Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer
File: tkkanUdy_S313Ak9TiDT7YEHKVc.cer (raw, json)
Hash identifier: z6B/MIQp6bYvxnNBwP9Q96B0BDsrT+kobTUs2J7JgYw=
Subject key identifier: B6:49:1A:9D:47:72:FD:2D:F5:DC:09:3D:4E:20:D3:ED:81:07:29:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D6DC5E7B2EF39831E387C9582946B2BD9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 Apr 2026 15:46:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 208.64.54.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:c5:e7:b2:ef:39:83:1e:38:7c:95:82:94:6b:2b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 15:46:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6491a9d4772fd2df5dc093d4e20d3ed81072957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:93:41:1d:bf:81:f8:c4:ef:11:7f:70:2b:
7b:6f:b8:88:e7:b3:9d:ce:03:33:b8:11:fa:95:5d:
63:b7:5e:9b:d3:e8:c4:e8:84:41:fb:ce:d6:6a:98:
01:bd:af:13:06:2f:ea:eb:40:1c:23:83:c6:c7:7a:
7b:01:d9:99:23:38:0e:ec:32:f1:79:bc:47:1d:11:
76:74:79:1e:7b:60:a3:14:cb:93:6a:61:72:c0:fb:
ab:b0:a2:ee:6c:21:35:bc:9c:92:6f:3f:24:f3:c1:
6f:ac:9f:1c:b1:f8:ca:f3:23:01:c5:62:a8:9c:ed:
f8:9e:c5:91:9f:34:46:e3:0e:d3:91:ee:df:d1:4e:
aa:57:41:8c:8c:66:b0:89:cd:61:f8:f5:9b:db:fb:
1d:31:0b:ed:b8:f5:2b:41:06:e1:3d:a3:0e:b2:37:
dd:24:cf:c4:cb:ef:84:0c:9e:1f:6c:1c:56:50:6a:
58:64:74:b7:aa:18:c7:5e:ed:c8:72:ad:e3:c1:2b:
aa:6f:cc:bc:ae:8c:7a:b1:9b:24:69:17:ac:fb:64:
f2:79:f9:dc:94:76:b2:30:c8:4c:8c:e7:f7:61:a0:
7f:de:79:b5:c1:68:b5:31:29:1b:6e:c9:0e:d5:9a:
e3:75:e0:45:8d:72:e3:c6:76:92:15:79:a9:5f:63:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:49:1A:9D:47:72:FD:2D:F5:DC:09:3D:4E:20:D3:ED:81:07:29:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.64.54.0/23
Signature Algorithm: sha256WithRSAEncryption
22:c2:af:c9:1f:d0:b6:74:a2:a6:01:12:ef:4c:02:50:3a:5e:
cf:83:a1:b2:e0:2b:f4:e4:32:a0:c2:13:8b:4e:aa:90:40:0d:
1d:70:38:9e:22:e1:89:ef:f6:f0:c4:72:3c:95:4f:0a:20:e6:
f9:a2:45:fa:a5:76:af:3f:b8:d4:07:fe:c3:b2:bc:19:c3:2f:
ca:3c:f4:44:3d:d6:21:c5:89:7d:81:6e:5b:a4:b8:85:5f:91:
28:26:ee:10:e3:d4:da:92:00:e3:8d:41:86:a4:bb:49:51:e2:
b0:65:01:81:e1:e0:11:f4:e2:d1:d2:fd:0c:6f:af:f1:7b:a8:
6f:c6:18:ed:c0:ab:f1:69:8a:ae:77:a2:92:7e:b2:a4:e9:82:
33:a7:df:61:4e:36:e8:26:cf:98:1a:f7:2a:51:01:17:fb:a3:
10:63:8a:71:c1:58:12:75:87:bb:25:42:88:e8:0c:92:3b:1e:
73:43:44:80:a7:88:2d:34:10:96:73:d8:7f:04:7e:9f:82:1a:
8b:6d:79:4e:23:64:9c:4d:79:6a:ce:00:0c:1e:c2:3b:ca:cd:
54:6c:f7:0f:2f:26:6a:80:3f:e1:e8:c6:ac:4e:71:fc:b6:53:
6c:80:96:89:46:ea:73:32:30:7b:9e:b7:f5:71:ed:71:01:87:
5f:18:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:35:40 2026 by rpki-client