Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
File: UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer (raw, json)
Hash identifier: +JvytcqaePMx+jMKjFyvn4wbQ83r2tffqvBE1gdJBYs=
Subject key identifier: 50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F1287EA736708C19868DF8C3FA51823D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 29 Jun 2026 08:38:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 62.122.216.0/22
IP: 82.148.0.0/21
IP: 89.232.184.0/22
IP: 94.154.128.0/22
IP: 130.49.168.0/22
IP: 157.22.128.0 -- 157.22.151.255
IP: 157.22.208.0/21
IP: 185.76.12.0/22
IP: 185.228.88.0/22
IP: 193.149.16.0/22
IP: 213.148.16.0/21
IP: 213.148.28.0/22
IP: 213.232.225.0/24
IP: 213.232.245.0/24
IP: 2a07:4b80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:87:ea:73:67:08:c1:98:68:df:8c:3f:a5:18:23:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 29 08:38:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=505cec09bfd85db2762696345d68871d09d5e8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:41:e4:6e:74:26:d4:8b:ed:34:24:ee:47:
ad:33:ed:9c:78:24:32:ef:ea:32:f1:35:3d:f0:79:
7a:ff:52:d5:55:79:42:ec:dc:7d:17:7b:80:48:e2:
8f:17:a7:db:b2:de:30:46:d4:47:4b:da:f1:56:0b:
47:f2:d2:73:b5:82:37:c8:80:cd:4d:66:77:07:83:
44:f4:1a:94:11:0d:c7:8c:f8:8e:0e:c9:db:9f:1c:
4e:01:c3:3c:fb:69:f6:c2:3c:b9:9a:e4:16:72:8f:
c1:32:da:01:90:32:b3:7b:fa:37:fa:73:a8:6f:ff:
25:b8:09:61:54:bb:77:fb:3e:9d:3d:e2:05:56:46:
80:7f:2e:09:ff:d7:70:3c:bf:36:be:0a:ad:2e:89:
ee:d6:2f:67:9d:36:78:3e:1c:01:75:95:64:f6:b9:
e8:8b:7c:1c:e8:75:76:cb:a4:89:1e:07:b8:05:a1:
03:08:0a:cd:7f:f4:bd:ee:a4:9a:28:54:f2:cf:5b:
50:e9:aa:c8:6a:ab:37:39:ca:45:d4:09:a3:a8:e3:
ab:55:40:cb:8c:c7:a0:ab:8b:f7:79:d1:c4:41:27:
aa:15:f2:33:76:74:4d:81:a9:ef:32:d7:b4:17:22:
e4:6f:55:56:09:15:72:f6:67:91:dc:e8:80:67:59:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.216.0/22
82.148.0.0/21
89.232.184.0/22
94.154.128.0/22
130.49.168.0/22
157.22.128.0-157.22.151.255
157.22.208.0/21
185.76.12.0/22
185.228.88.0/22
193.149.16.0/22
213.148.16.0/21
213.148.28.0/22
213.232.225.0/24
213.232.245.0/24
IPv6:
2a07:4b80::/32
Signature Algorithm: sha256WithRSAEncryption
18:39:fb:9f:87:0b:29:8d:3c:14:84:70:5a:dd:45:ef:9c:73:
d9:cf:58:fe:54:64:d9:42:33:d7:db:77:66:81:98:5f:e6:a6:
68:b5:0f:32:63:3e:b9:74:71:24:c7:bf:f2:90:5c:ac:6c:f9:
16:c3:dc:48:85:b4:28:0d:85:41:b4:fd:75:d0:d7:84:c6:9e:
e3:96:82:11:4a:72:37:74:72:83:60:60:5a:da:68:62:6b:db:
6c:e8:55:31:d3:53:27:c4:72:d1:30:7c:66:ce:2e:c2:6e:bb:
76:b3:a0:f7:85:ae:27:68:06:71:14:39:01:60:34:6b:c4:e5:
7f:34:7a:10:9c:e3:20:11:62:67:9e:d3:53:21:e9:67:9b:7b:
70:e7:d5:74:c2:33:ea:7a:ec:5f:1b:8a:fe:92:ba:60:b1:8b:
7c:bb:03:f5:4c:62:a0:3d:79:f3:ce:8f:13:87:31:07:69:85:
60:e8:49:fb:b0:60:2a:46:63:c8:18:8d:12:83:af:61:58:4b:
64:19:86:fb:be:20:7a:f3:4a:71:84:89:5c:7c:00:59:5d:9f:
5e:53:08:2f:40:0a:f5:1a:93:89:41:ee:06:73:44:46:f4:91:
1f:0c:74:d0:ca:bd:eb:24:57:aa:e6:c1:db:2e:74:73:f6:c7:
5c:fa:5b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:53:48 2026 by rpki-client