Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/GlFfMRViAE_WzmvcOQfQ3yoK9cc.cer
File: GlFfMRViAE_WzmvcOQfQ3yoK9cc.cer (raw, json)
Hash identifier: TAtApBXgtdryo33gLvcZGokdWvKCTYKGnNaD4331s7k=
Subject key identifier: 1A:51:5F:31:15:62:00:4F:D6:CE:6B:DC:39:07:D0:DF:2A:0A:F5:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0E6B10658899D7EBC5B019F52787BE2A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/GlFfMRViAE_WzmvcOQfQ3yoK9cc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Sep 2026 06:25:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.50.83.0/24
IP: 195.137.189.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:b1:06:58:89:9d:7e:bc:5b:01:9f:52:78:7b:e2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 28 06:25:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a515f311562004fd6ce6bdc3907d0df2a0af5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:57:07:b0:83:59:9b:20:82:f0:df:c7:e5:
d5:0b:59:3c:02:b8:9f:ac:8a:7b:38:68:18:6f:98:
72:70:f8:1e:41:ce:8c:56:4e:da:46:fb:13:3c:4d:
64:d9:c7:a5:f0:b4:41:f8:ce:40:9e:fe:70:c0:24:
66:cd:3c:43:4f:a4:09:f7:5b:b1:c7:c5:a9:15:2f:
e3:26:33:b5:02:08:e4:e6:b8:c2:a8:cb:91:fa:ad:
18:fc:fe:21:db:07:f4:38:f3:16:9a:3e:d2:fe:ca:
03:a2:bf:ac:3a:20:31:91:d8:58:58:4b:67:0c:13:
96:96:90:ca:fa:2c:f5:a8:24:9e:94:bf:16:ab:1c:
2c:55:27:dc:97:55:48:fc:a1:00:ea:78:c3:05:ac:
a1:ba:d4:3c:f6:78:5e:2f:6f:45:6b:b3:62:d6:1c:
07:e9:14:35:e1:b7:e4:d4:ee:31:27:02:8f:c5:e6:
76:39:3e:ba:02:80:ce:72:a0:f8:37:76:d4:98:bf:
05:2c:cf:c7:91:70:b2:b7:c3:fe:89:4f:52:e2:97:
af:04:65:f2:de:2e:4b:73:8e:20:f8:15:39:95:72:
3b:7b:a8:1e:db:f3:87:93:2f:04:8b:01:c7:fa:e0:
dc:f9:e8:90:d4:58:af:e6:26:b0:14:1c:2a:e7:27:
9a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:51:5F:31:15:62:00:4F:D6:CE:6B:DC:39:07:D0:DF:2A:0A:F5:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/GlFfMRViAE_WzmvcOQfQ3yoK9cc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.83.0/24
195.137.189.0/24
Signature Algorithm: sha256WithRSAEncryption
12:5d:cb:30:3e:11:14:1f:bf:e8:09:b5:dc:19:39:a2:cb:f0:
02:8f:20:1d:8c:2c:55:ec:c0:8b:70:23:98:49:3f:94:a4:53:
d4:d5:75:01:02:42:4d:04:27:f5:28:a5:e0:8b:5a:42:79:21:
16:b6:82:2b:97:f1:9e:a2:54:3e:a8:da:b1:38:1e:ca:a2:d8:
89:aa:88:2e:a7:fe:28:a1:bb:a1:84:4c:5b:b8:a6:ad:4c:06:
e2:f3:aa:37:0d:e4:72:e0:0e:ca:df:b0:15:8a:b2:fd:53:4b:
21:e6:7a:43:58:05:67:8f:58:cc:83:75:c1:35:3d:28:7c:a8:
d0:a8:1a:a8:9e:e3:39:aa:b6:98:8c:2c:45:c3:d2:9e:45:92:
5a:8b:87:60:50:6c:5f:9b:40:6d:86:87:b1:2d:ce:af:91:25:
01:90:f8:38:9f:4f:e9:7f:eb:72:19:75:c9:cd:e4:dc:ab:dc:
3c:0b:e0:23:f7:b0:9d:33:81:e0:ca:bc:5f:dc:b7:51:bd:28:
76:c2:90:50:19:59:eb:8b:2c:78:55:14:3c:e2:24:c5:f5:e8:
e2:23:73:48:2d:ec:f2:75:af:b9:2b:a1:7f:2e:e3:e4:67:14:
d3:2b:ec:cd:78:3b:20:81:3c:1e:fc:24:44:d5:20:9b:87:a1:
12:37:81:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:01:52 2026 by rpki-client