Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
File: TeLcLByThHv5efmwEO3EzahJ9Pg.cer (raw, json)
Hash identifier: Rc9oMZyeAFBfylEhpuiTEf1KJFelEAzNfymGfvDGxkU=
Subject key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EAB2EC1DD3DBA8EBFFDFBDED88E6ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:17:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2e64::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:b2:ec:1d:d3:db:a8:eb:ff:df:bd:ed:88:e6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:17:b4:67:ea:cc:51:5d:33:c3:a9:19:6d:
2d:61:d4:52:d0:f2:bd:ce:f7:28:12:2d:43:29:f3:
d0:5c:73:65:f4:e1:f8:ad:d4:46:3f:3d:c4:66:51:
ab:77:7a:59:a0:cf:e9:59:4e:c3:bb:7a:f7:6d:42:
76:a8:8b:47:77:1d:bd:28:65:50:35:e8:6e:a0:4d:
ae:46:24:ab:d2:46:28:73:f9:1c:3f:4a:a8:2e:e5:
ec:4f:25:39:67:83:3a:6e:c4:94:35:93:a3:bc:7c:
42:50:89:f9:df:7b:fc:6e:73:95:a3:11:43:32:14:
fd:7c:e5:c5:98:7e:46:d8:7d:52:3a:d3:8a:d0:2d:
6e:61:81:88:07:eb:cd:c4:08:1b:3c:af:49:ec:3a:
eb:50:f1:1a:97:7a:ee:0d:18:4b:c3:01:87:ea:97:
3e:f2:e3:98:8f:cc:35:91:42:a5:f6:3e:50:06:d5:
28:fd:5f:42:08:bd:20:e3:ea:d2:13:39:a1:cf:79:
d5:75:e9:49:19:7d:67:25:83:61:c7:1d:7d:e8:12:
ab:46:b4:17:80:4d:19:e2:7a:51:30:eb:81:b7:dd:
36:17:34:18:e4:ce:bd:d4:85:f1:c0:a2:24:c9:a6:
af:ed:3f:8a:2e:b0:be:19:10:c9:13:ce:40:0e:3d:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2e64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:3f:65:e1:b8:9d:6c:22:19:96:57:6b:99:2f:67:5b:96:68:
99:88:fa:34:a2:94:2f:f5:96:20:37:f0:f0:fb:bb:9f:c1:75:
4c:7e:94:d7:0c:dc:cc:04:ff:d0:e5:88:f2:02:15:8f:ec:38:
9e:d8:ed:b1:64:f5:2c:8c:71:87:f1:f5:8c:05:1c:e6:17:cb:
0e:8d:47:10:68:ee:ed:a8:0b:51:e2:8f:16:28:50:ac:b0:5d:
03:8a:50:7f:9a:8c:bb:c9:40:27:74:db:50:c0:f8:c8:99:11:
81:84:ae:f6:36:c3:9f:9a:7b:dd:6e:4c:72:4b:ff:29:a1:61:
1c:cd:d9:ec:f6:6c:50:78:37:00:66:b1:8a:76:d7:9e:6c:2c:
74:80:4a:55:30:55:99:15:1e:aa:b2:9b:87:38:b9:6d:65:c0:
9c:27:5f:a7:f4:b1:b7:7c:d5:b9:64:c5:67:cf:29:88:03:c0:
21:c0:2e:d4:ee:61:0e:f4:f5:8e:68:df:e9:a7:92:32:53:e1:
f7:0d:1f:e9:4b:f6:86:b1:97:fc:6e:09:cc:54:0a:bd:fd:c4:
14:46:8a:d9:26:8a:a4:55:f5:8c:6f:5d:71:d0:03:a1:b0:0e:
54:f2:d6:00:59:c7:d8:59:85:cc:a9:61:3c:dc:ce:dc:6a:e2:
29:45:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:33:34 2026 by rpki-client