Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
File: uuKqXiYD98-V17CaeLWIrc7-Mig.cer (raw, json)
Hash identifier: VDP6gL5Bm4YDnF2I9ByCZ3YFr3lUX7dOfGw4jo/mJNw=
Subject key identifier: BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D85EE1619C693B2C65080EF4556AC8249
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Apr 2026 08:21:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.65.118.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:85:ee:16:19:c6:93:b2:c6:50:80:ef:45:56:ac:82:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 13 08:21:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:6f:04:73:aa:49:ef:34:4d:a5:c9:1c:7c:
d8:e4:ca:05:a6:5e:78:fb:d8:b9:c2:2d:a6:1a:3e:
60:ab:ba:bc:06:5c:5d:0e:1a:4a:4d:6b:20:a4:78:
6a:a9:4a:d6:19:89:a3:7d:98:8c:4f:3f:9a:82:65:
c2:74:94:a6:ff:d3:7d:9d:18:45:7d:7d:85:c7:4d:
61:41:d8:d3:fe:e0:69:a6:33:a5:56:91:5f:49:85:
30:3b:0c:cd:11:54:ec:0d:0d:2c:68:44:de:95:f2:
17:77:bc:ef:1c:ef:ed:1b:7b:18:bc:5d:c1:3e:ec:
3a:ec:4e:67:c8:9f:cd:27:f2:87:4e:b2:b9:d7:c6:
7d:4c:26:62:34:a4:a4:29:96:09:f9:6f:8a:48:01:
eb:9d:76:16:73:7e:6a:37:f9:80:28:ec:95:f1:45:
9a:db:23:67:ce:be:17:97:5a:2e:f9:60:4a:89:ef:
08:31:3e:65:68:f5:c5:bb:4c:d7:cd:00:69:17:63:
f0:cf:65:f6:38:99:bd:a1:f8:41:1a:42:40:af:a3:
ee:ba:51:f0:81:07:d2:fa:4e:dc:f3:cd:00:ca:93:
9c:33:76:a7:0e:75:41:54:d3:af:7e:a7:13:34:b4:
49:79:80:5b:1b:16:91:de:4b:60:d0:fd:6b:3c:98:
34:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.118.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e6:f1:56:68:2b:c2:33:6e:85:e1:32:7d:f3:09:b9:12:4f:
7a:98:a8:92:79:47:8b:52:46:f6:d9:9a:da:c2:1c:57:f8:6b:
e3:aa:a1:dc:8c:9b:0a:d8:f3:5e:f1:21:9e:42:d5:0f:4f:d0:
bb:4d:ba:bf:08:57:cd:f4:be:73:a8:36:21:45:a4:6b:5c:c8:
93:21:a6:8b:81:ad:c4:3f:43:72:14:6b:b5:52:b9:70:6e:c8:
1f:aa:5c:a9:25:e5:50:97:ef:6e:4f:e8:c2:54:8a:19:c6:9e:
17:e2:41:9c:8d:69:53:46:04:f4:09:23:26:90:39:f5:be:98:
20:59:38:75:49:2e:82:20:d9:39:d6:9f:31:2b:ae:15:76:be:
06:b7:e8:a0:28:34:12:c0:a6:b1:15:e3:ba:b6:8f:e3:e4:c8:
87:a3:91:37:16:d4:11:c9:f0:db:8a:76:d5:e4:3e:a8:f1:70:
d9:e7:de:73:54:13:8d:db:a7:d0:05:6c:0e:95:9b:b7:38:d9:
19:9b:01:2e:37:c4:92:4c:24:00:03:77:35:d6:a2:90:56:69:
6e:5e:cd:28:48:8a:91:ce:8b:8a:36:8d:84:67:e3:35:59:9f:
45:e4:ff:82:85:72:a9:4a:04:a9:db:1b:9e:32:82:9b:40:db:
80:58:56:61
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ2F7hYZxpOyxlCA70VWrIJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDEzMDgyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWUyYWE1ZTI2MDNmN2NmOTVkN2IwOWE3OGI1ODhhZGNlZmUzMjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWZvBHOqSe80TaXJHHzY5MoFpl54
+9i5wi2mGj5gq7q8BlxdDhpKTWsgpHhqqUrWGYmjfZiMTz+agmXCdJSm/9N9nRhF
fX2Fx01hQdjT/uBppjOlVpFfSYUwOwzNEVTsDQ0saETelfIXd7zvHO/tG3sYvF3B
Puw67E5nyJ/NJ/KHTrK518Z9TCZiNKSkKZYJ+W+KSAHrnXYWc35qN/mAKOyV8UWa
2yNnzr4Xl1ou+WBKie8IMT5laPXFu0zXzQBpF2Pwz2X2OJm9ofhBGkJAr6PuulHw
gQfS+k7c880AypOcM3anDnVBVNOvfqcTNLRJeYBbGxaR3ktg0P1rPJg0dQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLriql4mA/fPldewmni1iK3O/jIoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzBjZWUy
My0wNjRiLTQ1NjYtYjg2My1iNDk2NDM3Y2M1ZGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvMGNlZTIz
LTA2NGItNDU2Ni1iODYzLWI0OTY0MzdjYzVkYy8xL3V1S3FYaVlEOTgtVjE3Q2Fl
TFdJcmM3LU1pZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuUF2MA0GCSqGSIb3DQEBCwUAA4IBAQAk5vFW
aCvCM26F4TJ98wm5Ek96mKiSeUeLUkb22ZrawhxX+GvjqqHcjJsK2PNe8SGeQtUP
T9C7Tbq/CFfN9L5zqDYhRaRrXMiTIaaLga3EP0NyFGu1UrlwbsgfqlypJeVQl+9u
T+jCVIoZxp4X4kGcjWlTRgT0CSMmkDn1vpggWTh1SS6CINk51p8xK64Vdr4Gt+ig
KDQSwKaxFeO6to/j5MiHo5E3FtQRyfDbinbV5D6o8XDZ595zVBON26fQBWwOlZu3
ONkZmwEuN8SSTCQAA3c11qKQVmluXs0oSIqRzouKNo2EZ+M1WZ9F5P+ChXKpSgSp
2xueMoKbQNuAWFZh
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:18:29 2026 by rpki-client