Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.cer (raw, json)
Hash identifier: /uY5+N/e+r4NGMbpCwEC2/M/x2+G7nM9nx0XVgYB9pQ=
Subject key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EEFB758C096D06CF68F0E1BA9FDE8CCD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Jun 2026 14:23:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 78.40.111.0/24
IP: 171.22.18.0/24
IP: 212.47.59.0/24
IP: 2a14:8880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:b7:58:c0:96:d0:6c:f6:8f:0e:1b:a9:fd:e8:cc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 22 14:23:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:c7:4c:76:b3:e1:94:83:ca:f0:fb:1b:ce:
8b:d8:87:02:d5:e9:63:4f:cf:72:11:14:f4:48:19:
ff:c5:de:82:24:66:71:84:06:02:b7:18:bd:9e:61:
e2:1c:68:48:dd:f2:be:a8:41:38:9d:59:36:c2:3b:
12:98:41:8c:32:81:6b:28:9f:57:d4:91:c1:06:f4:
4e:e2:63:ac:92:74:d9:1c:6e:ad:b8:47:e3:a8:f8:
43:44:34:72:bc:af:57:b5:6e:d0:e6:60:18:74:94:
8b:c7:96:09:8d:01:39:63:63:74:f9:b1:08:fc:3e:
7a:26:72:eb:bf:9b:ec:73:c0:51:e8:ec:06:a3:0f:
03:3c:49:b9:aa:da:c6:d2:d8:34:42:09:a4:1a:64:
5e:89:04:c2:fa:93:72:1b:32:16:1c:33:79:c0:6c:
a3:40:6d:06:34:60:f2:f9:2d:5f:ef:8a:5c:0e:ff:
01:8e:f4:02:15:e3:a9:f0:ba:78:02:ae:61:db:2a:
f6:9b:6d:54:72:b5:7b:b5:66:97:f4:1b:69:e7:f2:
67:91:2b:e5:21:22:23:ae:89:f8:96:12:d9:9c:7a:
80:d1:e9:03:6c:65:a2:5f:e8:39:a8:dc:30:d5:e5:
8d:b3:ff:28:48:e1:15:53:36:62:7f:77:c7:ad:08:
43:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.111.0/24
171.22.18.0/24
212.47.59.0/24
IPv6:
2a14:8880::/29
Signature Algorithm: sha256WithRSAEncryption
2a:69:04:43:25:4a:86:0c:f3:ae:22:28:b0:89:69:6f:0e:af:
e0:72:b6:8e:d7:dc:da:b1:52:29:77:5f:6b:cf:b9:41:14:84:
b8:75:9e:e6:46:6e:1f:c6:41:ef:7a:b1:7a:a7:b2:1b:4a:70:
ce:c4:1d:26:60:35:b3:1b:95:87:8d:4a:8a:b7:ee:28:5e:28:
e6:bf:c7:78:ea:d2:41:29:c3:4c:89:29:84:97:fd:1a:6c:ce:
77:d7:5d:d0:4d:67:41:de:0d:0c:7a:46:ae:48:43:4e:3c:62:
a3:3a:85:85:1b:07:5e:69:5f:16:b9:36:24:f4:6a:33:87:dc:
34:e5:5d:60:78:a0:25:67:ef:8e:6d:ea:f8:09:1b:ac:48:b0:
9b:fc:06:04:d4:fd:20:e6:f0:14:3f:19:8b:e5:dd:9a:6c:20:
09:9a:1f:b4:2d:63:28:d4:dd:e8:cd:dd:72:70:e9:0e:f7:ae:
37:b8:a3:af:45:44:82:7c:ed:a5:d5:bb:78:3a:92:8e:7d:fe:
99:f8:7e:13:f5:87:f6:a3:54:0b:3b:79:fe:d9:5d:3b:d5:a4:
66:b6:ec:17:1a:85:5a:cc:f6:49:8f:9f:39:89:d7:2c:ba:e9:
03:6f:00:c1:11:0a:db:c6:01:2d:45:2e:82:5c:82:65:86:f2:
70:b2:1f:0f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZ7vt1jAltBs9o8OG6n96MzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjIyMTQyMzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTgxNDQwYTM2N2EzNGQzMDZiYzBmNjg1YWU5Y2Q4Njk1MmY3Zjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys3HTHaz4ZSDyvD7G86L2IcC1elj
T89yERT0SBn/xd6CJGZxhAYCtxi9nmHiHGhI3fK+qEE4nVk2wjsSmEGMMoFrKJ9X
1JHBBvRO4mOsknTZHG6tuEfjqPhDRDRyvK9XtW7Q5mAYdJSLx5YJjQE5Y2N0+bEI
/D56JnLrv5vsc8BR6OwGow8DPEm5qtrG0tg0QgmkGmReiQTC+pNyGzIWHDN5wGyj
QG0GNGDy+S1f74pcDv8BjvQCFeOp8Lp4Aq5h2yr2m21UcrV7tWaX9Btp5/JnkSvl
ISIjron4lhLZnHqA0ekDbGWiX+g5qNww1eWNs/8oSOEVUzZif3fHrQhD/QIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFIGBRAo2ejTTBrwPaFrpzYaVL3+VMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzE2MmY4
Zi02ODdmLTQ2NzEtYTUyNC01NTY5MWE1Njk3MjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvMTYyZjhm
LTY4N2YtNDY3MS1hNTI0LTU1NjkxYTU2OTcyMC8xL2dZRkVDalo2Tk5NR3ZBOW9X
dW5OaHBVdmY1VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQATihvAwQAqxYSAwQA1C87MA0EAgACMAcDBQMq
FIiAMA0GCSqGSIb3DQEBCwUAA4IBAQAqaQRDJUqGDPOuIiiwiWlvDq/gcraO19za
sVIpd19rz7lBFIS4dZ7mRm4fxkHverF6p7IbSnDOxB0mYDWzG5WHjUqKt+4oXijm
v8d46tJBKcNMiSmEl/0abM53113QTWdB3g0MekauSENOPGKjOoWFGwdeaV8WuTYk
9Gozh9w05V1geKAlZ++Ober4CRusSLCb/AYE1P0g5vAUPxmL5d2abCAJmh+0LWMo
1N3ozd1ycOkO9643uKOvRUSCfO2l1bt4OpKOff6Z+H4T9Yf2o1QLO3n+2V071aRm
tuwXGoVazPZJj585idcsuukDbwDBEQrbxgEtRS6CXIJlhvJwsh8P
-----END CERTIFICATE-----
Generated at Fri Jul 3 17:36:58 2026 by rpki-client