Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
File: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer (raw, json)
Hash identifier: Js5TtEz4Hvwyd8iS/lgiD8oV+KH3QX98JEPKp8ZiPes=
Subject key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FD0D0A89AFB5DCB0EF1BF3E990385548F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 05 Aug 2026 07:26:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.193.252.0/22
IP: 93.89.208.0/20
IP: 132.243.64.0/20
IP: 141.105.128.0/20
IP: 152.55.216.0/21
IP: 212.87.160.0/19
IP: 2a0c:e240::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:d0:a8:9a:fb:5d:cb:0e:f1:bf:3e:99:03:85:54:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 5 07:26:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:09:56:36:d0:47:5b:ab:79:c1:68:56:39:
c0:fe:97:9d:82:4f:21:16:dc:7b:78:14:46:00:fe:
49:5f:57:98:8e:fa:53:34:27:47:6d:31:07:99:c3:
59:4f:79:01:63:7d:19:2a:77:6c:d6:a8:a4:6d:9c:
4a:bc:29:83:11:1d:1b:27:2f:4d:ea:f7:0a:f1:b7:
d0:c4:c8:a4:d9:33:b4:92:67:36:9e:71:fd:a8:21:
f6:e8:fa:10:41:83:9c:7b:21:9d:4c:d4:c8:81:54:
60:1b:0c:73:e4:24:90:ec:d9:a4:46:ff:37:0b:1a:
c5:b8:ba:9a:b0:55:2c:e6:8c:3d:6c:79:e4:8b:9b:
00:35:8d:14:f0:ae:31:54:07:a3:94:25:d9:a6:74:
19:c7:98:c6:9e:f8:3c:ad:7b:54:74:c5:e6:4e:5f:
16:a2:17:3e:76:ba:4a:9f:96:a2:8a:c1:74:97:06:
f9:68:e3:86:66:b3:97:47:77:53:18:01:dd:10:12:
39:92:1b:a2:2d:db:ff:bb:2a:41:43:98:6c:2b:47:
ce:60:84:eb:fe:05:93:dc:74:5e:78:4a:21:29:4a:
f4:c9:7b:ae:69:7f:42:0e:34:67:27:a2:d8:7a:50:
86:47:9e:ef:32:46:16:cb:32:b2:d4:ed:5b:e8:23:
1e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.252.0/22
93.89.208.0/20
132.243.64.0/20
141.105.128.0/20
152.55.216.0/21
212.87.160.0/19
IPv6:
2a0c:e240::/32
Signature Algorithm: sha256WithRSAEncryption
0b:54:ab:88:00:41:19:62:e3:91:8f:87:f3:35:e9:ad:81:6b:
ab:9a:47:85:47:cc:81:8c:08:a6:e9:bb:c4:d3:14:3d:d2:45:
b6:06:c5:f9:6c:2c:55:7d:08:82:67:6f:81:fd:e9:d7:b7:99:
c8:0b:9a:30:93:67:6f:d5:75:ee:44:d6:13:41:59:4f:87:8c:
1b:cb:c3:29:52:7d:a2:d8:7c:6f:51:6b:ef:95:dc:1e:02:12:
8c:07:2f:94:93:f5:8a:da:22:f3:c8:31:c5:ab:76:25:a5:2a:
89:21:ae:b5:39:fa:9d:8c:a5:fa:90:9a:fe:41:4f:eb:2a:c8:
c2:91:c8:0b:3f:e9:79:b2:e9:53:8f:fb:82:4d:0f:5f:e2:11:
e7:65:6a:75:db:96:5e:76:49:84:93:04:9b:b2:d7:2f:09:ab:
70:8d:5d:83:f7:30:87:f8:2d:90:8c:e5:02:02:39:e5:28:38:
e4:7a:85:9a:d0:02:80:6f:26:3a:5e:ef:6b:fd:6a:49:e4:25:
6d:80:22:db:b0:ea:4d:d9:94:2a:9f:6c:da:5d:30:5c:52:c0:
7a:f7:ba:a5:7d:97:d9:c3:c3:94:c2:f1:aa:7a:78:c7:9c:4a:
c9:75:a2:b7:e5:f3:46:3d:7a:6a:e1:87:e3:c6:71:97:5e:b7:
12:cb:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:03:57 2026 by rpki-client