Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
File: UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer (raw, json)
Hash identifier: KyIhgrYBb1E3d3cijcmBtdsPkSC5wMIGnIyWOiPUyXw=
Subject key identifier: 50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D2FD1D4291B8315C0C62ED81B3C3F7C34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 27 Mar 2026 15:02:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 130.49.168.0/22
IP: 157.22.128.0 -- 157.22.151.255
IP: 157.22.208.0/21
IP: 213.148.16.0/21
IP: 213.148.28.0/22
IP: 2a07:4b80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:d1:d4:29:1b:83:15:c0:c6:2e:d8:1b:3c:3f:7c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 15:02:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=505cec09bfd85db2762696345d68871d09d5e8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:41:e4:6e:74:26:d4:8b:ed:34:24:ee:47:
ad:33:ed:9c:78:24:32:ef:ea:32:f1:35:3d:f0:79:
7a:ff:52:d5:55:79:42:ec:dc:7d:17:7b:80:48:e2:
8f:17:a7:db:b2:de:30:46:d4:47:4b:da:f1:56:0b:
47:f2:d2:73:b5:82:37:c8:80:cd:4d:66:77:07:83:
44:f4:1a:94:11:0d:c7:8c:f8:8e:0e:c9:db:9f:1c:
4e:01:c3:3c:fb:69:f6:c2:3c:b9:9a:e4:16:72:8f:
c1:32:da:01:90:32:b3:7b:fa:37:fa:73:a8:6f:ff:
25:b8:09:61:54:bb:77:fb:3e:9d:3d:e2:05:56:46:
80:7f:2e:09:ff:d7:70:3c:bf:36:be:0a:ad:2e:89:
ee:d6:2f:67:9d:36:78:3e:1c:01:75:95:64:f6:b9:
e8:8b:7c:1c:e8:75:76:cb:a4:89:1e:07:b8:05:a1:
03:08:0a:cd:7f:f4:bd:ee:a4:9a:28:54:f2:cf:5b:
50:e9:aa:c8:6a:ab:37:39:ca:45:d4:09:a3:a8:e3:
ab:55:40:cb:8c:c7:a0:ab:8b:f7:79:d1:c4:41:27:
aa:15:f2:33:76:74:4d:81:a9:ef:32:d7:b4:17:22:
e4:6f:55:56:09:15:72:f6:67:91:dc:e8:80:67:59:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.168.0/22
157.22.128.0-157.22.151.255
157.22.208.0/21
213.148.16.0/21
213.148.28.0/22
IPv6:
2a07:4b80::/32
Signature Algorithm: sha256WithRSAEncryption
8a:c1:67:5c:33:d3:9d:0b:98:ff:bb:2b:37:7b:b4:92:2c:51:
7c:ba:a9:3c:77:db:1b:b2:22:b2:1e:86:24:c7:8a:c4:9d:36:
c8:6f:4a:55:4e:29:91:ed:ed:7c:04:18:e3:49:f9:72:9a:39:
89:0c:40:f3:4e:33:21:df:47:d6:6e:af:93:cb:d6:6a:f7:c3:
7c:dd:fb:d1:07:7c:c6:84:7f:42:66:96:31:12:4e:06:f6:65:
fd:06:cc:02:92:36:83:dd:56:70:57:0f:4b:49:5b:e0:04:4f:
ba:05:46:b2:f3:c1:22:75:bd:7f:c8:44:dd:5d:d4:24:96:31:
ea:a1:e6:24:95:02:e4:ae:ed:d2:7c:86:07:cc:28:bd:f8:db:
bc:6e:ac:ae:d1:36:f9:0a:23:a9:a8:1e:6a:f2:bc:d6:9d:29:
bc:5d:21:e0:1b:50:7e:5c:5f:0c:a1:50:46:25:75:c0:c0:0a:
04:20:08:01:b9:2b:82:68:cc:55:e4:9d:b2:e8:36:69:e4:0a:
47:d3:95:1b:16:5e:31:87:05:c0:47:bb:fe:08:d1:08:80:01:
0f:38:ee:7f:05:cf:de:67:f1:0b:34:df:5a:dd:a5:a7:89:67:
b4:18:ed:b0:49:60:7e:d2:ef:33:64:a3:1b:54:95:0b:cc:a5:
0f:06:6c:6e
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgISAZ0v0dQpG4MVwMYu2Bs8P3w0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzI3MTUwMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDVjZWMwOWJmZDg1ZGIyNzYyNjk2MzQ1ZDY4ODcxZDA5ZDVlOGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvixB5G50JtSL7TQk7ketM+2ceCQy
7+oy8TU98Hl6/1LVVXlC7Nx9F3uASOKPF6fbst4wRtRHS9rxVgtH8tJztYI3yIDN
TWZ3B4NE9BqUEQ3HjPiODsnbnxxOAcM8+2n2wjy5muQWco/BMtoBkDKze/o3+nOo
b/8luAlhVLt3+z6dPeIFVkaAfy4J/9dwPL82vgqtLonu1i9nnTZ4PhwBdZVk9rno
i3wc6HV2y6SJHge4BaEDCArNf/S97qSaKFTyz1tQ6arIaqs3OcpF1AmjqOOrVUDL
jMegq4v3edHEQSeqFfIzdnRNganvMte0FyLkb1VWCRVy9meR3OiAZ1mEQQIDAQAB
o4ICszCCAq8wHQYDVR0OBBYEFFBc7Am/2F2ydiaWNF1ohx0J1ei9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzQ4YWMy
YS0wYTVlLTQwYzQtYjNkNC02NzVkY2IzOWU3N2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvNDhhYzJh
LTBhNWUtNDBjNC1iM2Q0LTY3NWRjYjM5ZTc3YS8xL1VGenNDYl9ZWGJKMkpwWTBY
V2lISFFuVjZMMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF
BwEHAQH/BD8wPTAsBAIAATAmAwQCgjGoMAwDBAedFoADBAOdFpADBAOdFtADBAPV
lBADBALVlBwwDQQCAAIwBwMFACoHS4AwDQYJKoZIhvcNAQELBQADggEBAIrBZ1wz
050LmP+7Kzd7tJIsUXy6qTx32xuyIrIehiTHisSdNshvSlVOKZHt7XwEGONJ+XKa
OYkMQPNOMyHfR9Zur5PL1mr3w3zd+9EHfMaEf0JmljESTgb2Zf0GzAKSNoPdVnBX
D0tJW+AET7oFRrLzwSJ1vX/IRN1d1CSWMeqh5iSVAuSu7dJ8hgfMKL3427xurK7R
NvkKI6moHmryvNadKbxdIeAbUH5cXwyhUEYldcDACgQgCAG5K4JozFXknbLoNmnk
CkfTlRsWXjGHBcBHu/4I0QiAAQ847n8Fz95n8Qs031rdpaeJZ7QY7bBJYH7S7zNk
oxtUlQvMpQ8GbG4=
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:57:42 2026 by rpki-client