da:67:a5:f7:76:e5:46:cf:9a:fa:91:
f2:18:4a:4e:3b:42:a0:b3:18:35:2b:22:1d:27:95:
32:ee:dc:ae:2a:5f:1d:11:09:d5:a8:a9:bb:58:c3:
d7:ae:b3:a6:ae:e6:b5:8a:bc:a8:ef:f1:31:1b:6c:
35:20:10:b2:29:a9:be:71:33:66:01:0c:d7:0e:69:
d4:13:c4:a2:6b:1d:cd:16:33:c8:f1:1d:85:79:bc:
38:86:48:45:61:bc:5e:b9:37:54:95:3f:00:7d:6f:
0b:66:23:33:5d:11:d2:ed:f4:c5:2c:f6:c3:88:e3:
8c:45:88:08:26:6c:ee:7a:a5:9f:45:74:8e:90:07:
6c:f9:e6:a2:3c:e5:24:62:2d:69:6b:e3:3d:15:aa:
47:fd:c0:c2:6f:28:2d:14:39:86:72:bc:20:3a:3d:
99:1a:dd:d1:75:30:12:64:d8:92:8b:fb:59:eb:4f:
97:6a:d7:11:c9:6f:93:b3:52:a3:73:e7:a6:fc:a6:
f2:bb:d8:ae:04:4f:02:b5:ae:e2:dd:1d:47:4b:48:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:77:B4:5D:BE:49:58:29:83:87:14:98:E9:28:AE:E7:76:07:E4:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.12.160.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:4f:f8:e3:8c:01:22:78:1c:0c:a5:96:ab:ac:6a:c5:16:81:
2e:8e:80:e8:e2:f5:5f:02:8a:34:c2:3a:30:34:68:4f:b9:a3:
65:69:53:73:a8:6f:b2:35:f6:d5:b6:63:de:a5:c4:33:a2:de:
08:63:10:3b:ca:5e:ff:c4:cb:bb:bf:6f:0b:5b:ba:19:97:8e:
ae:68:95:f2:77:4c:1d:86:7d:49:c1:e2:3f:ec:c1:71:87:b8:
cc:cb:06:9b:06:dc:81:ae:d0:b7:59:a1:be:48:f6:c7:cc:2b:
6b:96:a0:60:c2:cf:77:16:77:93:4a:ea:1a:81:fc:65:3b:07:
a3:63:1b:f9:37:82:a8:87:b5:86:90:b8:c3:f6:d8:18:b6:60:
84:34:9b:02:42:83:da:d5:1c:9b:1c:36:01:99:81:b7:2f:0e:
1c:97:60:81:d2:0e:7e:38:65:40:2a:15:02:46:c6:77:62:91:
42:2b:88:69:5b:94:97:f0:a5:e1:3e:cc:cd:cf:14:d9:13:b6:
cf:fe:86:5b:29:32:29:d2:eb:78:82:ea:57:8e:d1:ae:ee:ba:
58:b8:d7:60:54:00:81:ec:1d:66:d4:3f:07:25:76:39:c6:42:
86:a0:52:25:a7:db:65:21:36:3f:22:46:5e:17:2f:6c:ae:1d:
b3:04:e7:bd
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ8Y+iJQD90YTrXaSnoge1NBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTc3YjQ1ZGJlNDk1ODI5ODM4NzE0OThlOTI4YWVlNzc2MDdlNGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2wyr8S1XMzTatgp2AvzxDRfAHu0
9LWhUoVTHQ6+6sHAzVC/beOzoFAQdvVSpf9L2mel93blRs+a+pHyGEpOO0Kgsxg1
KyIdJ5Uy7tyuKl8dEQnVqKm7WMPXrrOmrua1iryo7/ExG2w1IBCyKam+cTNmAQzX
DmnUE8Siax3NFjPI8R2Febw4hkhFYbxeuTdUlT8AfW8LZiMzXRHS7fTFLPbDiOOM
RYgIJmzueqWfRXSOkAds+eaiPOUkYi1pa+M9FapH/cDCbygtFDmGcrwgOj2ZGt3R
dTASZNiSi/tZ60+XatcRyW+Ts1Kjc+em/Kbyu9iuBE8Cta7i3R1HS0g1+QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFF3tF2+SVgpg4cUmOkorud2B+TSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwL2Q0NjAw
MS0xNjA5LTQ0ODctOTE1MC1iZjc4YmI4NWE2OWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvZDQ2MDAx
LTE2MDktNDQ4Ny05MTUwLWJmNzhiYjg1YTY5ZS8xL1VYZTBYYjVKV0NtRGh4U1k2
U2l1NTNZSDVOSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQE2QygMA0GCSqGSIb3DQEBCwUAA4IBAQAKT/jj
jAEieBwMpZarrGrFFoEujoDo4vVfAoo0wjowNGhPuaNlaVNzqG+yNfbVtmPepcQz
ot4IYxA7yl7/xMu7v28LW7oZl46uaJXyd0wdhn1JweI/7MFxh7jMywabBtyBrtC3
WaG+SPbHzCtrlqBgws93FneTSuoagfxlOwejYxv5N4Koh7WGkLjD9tgYtmCENJsC
QoPa1RybHDYBmYG3Lw4cl2CB0g5+OGVAKhUCRsZ3YpFCK4hpW5SX8KXhPszNzxTZ
E7bP/oZbKTIp0ut4gupXjtGu7rpYuNdgVACB7B1m1D8HJXY5xkKGoFIlp9tlITY/
IkZeFy9srh2zBOe9
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:19:39 2026 by rpki-client