Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
File: 1XEqnWm0rsl4nBTLBStxObBuddo.cer (raw, json)
Hash identifier: SsswOtH+VLzpCdRwfd2avCe4Cvm6ILjCyNVHcEY04Nw=
Subject key identifier: D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F1D2EA466F63A4EFDF92DC5F5F3002FD4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jul 2026 10:17:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219369
IP: 2001:67c:b1c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:2e:a4:66:f6:3a:4e:fd:f9:2d:c5:f5:f3:00:2f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 1 10:17:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:3b:33:53:f0:25:5c:e5:9b:92:fc:cb:16:
66:4a:6d:29:ce:ba:60:79:6c:c2:27:ac:44:1d:7c:
d7:f9:5c:ba:6c:84:1c:48:b3:1f:ff:40:16:f0:06:
13:b3:c7:37:fb:7d:64:f6:c6:cf:ca:8b:d7:ef:db:
d6:c4:3f:e3:26:c0:92:2e:c9:7d:e9:04:74:53:61:
86:91:13:cc:b5:5d:3d:e6:03:ce:d3:fa:f3:5a:a9:
27:e0:6b:eb:97:1d:87:d7:7e:a8:ea:57:b3:50:69:
3c:ca:47:0b:50:04:3d:c7:a1:4f:1e:44:c5:c8:29:
73:a8:52:78:a2:fe:bd:74:e8:ef:db:cb:d9:b1:ea:
4c:99:2f:68:39:cf:cc:7f:d0:8f:87:e1:4a:a4:f7:
fa:0f:3c:b0:a0:97:0d:07:75:96:07:a9:74:b8:b8:
40:a7:14:8c:51:72:a8:b3:f2:eb:2b:d5:4d:38:1e:
29:c2:87:aa:b0:21:52:7a:23:ad:4c:fe:30:79:30:
d2:de:5a:1e:f4:75:53:35:3b:2c:31:ce:17:f2:ab:
5e:d2:14:05:a9:fe:81:ca:e6:31:5b:50:d9:7f:ac:
18:36:a0:ca:8a:cd:8e:0b:e5:e5:87:2b:62:f3:46:
69:f0:0c:02:d2:e5:9b:3b:87:49:bb:db:1a:f2:40:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b1c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219369
Signature Algorithm: sha256WithRSAEncryption
7c:8b:9e:02:bd:53:97:9f:0f:fb:6f:91:81:ee:e0:89:bb:e7:
9d:06:72:ee:e2:ed:d5:0b:7a:b0:e2:85:31:b0:f6:e0:8a:28:
1f:3d:0a:b1:0a:49:62:5b:3f:39:fa:33:a9:f7:74:80:21:d2:
66:96:00:7c:e0:5b:be:9b:7c:50:11:6b:9b:61:d8:5d:8c:c7:
f6:94:c2:4d:bf:cb:a8:71:4a:c4:c8:b6:9c:9e:f2:6b:51:d9:
90:6b:06:cd:22:fc:51:9e:b8:58:37:78:26:e1:b8:f8:d3:88:
f7:eb:ca:93:8e:4c:be:2f:43:5d:4a:58:0f:81:87:a2:1f:6f:
85:4a:06:fc:48:44:4a:8d:cc:2c:b0:0f:35:c2:29:ad:ff:e8:
f8:0d:f6:a1:b3:fc:ff:c8:1b:ae:cb:46:a7:a0:c6:9a:ee:35:
9c:08:d5:a9:30:44:fe:2a:97:2a:6f:bf:b5:ae:50:61:d9:be:
54:f0:37:8c:31:16:dc:9a:26:23:e5:35:2b:ca:66:02:59:c2:
63:21:42:2a:c9:10:90:39:c5:0e:8a:8c:ac:ac:5d:a0:36:2e:
c3:3e:49:4a:8a:f2:e5:a1:4e:8b:e9:72:1a:b8:23:a2:dc:7a:
a6:78:31:ad:ff:1e:18:13:f3:11:ab:06:25:62:f3:a4:53:24:
64:ae:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 13:35:41 2026 by rpki-client