Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/YSXbaI1AbMe9b7wdVJ1GOGg4PLQ.cer
File: YSXbaI1AbMe9b7wdVJ1GOGg4PLQ.cer (raw, json)
Hash identifier: zHDFfIYeCQtkxzYEQ3oAU+6YBjG2FQSQuChmO062xOY=
Subject key identifier: 61:25:DB:68:8D:40:6C:C7:BD:6F:BC:1D:54:9D:46:38:68:38:3C:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB04C823145AC07FDA415338E82B93
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/YSXbaI1AbMe9b7wdVJ1GOGg4PLQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39256
IP: 46.254.80.0/21
IP: 92.43.0.0/21
IP: 185.17.88.0/22
IP: 188.93.24.0/21
IP: 2a03:7dc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:04:c8:23:14:5a:c0:7f:da:41:53:38:e8:2b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6125db688d406cc7bd6fbc1d549d463868383cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:40:31:57:18:e0:d6:e6:b2:41:66:ec:8a:
6c:06:0c:d6:02:cf:80:14:f5:51:57:5a:19:a8:78:
31:82:0e:5d:3f:bf:8a:d6:b8:c0:14:52:9a:d8:28:
d0:42:1b:7c:70:e6:25:9c:b2:ee:9f:41:91:fe:09:
61:da:97:47:30:b9:65:4a:c2:55:97:5f:c3:c8:51:
c0:90:e4:ab:ba:e0:03:67:f1:b7:a4:14:a3:64:63:
4e:48:77:2a:30:29:ea:83:e5:14:d7:d7:f4:f1:f9:
23:05:43:38:d5:35:b7:10:94:3b:ad:3e:bc:50:6d:
d1:59:fa:7a:d1:35:69:7f:12:65:fe:d2:14:73:df:
fc:76:85:8f:b8:54:bb:3f:0e:e9:67:d9:fd:bc:d4:
be:70:be:f0:10:cc:8a:34:6d:9e:50:82:32:6f:7a:
d8:5b:31:1c:41:23:75:c2:78:25:60:fc:fa:71:da:
c8:b9:2c:82:08:0b:c0:29:e8:c3:be:41:41:2f:95:
94:1c:98:16:b6:81:0b:07:85:62:1d:aa:dd:5a:52:
f9:91:b1:72:df:cc:8c:71:07:fa:de:b5:7a:ff:f9:
db:bc:6e:3f:8d:ec:e6:2d:c4:e5:f7:26:45:f9:44:
8c:fa:fb:62:c5:38:47:4e:b8:9c:11:40:1a:c2:ac:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:25:DB:68:8D:40:6C:C7:BD:6F:BC:1D:54:9D:46:38:68:38:3C:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/YSXbaI1AbMe9b7wdVJ1GOGg4PLQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.80.0/21
92.43.0.0/21
185.17.88.0/22
188.93.24.0/21
IPv6:
2a03:7dc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39256
Signature Algorithm: sha256WithRSAEncryption
33:d0:cc:16:88:34:0c:c5:1e:fc:49:44:d7:fb:01:0d:c2:78:
76:9e:ba:38:e6:24:da:c8:07:b5:79:da:c1:45:e4:94:4e:d3:
2e:27:ab:46:da:c6:61:ad:e0:48:4d:1f:c3:0c:1e:e3:1e:b8:
ac:a7:df:84:0f:ed:c1:1c:0b:8f:7e:40:b4:fd:ef:d8:48:35:
b0:28:33:c7:ab:0f:aa:8a:80:95:69:61:0c:38:45:22:d8:77:
6e:c6:2f:f3:f8:80:90:59:24:30:86:15:e3:5e:96:90:13:76:
02:7b:e6:ea:7b:58:35:83:3d:5e:0f:02:c7:9d:b4:13:36:f2:
74:a2:43:1e:f8:8d:52:a5:03:64:32:7a:62:90:ad:b7:94:a8:
2d:34:22:a6:24:bc:6f:81:83:3b:15:99:21:43:11:c2:fb:c2:
e6:fb:c2:e2:0c:cf:f6:e9:97:4b:18:7d:32:1f:54:60:7d:72:
d7:7d:d7:03:d4:c5:b1:bf:e5:da:51:e8:15:74:1b:ab:5e:8a:
df:07:4b:8c:d8:d4:e0:d8:85:41:91:02:eb:19:fb:64:86:d0:
60:d3:06:ac:3f:c3:e8:79:11:45:3b:fd:a1:1c:a5:62:d5:f5:
53:7b:98:b5:71:3d:6c:82:88:a9:7b:59:0f:3a:9d:d4:64:e7:
07:71:31:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:47 2026 by rpki-client