Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
File: GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer (raw, json)
Hash identifier: sAnpitA+y/YLfKvksc2Jrznq4uGWQZ63IntvT66AXOU=
Subject key identifier: 18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019ED56BCD29739EA546D88651927B076CC2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
caRepository: rsync://krill.byhill.de/repo/byhill-ca/2/
Notify URL: https://krill.byhill.de/rrdp/notification.xml
Certificate not before: Wed 17 Jun 2026 11:51:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219418
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:6b:cd:29:73:9e:a5:46:d8:86:51:92:7b:07:6c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 17 11:51:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=185b1d68a461fa242686542750142382adf2c53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:a4:18:ac:20:c4:15:a2:12:e3:e7:b4:5d:
a8:76:0d:a6:c4:41:f4:a4:ab:8f:7d:da:be:96:57:
72:70:95:2d:81:f3:31:f1:c7:e3:a6:54:4a:82:ac:
a3:13:df:d3:c3:1c:38:0d:f0:9d:60:d8:e2:52:49:
51:71:d5:a2:5a:e7:94:8d:20:fd:f8:d0:41:9e:84:
a5:b4:83:6a:e6:94:e9:ea:48:8c:b9:ca:67:6c:04:
55:69:4e:0d:3e:8d:55:db:23:29:19:24:97:ea:15:
ef:2b:d7:5b:c3:22:68:5b:d7:df:a4:1d:51:ee:10:
6e:ec:5a:f9:7b:a8:26:a5:70:35:d4:a3:38:69:f9:
48:06:10:e9:10:0c:76:62:cb:c1:e6:4a:e3:93:9d:
3a:5e:6e:cc:eb:77:3e:9b:e5:41:cb:7a:cd:3a:9d:
4a:92:69:2d:22:00:42:95:29:82:83:7d:09:fd:08:
1b:83:77:7f:6c:49:7d:f1:f0:1e:8a:d6:db:0f:75:
f0:68:7c:c2:45:e1:bd:9c:f1:05:48:67:ac:1b:6a:
4f:b6:7d:88:58:4c:35:22:0a:55:64:16:e7:08:38:
0a:92:6d:a3:66:55:f9:87:4c:aa:7b:13:3d:13:dd:
48:3e:51:d8:57:24:55:ac:f7:f8:84:93:0c:a8:f6:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://krill.byhill.de/repo/byhill-ca/2/
RPKI Manifest - URI:rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
RPKI Notify - URI:https://krill.byhill.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219418
Signature Algorithm: sha256WithRSAEncryption
9f:c4:ae:e4:94:82:29:a7:88:09:02:11:2f:5f:11:e3:b3:ce:
5e:c5:48:a5:7a:6c:02:07:7b:92:c2:74:11:50:7d:9c:31:52:
54:14:c2:cf:37:2f:a7:38:bf:ff:4b:61:96:93:72:1c:f6:ab:
b9:a4:5b:20:06:a0:7d:53:3e:5f:ac:64:cc:ca:a2:f6:41:80:
d0:e3:5a:c1:5b:0a:50:77:6b:32:b7:1d:47:ad:5e:bf:e6:cb:
cf:70:04:48:b3:e2:cd:ff:3b:82:50:1a:f4:6c:31:ac:f8:ec:
3c:67:66:98:a0:54:49:92:d1:8d:98:08:3f:94:db:74:89:55:
c3:b1:c3:6f:f2:7b:13:3e:cd:c0:98:a6:54:82:1a:a7:ec:fe:
21:9b:5c:e4:50:31:f5:15:2b:fa:eb:e1:6e:15:06:8a:8f:93:
33:ef:fb:ef:4e:b6:1d:1d:27:87:69:55:f1:e2:40:92:70:21:
eb:d7:a6:d1:fb:e7:0e:96:85:f2:66:3c:b2:c7:e6:ea:6b:be:
94:c6:82:7e:1f:03:cf:68:4e:75:cb:e8:cf:e4:14:f7:c2:75:
65:cf:47:df:0d:65:e7:b7:ce:d5:6e:65:fb:70:49:29:36:3f:
a9:17:f5:ff:18:32:8e:b9:f7:aa:19:11:29:d0:85:68:2e:36:
e4:30:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:30:26 2026 by rpki-client