Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/baE8YP8HTHDfBAnD4Cit1o-j5_c.cer
File: baE8YP8HTHDfBAnD4Cit1o-j5_c.cer (raw, json)
Hash identifier: hyPLtpbAA7DcK1+Y0tDtsprM1MUzXkQhkjEEpg/SFUg=
Subject key identifier: 6D:A1:3C:60:FF:07:4C:70:DF:04:09:C3:E0:28:AD:D6:8F:A3:E7:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A198EAC8012142E79FA6B3B8114EEA1586
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/baE8YP8HTHDfBAnD4Cit1o-j5_c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Nov 2026 21:01:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218455
IP: 2001:678:1360::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:ea:c8:01:21:42:e7:9f:a6:b3:b8:11:4e:ea:15:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 1 21:01:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6da13c60ff074c70df0409c3e028add68fa3e7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:c8:c5:ea:0f:42:d1:d8:28:6b:e0:b0:18:
9f:ca:86:cc:6d:0f:78:9f:2a:c0:98:93:f0:d6:3b:
18:41:4c:a2:11:39:e7:81:1b:fe:73:13:ad:ab:c9:
0c:a6:fd:66:6f:1c:01:bf:cd:88:70:5e:45:d3:38:
4a:1c:83:2a:78:1a:e6:85:e5:d0:b4:a5:7f:dc:db:
69:da:98:94:5a:a6:2d:7e:27:be:6f:cd:71:95:1c:
e1:8c:f1:66:2f:6a:ef:2c:2b:99:7b:74:b0:d7:7b:
3a:29:78:3e:7c:fa:bc:ca:96:48:5b:d3:b6:0a:2d:
76:f2:31:93:cc:91:f9:1f:40:c0:3e:b1:92:e0:6d:
f2:06:cd:c9:57:37:89:f9:5e:d2:54:db:47:87:97:
24:46:97:e5:b8:0c:9c:17:45:e0:cf:87:f6:30:b0:
5e:df:c7:b7:83:e9:e7:24:87:c2:42:b7:4d:2f:03:
91:d0:e3:cf:70:7c:bf:59:e7:56:15:6e:ed:e8:5c:
1c:17:88:e7:99:c1:18:c6:c0:f6:f2:0a:52:05:ab:
4e:9f:58:4e:51:d6:04:7b:3c:91:48:c4:1e:19:c3:
de:d5:69:52:50:a5:6a:e8:07:76:a5:bd:cf:66:dc:
bb:4d:6f:b1:21:ce:82:17:f2:f0:e2:3f:a8:72:2f:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A1:3C:60:FF:07:4C:70:DF:04:09:C3:E0:28:AD:D6:8F:A3:E7:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/dfd38d-a5af-4f91-827e-6522b41f563e/1/baE8YP8HTHDfBAnD4Cit1o-j5_c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1360::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218455
Signature Algorithm: sha256WithRSAEncryption
86:b0:44:05:5c:fe:64:2e:b0:76:4a:d8:d6:ab:63:d4:a2:d5:
0b:45:e2:0a:67:b1:60:5f:73:95:08:0f:64:2d:4b:94:1b:cd:
55:38:b7:fa:ec:80:29:35:a7:a5:35:bc:7b:49:f9:d8:7f:31:
f7:e4:7f:db:ca:72:f4:21:b8:b7:cc:42:09:ed:fd:59:48:d1:
ce:39:e2:81:b9:de:c2:f2:fc:82:f5:ea:12:67:39:f3:3a:d8:
31:83:36:13:7d:3e:20:ff:89:af:59:1c:d2:50:c4:ea:92:7c:
c5:b7:11:b9:31:20:47:3f:8f:ea:35:a6:08:5c:f9:86:6c:57:
cf:0a:1d:43:98:88:0b:cd:fb:0e:46:30:2b:3c:0b:ed:6e:7e:
31:ce:17:b9:f1:76:86:85:ba:7a:ce:d3:5c:61:2b:b1:59:b1:
96:a4:63:c8:c4:05:55:02:26:d9:26:b0:82:ff:5f:be:35:9c:
46:45:1d:bd:89:c7:a8:51:46:53:b7:98:36:8c:23:fa:82:19:
05:b6:89:4c:c4:b7:b0:6b:a7:7e:d0:f6:a1:cf:07:82:86:da:
ef:15:f7:3b:25:8d:35:f3:9e:03:c0:24:3d:71:ba:f8:2b:ea:
58:76:49:fd:07:7e:2b:ad:2c:3e:6e:8a:c6:3e:a1:2c:7e:36:
76:6a:65:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:13:15 2026 by rpki-client