Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
File: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer (raw, json)
Hash identifier: wADA2XvR62fNK8FqTQx/7SkNhygOgsY+etp6/Xf0Po4=
Subject key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DCAC5F5FDA43891AB5E62EFE3BD85C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:19:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.64.140.0/22
IP: 2a04:fa80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:c5:f5:fd:a4:38:91:ab:5e:62:ef:e3:bd:85:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:19:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:67:6b:cf:30:9a:51:59:eb:9b:9f:5b:e1:
fd:1f:11:f6:83:cf:9f:77:f8:7f:84:dd:7a:37:aa:
83:d4:18:8c:e2:fb:60:bb:aa:76:cc:13:51:be:c3:
8f:ce:5f:b7:18:62:a7:d2:f9:4c:3d:d0:76:dd:48:
7e:2f:61:3b:41:bc:ad:5f:bb:de:4b:ad:48:7f:c4:
4e:a3:46:8f:e0:aa:92:e1:92:c4:bc:0d:cb:3c:b7:
7a:18:f2:0f:67:5a:b8:7c:fb:d0:a5:73:ef:bf:d5:
2b:50:72:d1:91:70:20:18:d5:3f:52:7b:81:d3:ed:
44:32:ad:9e:52:16:5f:3d:18:32:fd:de:08:8e:45:
8e:c5:7c:c6:7c:0f:c5:71:bf:8c:7a:7f:4c:bd:a7:
a6:7a:16:24:6c:41:9a:a7:ed:af:4b:5d:d8:73:4c:
6c:6d:c0:bf:ca:9c:5f:8a:ee:66:eb:55:72:ca:1a:
b1:08:8c:0c:00:90:9c:d8:a0:6d:3b:0c:b5:0d:0a:
40:25:aa:14:98:e2:d8:f5:10:d2:93:ad:c6:e1:3b:
ec:5b:c5:80:60:11:1e:0a:56:8c:74:2b:a5:13:ea:
c9:b9:50:1a:77:0e:1e:91:44:22:62:9d:ea:fe:a6:
c2:a9:6b:55:e4:a3:49:14:a6:33:cc:fd:ef:eb:27:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.140.0/22
IPv6:
2a04:fa80::/29
Signature Algorithm: sha256WithRSAEncryption
30:9d:51:8a:ab:ae:6a:51:e9:a8:db:50:1b:4f:ed:13:af:ea:
ee:7f:e9:9f:04:06:74:37:9d:6e:e9:d2:cc:1e:4a:73:c6:11:
eb:6c:de:77:35:8c:c0:7c:33:2d:73:5d:22:f9:f6:25:5f:a1:
e2:60:c9:a8:c2:4a:49:e0:af:c2:f5:08:26:b6:99:1b:e0:a6:
24:27:79:b4:93:b3:6c:34:bd:2d:c8:d7:e6:17:ce:07:bb:3a:
39:b5:97:1f:80:0e:ed:4b:0f:1c:cb:59:fa:79:63:c3:f2:72:
37:d4:8b:87:41:88:79:ec:2e:5e:9e:2f:88:a9:11:15:61:12:
f4:95:6e:b8:6e:fb:4c:a1:b9:4b:58:8a:81:77:92:64:c4:3e:
36:8b:9e:e7:cd:82:47:7f:91:04:de:30:21:e4:be:e9:ea:f2:
ad:79:4d:06:99:d0:d4:47:ed:56:8e:c2:20:0a:69:a6:7b:0c:
e0:25:fc:c3:75:4b:c7:49:9a:34:38:f0:53:e5:96:0b:a6:3d:
29:3d:c1:8d:39:64:22:1f:b1:0a:15:c0:70:2a:5a:4e:78:6b:
52:a8:fa:a2:dd:68:b1:5d:e2:a6:ae:58:d9:c9:56:69:ee:55:
a5:34:79:4e:0e:a7:8d:2a:b5:69:3b:46:41:02:92:a4:79:ce:
4d:0f:9e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 18:56:08 2026 by rpki-client