Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
File: X2tkyBuOyHNUU-lAP72UlpiWmUA.cer (raw, json)
Hash identifier: dAj96mC4Yv7VizH2W6jkx6rJbJp0KlJIp2EicJGeqVE=
Subject key identifier: 5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019ED9B9B3A6A426240D524E482FAD4E7115
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 18 Jun 2026 07:54:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.105.82.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:b9:b3:a6:a4:26:24:0d:52:4e:48:2f:ad:4e:71:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 18 07:54:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f6b64c81b8ec8735453e9403fbd949698969940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:7a:7e:9b:9a:4d:46:85:b8:e2:fd:ad:f2:
8a:f5:97:11:7e:05:19:c2:08:35:f0:d9:1f:b4:f7:
85:63:20:fb:bf:5b:81:57:ff:38:bf:6d:89:d7:c4:
25:93:35:e5:b8:97:08:1b:04:8c:31:fa:34:ed:d0:
30:5f:d9:bb:2e:11:cb:bf:68:09:ae:19:97:dc:5d:
94:ca:fc:fc:7d:1d:1f:84:5d:48:68:bd:0c:6e:89:
3d:07:50:21:ff:89:e5:27:03:95:8a:10:ac:fc:71:
88:ff:2a:92:76:e2:d9:fc:59:5b:7e:0a:87:41:ab:
8d:a9:25:73:0f:d6:ee:c8:1a:6f:16:51:4b:02:dd:
45:ab:05:c9:a8:6d:af:90:bb:26:63:3e:c0:ee:69:
92:43:e2:d3:56:30:a6:00:63:e2:38:d0:c0:1d:bb:
e0:fc:c4:3c:d4:4d:0d:2f:1e:8a:4b:28:27:10:f3:
ec:b1:a9:79:c5:77:59:a2:7d:dc:0d:37:b8:78:14:
50:27:1b:4a:f5:c7:e1:6a:06:00:c6:e4:e8:5c:4a:
0b:76:60:e9:0f:4b:31:b8:7c:79:92:06:70:9c:5d:
c7:08:bb:b1:3e:d9:01:d7:73:9d:0d:b6:f7:03:3b:
29:94:19:89:8e:40:6d:cc:fe:68:a8:c5:97:a9:c9:
02:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.82.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d5:8e:c0:a7:c2:fd:83:17:c4:11:06:18:4d:e5:4b:b2:cc:
4d:cd:b8:e5:51:20:33:5c:aa:bd:90:c2:10:4d:ae:bc:44:46:
1c:96:90:da:65:5f:ce:ac:d6:8f:89:76:32:38:d9:70:0b:08:
5b:ca:94:51:a2:4b:65:32:56:ae:00:94:50:45:13:aa:4b:18:
cb:e0:36:08:cd:1c:37:f3:28:02:be:a5:90:56:5b:41:c5:d6:
c0:de:1d:43:69:ad:99:b1:e3:29:00:50:c2:23:be:fd:0f:31:
19:19:40:11:88:4b:f1:6e:06:f6:2e:84:a8:4d:8c:ec:75:4f:
1f:96:07:f2:d2:d5:24:c6:c0:43:d0:51:61:9f:d1:d4:10:28:
ef:07:3e:f4:6a:10:80:eb:ce:5b:a6:9f:a0:90:77:64:e2:4a:
cd:34:8f:06:0e:b0:ff:ea:0d:53:7c:36:bd:6e:0a:92:c8:85:
51:e6:03:59:2e:e4:29:7c:aa:8a:15:ee:29:ab:32:c3:2d:23:
95:43:d8:6e:d1:09:43:a1:6d:a4:f6:f4:8c:34:e4:78:dd:a4:
88:1c:47:24:55:a3:cb:6a:b0:18:cb:7b:13:77:be:14:0d:3c:
14:1d:ae:cf:a4:54:48:5c:10:c4:36:23:c1:52:d5:55:2d:84:
3f:f2:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:01 2026 by rpki-client