Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.cer
File: 1-dYKjvdx8ekBY9zaUPcyIzxdEuU.cer (raw, json)
Hash identifier: NwgK5SEPt1b6MOazTSJwc8Lxi1sbp0FdxqbdHTql9RQ=
Subject key identifier: F9:D6:0A:8E:F7:71:F1:E9:01:63:DC:DA:50:F7:32:23:3C:5D:12:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FACA7426CF8A441B88606E9DECC1D3509
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 29 Jul 2026 06:54:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.15.128.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:a7:42:6c:f8:a4:41:b8:86:06:e9:de:cc:1d:35:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 29 06:54:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9d60a8ef771f1e90163dcda50f732233c5d12e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:e9:d7:23:51:df:df:dc:2b:01:0a:89:6c:
38:2b:e1:f5:c9:bd:e5:4e:dd:48:31:f2:8a:43:2c:
c9:6d:69:30:ec:0b:dd:ec:59:5a:88:b9:8b:a2:1f:
3f:18:11:3b:6a:1a:e9:6c:00:37:ec:c6:37:63:91:
9e:41:45:86:71:8a:a4:16:32:1f:96:ca:6a:0f:14:
ea:61:16:e6:4b:09:73:0c:22:9b:6c:74:bc:4a:35:
50:6f:9d:1a:06:e3:05:8d:cd:61:25:78:c8:b2:cd:
6c:fc:04:9b:b6:ea:ad:57:a7:c9:41:80:f9:0b:5e:
1e:1d:db:66:0b:16:23:82:3c:57:a7:8c:dd:0e:e3:
d5:91:8c:8a:81:23:eb:68:81:22:09:b1:c1:ed:83:
e1:df:c5:ff:23:92:cf:d0:3e:af:88:fe:21:a8:d9:
00:09:31:6e:fe:c0:38:54:cf:f8:3b:7b:ac:9d:c5:
74:ed:e1:98:51:ab:59:34:9f:55:35:f7:5f:7e:db:
09:cf:cd:91:d4:ef:3f:d2:61:41:23:ba:3d:31:5d:
0e:e5:ba:77:fa:c6:4e:f6:48:fa:6a:c9:44:ef:ad:
16:9b:17:92:42:23:ba:f5:e5:ce:ad:6f:de:f5:a4:
ae:10:13:7d:34:56:29:63:9d:19:88:47:b9:10:a0:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D6:0A:8E:F7:71:F1:E9:01:63:DC:DA:50:F7:32:23:3C:5D:12:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.128.0/21
Signature Algorithm: sha256WithRSAEncryption
68:67:a6:24:8f:4e:53:d8:63:71:b0:f5:a2:f6:47:1d:b8:f4:
c0:08:7b:43:d0:e8:dd:5f:dd:7d:9b:ac:7e:82:48:a1:6e:5e:
29:15:2e:fc:2c:6d:1e:d8:44:70:9a:fe:a6:8f:de:55:5c:11:
9d:b8:72:e7:89:93:71:0e:a8:d9:51:e9:e8:b5:8c:ff:e5:f3:
87:9f:92:e8:52:93:7c:44:7d:bf:12:fc:69:6e:b6:5a:a5:a7:
61:d7:16:5f:38:27:89:10:ce:c3:70:2b:65:29:4f:35:02:8b:
ee:08:ea:d5:f9:21:fe:57:d9:02:a6:ab:4d:d2:84:fc:eb:f9:
d6:60:28:35:a7:28:14:ec:91:34:eb:22:14:ac:76:68:a6:be:
ee:f2:cb:67:1b:09:a9:fd:e7:dc:4d:fc:ab:38:c2:24:1c:d6:
4a:af:29:8c:61:b9:3e:b0:01:3f:d2:c2:e8:b6:6c:37:09:dd:
e1:43:5f:5d:fa:89:f0:89:8d:b8:df:de:cf:48:d6:29:05:08:
62:53:d1:e8:25:3d:26:2c:53:b3:b9:88:c4:12:d3:e9:4b:7d:
bb:5b:04:1d:10:bf:58:a5:0e:30:a4:e5:f5:44:b0:65:c8:c5:
28:26:74:0f:90:4d:8c:58:c7:e0:3f:07:03:43:45:dd:6f:63:
56:03:de:93
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZ+sp0Js+KRBuIYG6d7MHTUJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNzI5MDY1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWQ2MGE4ZWY3NzFmMWU5MDE2M2RjZGE1MGY3MzIyMzNjNWQxMmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGrp1yNR39/cKwEKiWw4K+H1yb3l
Tt1IMfKKQyzJbWkw7Avd7FlaiLmLoh8/GBE7ahrpbAA37MY3Y5GeQUWGcYqkFjIf
lspqDxTqYRbmSwlzDCKbbHS8SjVQb50aBuMFjc1hJXjIss1s/ASbtuqtV6fJQYD5
C14eHdtmCxYjgjxXp4zdDuPVkYyKgSPraIEiCbHB7YPh38X/I5LP0D6viP4hqNkA
CTFu/sA4VM/4O3usncV07eGYUatZNJ9VNfdfftsJz82R1O8/0mFBI7o9MV0O5bp3
+sZO9kj6aslE760WmxeSQiO69eXOrW/e9aSuEBN9NFYpY50ZiEe5EKC//wIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFPnWCo73cfHpAWPc2lD3MiM8XRLlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmL2E5ZTMy
MS05ZGU2LTRkOTItYmJlMC01ZGY3NmIyOTFjNmYvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvYTllMzIx
LTlkZTYtNGQ5Mi1iYmUwLTVkZjc2YjI5MWM2Zi8xLzEtZFlLanZkeDhla0JZOXph
VVBjeUl6eGRFdVUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA8IPgDANBgkqhkiG9w0BAQsFAAOCAQEAaGem
JI9OU9hjcbD1ovZHHbj0wAh7Q9Do3V/dfZusfoJIoW5eKRUu/CxtHthEcJr+po/e
VVwRnbhy54mTcQ6o2VHp6LWM/+Xzh5+S6FKTfER9vxL8aW62WqWnYdcWXzgniRDO
w3ArZSlPNQKL7gjq1fkh/lfZAqarTdKE/Ov51mAoNacoFOyRNOsiFKx2aKa+7vLL
ZxsJqf3n3E38qzjCJBzWSq8pjGG5PrABP9LC6LZsNwnd4UNfXfqJ8ImNuN/ez0jW
KQUIYlPR6CU9JixTs7mIxBLT6Ut9u1sEHRC/WKUOMKTl9USwZcjFKCZ0D5BNjFjH
4D8HA0NF3W9jVgPekw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:26:48 2026 by rpki-client