Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.cer
File: Udx4B-hK9SOTD-Aj5cWtr9_h1NU.cer (raw, json)
Hash identifier: 3n8tkgfjY83622SCPY0M97tWHIJPh/kjLsrLkURbqQ0=
Subject key identifier: 51:DC:78:07:E8:4A:F5:23:93:0F:E0:23:E5:C5:AD:AF:DF:E1:D4:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F95DAFFEB9C8225B8226ADBE7C48602D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 24 Jul 2026 20:39:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200010
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:da:ff:eb:9c:82:25:b8:22:6a:db:e7:c4:86:02:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 24 20:39:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51dc7807e84af523930fe023e5c5adafdfe1d4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:57:c7:a0:6d:d2:03:d3:89:41:73:6d:d8:f6:
12:c3:c6:77:ab:4f:6f:c2:a3:98:ad:cb:fc:2f:cb:
99:d5:7c:e6:5e:de:02:7a:6e:97:51:4d:83:3c:21:
f7:56:96:c8:52:20:18:f0:78:a0:7a:48:bc:fa:56:
c8:40:6b:cd:5a:af:02:48:68:d1:ba:58:64:e8:48:
10:bb:34:94:e2:f6:10:63:a6:52:8f:4b:42:40:9d:
fa:87:4e:d8:0f:98:6c:ab:9b:c1:85:d7:53:27:44:
63:95:0f:a0:0a:49:bc:2e:4a:b1:5d:46:f5:90:ea:
ba:84:af:de:50:4d:5a:95:63:a1:18:8f:ff:e9:1d:
4c:d4:f1:4f:b7:33:8e:db:3b:85:33:89:9a:70:94:
8c:4a:f7:54:d6:2b:5c:7a:8f:36:cf:a7:15:27:8c:
01:ca:1e:4d:76:43:39:82:66:49:06:6a:f2:d0:c8:
45:eb:fb:1d:28:2c:52:ef:3a:b2:1f:a2:3b:65:ed:
e9:45:0f:d4:31:c9:86:9e:15:c3:30:6c:e6:94:ab:
95:c0:8f:2d:ee:00:93:4a:43:de:71:08:ed:6d:73:
97:28:b5:ae:6c:33:e6:cd:74:02:c8:75:14:07:18:
18:92:19:b9:99:4a:e7:80:ff:b4:6f:dd:2b:34:7e:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DC:78:07:E8:4A:F5:23:93:0F:E0:23:E5:C5:AD:AF:DF:E1:D4:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200010
Signature Algorithm: sha256WithRSAEncryption
15:ed:83:53:75:15:91:be:16:36:35:12:d5:0c:87:90:c2:40:
6a:f1:95:c4:5b:d7:70:33:f9:53:43:7c:bb:d7:21:de:c4:92:
c9:3d:ec:d1:96:ec:85:8e:ea:ba:b7:fd:08:1c:f0:28:65:29:
89:97:9c:4a:ac:d6:0e:13:3a:2c:3b:1c:f7:c0:d2:51:54:a1:
91:1d:a2:98:d2:7d:05:8b:ce:81:87:f6:e1:dc:88:9e:fc:2b:
d2:b9:80:38:50:f1:4b:a0:0e:a9:2d:a0:8a:2d:7a:53:60:6e:
13:92:11:18:21:fa:1b:ab:bc:c3:f9:c7:ea:1e:35:4d:6c:42:
1c:d0:2a:4d:7d:bd:44:d6:1b:90:b3:29:f2:38:5a:85:aa:1d:
61:8c:f0:bc:07:74:b4:ae:be:fc:af:45:9d:b3:c3:4b:73:23:
98:e9:c6:8f:f2:0f:f3:55:4a:3b:a3:31:66:d5:c9:54:f7:9f:
7a:28:e5:e4:76:51:5a:df:f3:48:a0:30:ff:e5:42:dd:ec:35:
68:f6:7e:8b:34:eb:65:17:fc:cf:b4:e8:af:47:03:8d:12:06:
9f:a5:85:24:0b:53:9d:73:02:da:3e:bd:0a:20:c6:14:c2:24:
c9:2f:74:ca:60:09:7e:cd:6c:85:4d:27:20:11:5c:0b:e0:6f:
60:38:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:39:26 2026 by rpki-client