Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
File: uFMBDF5uyIn4FaqqYX36hQzvGBI.cer (raw, json)
Hash identifier: epdAjPl8DBonmGsElVf0GOPqquL7Kzo2ktgRV4+m9uA=
Subject key identifier: B8:53:01:0C:5E:6E:C8:89:F8:15:AA:AA:61:7D:FA:85:0C:EF:18:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F41FA4B77C2BD770E9F437F15046E8576
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 Jul 2026 13:45:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215628
IP: 66.203.252.0/24
IP: 66.228.88.0/22
IP: 94.156.245.0/24
IP: 109.175.234.0/24
IP: 194.62.113.0/24
IP: 203.32.197.0/24
IP: 203.56.45.0/24
IP: 208.88.67.0/24
IP: 217.13.99.0/24
IP: 2a0d:6c00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:fa:4b:77:c2:bd:77:0e:9f:43:7f:15:04:6e:85:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 8 13:45:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b853010c5e6ec889f815aaaa617dfa850cef1812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:bd:a4:01:c5:b7:52:e6:92:e6:69:79:85:
04:e3:13:8e:9d:42:ef:be:b5:a7:8a:e0:5f:49:bc:
6d:cc:a6:24:b4:d1:6c:59:06:55:ee:c2:75:4b:ee:
e1:65:83:52:3d:25:2d:20:66:b3:38:ba:21:94:f5:
02:33:83:b0:a5:2e:c2:fd:0d:43:4d:36:6d:89:fd:
5e:ab:f8:dd:e5:e1:42:51:54:cd:20:57:12:96:a9:
8a:9a:f5:78:a0:97:cc:38:23:72:13:97:7b:e8:1b:
af:5b:e6:14:5c:0c:72:9d:20:b5:ca:31:fb:06:16:
6d:f6:20:4d:5c:68:20:1c:7d:29:27:8f:bd:ca:e0:
a9:f8:68:01:45:4c:bc:1f:6d:0e:ce:d8:28:de:14:
e4:e5:4b:9a:e5:c7:8b:ad:d3:bc:a6:23:7d:49:29:
a4:c6:5a:b3:91:db:9c:aa:a8:b6:39:92:34:4d:e2:
d9:20:b7:04:07:40:de:bf:0b:ba:b1:3b:62:81:4d:
a1:ab:e8:0c:cb:0b:57:47:6f:80:13:c0:cb:30:07:
eb:bb:58:99:14:48:3a:f9:de:7a:fb:58:2f:c5:cf:
c4:ea:d0:f6:24:72:a2:e7:1b:13:c6:59:78:7c:b1:
55:6e:3c:7f:29:22:e8:b7:40:f5:d2:c9:1c:43:5f:
b9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:53:01:0C:5E:6E:C8:89:F8:15:AA:AA:61:7D:FA:85:0C:EF:18:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.203.252.0/24
66.228.88.0/22
94.156.245.0/24
109.175.234.0/24
194.62.113.0/24
203.32.197.0/24
203.56.45.0/24
208.88.67.0/24
217.13.99.0/24
IPv6:
2a0d:6c00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215628
Signature Algorithm: sha256WithRSAEncryption
55:cd:53:21:28:10:46:41:b9:4a:38:21:95:bb:fc:e3:7b:e1:
4b:61:0a:98:46:47:1c:8e:54:dc:ab:6a:58:18:b2:2c:6c:e7:
da:76:da:55:7b:b9:44:9c:78:c2:b3:10:42:e0:ef:f0:f3:a8:
04:20:b1:de:66:fb:3c:02:1a:97:de:7d:f2:bf:bf:fc:80:4e:
85:06:1a:36:03:42:cb:06:15:63:8e:e1:72:41:ba:b9:da:64:
45:bd:6c:3c:6e:7e:54:e6:de:98:31:3b:4c:99:f6:a3:a4:07:
21:43:fe:4b:fe:30:91:58:94:af:e6:33:42:79:b0:ab:04:d3:
5b:25:68:8f:db:81:44:74:20:50:14:c0:f9:14:c0:87:57:fa:
cb:19:86:f5:d9:65:5e:65:3a:b9:3e:f9:b5:7d:db:2a:ab:6c:
a4:3c:d0:03:b5:a6:f8:5b:53:64:bf:15:ac:ac:2a:f0:bf:2b:
42:96:0d:b3:f8:35:12:5c:18:ba:a3:20:5f:19:30:53:28:0b:
ae:7d:4a:ad:69:b7:c8:56:f3:da:b8:1f:98:78:84:36:26:a2:
cd:6f:dd:34:6f:12:b9:c2:bf:34:2a:f9:89:9d:de:b7:6d:95:
74:7e:07:c2:e2:91:d9:b3:5e:75:2e:73:7c:d3:b2:47:6b:ab:
16:56:6f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:33:25 2026 by rpki-client