Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
File: YYd-97uxsYmKrNV7io_8Kw5EKmU.cer (raw, json)
Hash identifier: hBBYdj1MsqYdfFU22HctW/GFef5HBbJo5qHJ9dOvPMQ=
Subject key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C5185AFAFA6D6B8C86D2D3F521512A30E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Feb 2026 11:04:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 77.95.174.0/24
IP: 2a13:e8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:85:af:af:a6:d6:b8:c8:6d:2d:3f:52:15:12:a3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 12 11:04:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4c:38:7e:c1:b3:8e:f4:af:ea:30:91:af:54:
46:b3:44:86:4e:06:1c:7e:e8:17:1c:63:16:44:a2:
e2:23:96:8b:0f:04:4d:e7:f4:f7:5e:d5:ff:bd:0b:
0b:34:ae:46:c2:24:fc:3f:39:20:f2:ea:c9:8f:93:
ab:51:d9:bc:b6:24:25:f5:87:ce:b1:33:8f:1c:73:
fb:ab:3a:e7:47:7d:f9:ab:bc:f6:67:00:25:65:58:
ce:33:a0:17:f5:3e:36:fd:d9:64:64:ab:9b:bf:04:
29:31:a5:fa:6a:d8:c1:75:44:01:9a:75:b2:66:04:
7f:b1:01:69:b5:0a:4c:7d:f8:85:3f:23:51:61:e3:
24:14:49:77:f7:14:f0:b9:29:e7:84:ec:64:fd:89:
c1:89:1d:1a:3e:38:f6:6c:32:5e:8b:fc:d1:96:46:
cc:7d:ac:60:12:e8:34:bc:de:a2:a5:3e:86:66:5e:
9b:c7:9a:e4:f2:1d:9b:9a:3b:ff:44:58:4f:93:02:
6d:cb:69:d1:0f:90:b7:13:29:37:f1:e1:4a:27:fd:
89:6e:86:ef:81:1e:fb:1c:96:66:f7:22:46:1d:8b:
21:a0:55:56:af:73:ed:1c:c3:01:46:30:a5:9c:78:
c9:00:0a:ff:b5:ce:32:bf:7e:3b:51:a0:22:c2:07:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.174.0/24
IPv6:
2a13:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:56:77:26:83:bb:6f:fe:8a:3f:51:f9:99:91:f6:c2:a9:d0:
35:4f:be:82:c2:47:40:44:18:71:82:7b:7b:b5:3b:3e:6a:e8:
ca:95:79:93:d4:c9:b2:f1:e5:e8:73:20:4f:94:84:ff:77:c9:
f6:61:6a:b7:dd:ea:83:ea:b3:76:f4:55:f7:5e:f4:6d:5d:c2:
3e:6c:b7:b4:5f:56:04:6e:3b:ab:2d:ed:7b:e2:7a:a4:54:2c:
88:01:0d:09:e0:28:58:27:1b:c5:09:8f:ee:c9:1e:76:fe:35:
fe:18:47:f0:6c:12:c3:05:64:13:f2:28:fb:58:b4:30:ca:1d:
eb:c8:45:43:aa:bc:09:69:fe:eb:da:d6:ac:cc:9f:01:37:e1:
f6:0b:65:77:f3:2a:1b:9b:ff:8c:1f:e9:05:17:95:b7:e0:b0:
69:09:5c:7a:51:9a:e4:2f:7a:73:84:66:07:e8:2d:f7:2a:78:
1c:13:98:26:3d:84:be:a4:10:10:3c:08:b2:29:a8:03:4b:8b:
bd:52:8c:77:18:79:c0:02:7d:fd:b5:83:7c:df:8b:67:c5:77:
84:29:55:e8:5f:fb:75:56:ab:9a:0e:d8:5d:a3:3e:57:d1:51:
87:46:48:76:9d:fb:4b:2d:f0:ed:71:f7:c9:a5:86:0b:da:56:
07:1b:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 17:11:03 2026 by rpki-client