Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b_UMwcfQZtSIHb9N5zn1ECQnTWo.cer
File: b_UMwcfQZtSIHb9N5zn1ECQnTWo.cer (raw, json)
Hash identifier: yhT56wXC115ZQVfhW4j7d9mpSfulsveJgwhzR8ZHZcY=
Subject key identifier: 6F:F5:0C:C1:C7:D0:66:D4:88:1D:BF:4D:E7:39:F5:10:24:27:4D:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DE2629E48FD6AA90D618C8F6C3C688EFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/b_UMwcfQZtSIHb9N5zn1ECQnTWo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 May 2026 07:13:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201866
IP: 185.50.60.0/22
IP: 2a01:a920::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:62:9e:48:fd:6a:a9:0d:61:8c:8f:6c:3c:68:8e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 1 07:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ff50cc1c7d066d4881dbf4de739f51024274d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:c4:6f:94:a5:5e:22:16:f5:e3:bb:4c:67:
61:9b:b9:aa:1b:4f:e7:65:bc:67:92:8a:1b:e4:09:
75:e5:61:bd:50:9e:cb:e4:28:de:7a:34:3e:e3:69:
b5:bd:e6:8d:12:ce:7d:a0:77:3e:91:75:29:fc:38:
a5:04:c0:2d:4f:71:63:4c:19:1d:42:8b:a3:79:06:
74:7a:19:9f:4e:82:49:df:2a:42:9a:e8:75:9e:ad:
96:5f:7a:81:9b:1c:f4:7f:2c:bf:a6:9a:37:e9:6d:
05:74:62:45:66:f5:87:5c:12:92:b3:a5:58:db:a9:
06:f3:d1:86:c8:b7:f3:4f:98:8c:2e:cc:ec:d9:17:
06:b6:74:f2:59:c0:b5:f0:04:4a:a2:0a:29:8d:d7:
26:2f:90:64:d4:b7:b4:1b:4b:cf:20:cc:e4:5e:97:
a7:08:78:a2:cc:f3:a0:6d:ab:70:40:98:b5:9f:11:
01:f9:9b:78:7a:7d:56:53:31:0b:1d:2b:b6:92:21:
32:01:f7:0a:db:8d:d0:17:c9:7e:76:00:d3:41:64:
31:ea:8e:c9:9b:f6:fc:22:a7:1e:32:9c:58:bd:14:
d6:50:9f:da:13:24:ce:36:06:7c:3a:45:ea:eb:ae:
bb:1a:63:c0:60:33:fa:59:14:12:ee:45:88:06:80:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F5:0C:C1:C7:D0:66:D4:88:1D:BF:4D:E7:39:F5:10:24:27:4D:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/b_UMwcfQZtSIHb9N5zn1ECQnTWo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.60.0/22
IPv6:
2a01:a920::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201866
Signature Algorithm: sha256WithRSAEncryption
9a:c3:4d:62:28:5b:d4:3f:d7:50:f3:6e:c1:9f:12:bd:52:a4:
30:e0:b8:63:5c:21:57:c9:08:b1:31:57:f8:84:35:13:69:64:
ce:0a:c4:e6:d3:af:97:52:9c:4c:47:5d:4e:93:db:db:c2:41:
24:64:3b:1d:79:93:d2:5b:ba:e4:e8:52:2f:bc:e4:48:d5:46:
b3:f1:7f:9d:21:ae:fb:c6:1b:a0:66:45:85:40:81:98:db:15:
6e:03:5b:34:ef:2b:9f:f5:28:50:9f:71:c6:5d:d4:24:5f:44:
24:a9:31:a9:0e:e4:45:08:5d:cf:11:a1:7b:09:38:02:26:c5:
01:e2:5d:e5:0e:96:99:e1:6e:5e:0d:32:14:cb:56:73:cf:00:
79:13:23:9b:85:06:81:3e:9b:44:53:70:9b:65:e8:e8:8f:97:
e3:25:63:c2:ef:1a:cb:85:25:f8:83:55:bf:60:de:fb:e2:40:
6b:66:18:03:5a:3f:86:40:78:45:a6:86:4b:fd:6c:29:56:4c:
c7:57:9b:b5:d7:ef:57:f4:8b:e0:ac:48:f3:bd:28:61:2a:42:
1c:04:d7:2d:29:7e:6f:0e:d1:43:af:57:10:64:63:37:a0:39:
5f:1b:3b:9b:9f:89:84:0c:0b:ab:7b:5c:59:82:74:63:17:6a:
bf:c3:7a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 13:16:41 2026 by rpki-client