Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Ycy1VcIA4ghi9v24MmE3zUxlGYs.cer
File: Ycy1VcIA4ghi9v24MmE3zUxlGYs.cer (raw, json)
Hash identifier: PwqsHaS6t5DXAxcch8yU/ipaNdpjQ21pZgCG44hIYYQ=
Subject key identifier: 61:CC:B5:55:C2:00:E2:08:62:F6:FD:B8:32:61:37:CD:4C:65:19:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0E6AF17567D46852FBACF24AAF8D2A2F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/Ycy1VcIA4ghi9v24MmE3zUxlGYs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Sep 2026 06:23:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.169.229.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:af:17:56:7d:46:85:2f:ba:cf:24:aa:f8:d2:a2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 28 06:23:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61ccb555c200e20862f6fdb8326137cd4c65198b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:f5:4e:51:97:57:6c:1e:9e:c8:72:ab:58:
34:f0:46:f0:af:b7:33:76:94:d4:cc:3c:68:31:ea:
52:cb:19:4d:69:40:bb:24:79:a0:89:5e:36:87:4c:
8f:40:d4:40:b4:83:ab:f8:a5:82:89:04:48:86:0a:
50:f9:8e:b1:94:92:5f:01:c5:ec:63:4f:e5:5d:93:
d2:88:ce:6e:e9:51:c4:10:49:8f:9e:7b:05:b9:21:
bb:a9:d0:b5:56:4b:da:52:55:00:4f:23:ef:2e:5a:
71:64:7a:f7:e0:89:e4:64:6d:36:3a:09:1d:4a:25:
8b:3e:e8:10:1d:bb:9b:3a:5c:04:d8:d2:4c:50:9e:
4a:ef:7e:83:b2:d6:09:03:bb:de:96:44:d4:50:61:
83:ad:66:90:dd:2a:83:78:dd:7b:c0:70:0e:41:8c:
73:89:d4:b4:c7:eb:49:49:d9:b8:ac:d1:4e:ee:d5:
25:7d:5b:72:e3:f4:82:a2:5b:b6:9e:a8:c0:b5:a7:
bb:98:bb:ad:4e:89:6c:19:e2:62:8d:17:7c:8b:5b:
11:f0:4e:bf:0e:13:cd:ab:e8:73:4e:37:7c:6f:10:
7f:5c:37:55:51:26:2f:19:04:8d:64:b1:73:36:26:
cc:1a:76:25:0b:81:01:a3:2f:21:b1:c5:df:32:c0:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:B5:55:C2:00:E2:08:62:F6:FD:B8:32:61:37:CD:4C:65:19:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/Ycy1VcIA4ghi9v24MmE3zUxlGYs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.229.0/24
Signature Algorithm: sha256WithRSAEncryption
08:33:9e:15:65:b7:09:04:c6:2b:80:37:88:f7:94:51:f0:12:
1c:59:9a:2a:2b:c7:d3:2a:a2:36:de:db:bf:32:8c:7e:1f:30:
66:2b:34:11:58:5a:ce:aa:f1:cc:0c:6e:33:e0:8f:8c:8b:65:
9b:75:58:65:d4:de:a6:91:2d:60:15:9e:75:0b:ee:77:5f:ea:
6f:4a:95:96:06:ac:8a:7d:d3:91:f4:fa:36:ba:a7:a6:ee:ff:
bb:cc:7f:3a:15:2a:81:9e:4b:b3:6c:82:2f:c2:bf:55:80:ec:
ed:e5:11:b9:df:88:f5:a5:4d:01:59:08:58:42:0f:d8:18:16:
b0:2a:bd:1b:04:cd:a0:5a:62:07:4f:9d:6a:17:91:3e:03:0f:
d2:54:65:90:04:a3:89:ad:54:61:31:1f:f9:23:75:b5:61:8e:
64:49:71:d1:ce:f2:93:3e:db:f7:12:0b:39:44:3d:e2:b8:86:
e8:cf:da:bc:c3:82:1f:51:fc:57:68:c3:22:50:2d:60:ae:d3:
57:a2:a0:aa:8d:ac:3d:50:a7:a7:dd:de:c9:17:8f:87:17:15:
c4:eb:82:4c:85:f0:d7:4c:53:a4:27:a3:bc:d8:10:3e:cc:de:
bd:64:6d:23:7e:f9:ca:5a:6f:17:ea:54:aa:c7:7c:2f:af:93:
48:13:03:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:40:56 2026 by rpki-client