Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iYPT4V9uNmHXHPVPYvcvoUonX08.cer
File: iYPT4V9uNmHXHPVPYvcvoUonX08.cer (raw, json)
Hash identifier: LLfU8FwpucQSNyEimYzvw7DwlTkTtTKeq1y5DIoR58o=
Subject key identifier: 89:83:D3:E1:5F:6E:36:61:D7:1C:F5:4F:62:F7:2F:A1:4A:27:5F:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019ED46681368C46C1C49678CC2768C874AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/iYPT4V9uNmHXHPVPYvcvoUonX08.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 17 Jun 2026 07:05:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199999
IP: 185.38.68.0/22
IP: 185.101.0.0/22
IP: 2a00:73e0::/32
IP: 2a04:7600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:66:81:36:8c:46:c1:c4:96:78:cc:27:68:c8:74:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 17 07:05:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8983d3e15f6e3661d71cf54f62f72fa14a275f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:57:6d:89:3f:85:3a:2c:f6:bd:2d:6e:1d:
ec:12:1b:8b:dd:62:3d:2e:aa:36:b6:33:d3:83:80:
53:cc:ab:b7:84:80:04:cc:66:e5:fe:0e:22:eb:2e:
be:8d:c3:28:f1:83:83:a3:a2:7e:63:64:e8:52:00:
03:ed:5e:23:d0:0c:70:02:39:e0:a9:4a:f6:67:31:
07:24:04:15:31:0e:fb:d6:89:eb:bf:c8:b1:aa:bb:
1b:15:c9:7b:6a:51:af:9a:4c:77:2f:54:74:7c:ff:
9f:b9:c8:98:54:93:bb:78:a9:54:fb:4a:e1:d0:40:
b7:9e:1d:0f:a6:66:24:dd:11:0a:02:bf:78:44:d9:
8e:b7:a6:18:8b:00:12:a5:3e:69:46:80:d7:da:97:
01:30:eb:f9:a4:31:e7:f6:91:f7:f6:f5:16:fb:75:
ce:61:6d:43:cc:1d:ff:2b:d1:4a:90:bb:39:a6:62:
65:50:97:89:e6:6e:03:ed:a1:24:68:42:17:e4:9d:
34:8c:2d:51:e2:1a:bd:3e:2e:3b:33:27:3d:fc:90:
55:ff:7b:8b:63:77:56:cd:85:ee:f5:da:29:cd:0c:
53:fc:78:f3:e3:aa:09:d4:b3:ae:ac:e1:95:25:4f:
e4:22:ff:fb:6c:12:1d:90:b9:4a:43:bf:3c:0a:bd:
06:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:83:D3:E1:5F:6E:36:61:D7:1C:F5:4F:62:F7:2F:A1:4A:27:5F:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/iYPT4V9uNmHXHPVPYvcvoUonX08.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.68.0/22
185.101.0.0/22
IPv6:
2a00:73e0::/32
2a04:7600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199999
Signature Algorithm: sha256WithRSAEncryption
3d:86:9b:1b:a0:04:b8:26:5b:01:54:aa:ef:4e:91:a2:e6:21:
b5:c1:c6:a7:37:84:92:3b:62:79:85:f9:cf:5e:f7:de:c7:db:
60:33:23:ef:fe:81:37:6a:0b:37:80:6e:67:ec:4f:09:91:e8:
16:1f:84:f1:39:e8:bb:3f:97:f2:70:38:79:d7:72:1e:2b:d2:
38:fc:bb:8f:b9:13:0a:82:79:06:be:da:aa:30:14:df:2f:c7:
e6:98:7e:f9:fd:ca:a7:be:07:21:0a:1d:e9:c0:1a:1d:a4:5e:
46:e6:fc:26:cc:19:5c:4f:d4:54:38:ea:ea:bc:5a:22:cc:6e:
d2:c9:f2:27:15:62:ae:f0:3d:a2:09:e8:20:40:64:f3:60:ea:
ca:28:f7:d6:76:41:ea:7e:e3:fe:da:66:aa:d5:7a:63:11:b7:
2b:3d:42:19:eb:a3:b5:0f:cb:ef:61:9d:37:3c:a9:6c:75:6f:
55:2d:6e:a9:c7:64:2d:61:75:5b:c3:03:00:83:c2:ac:86:06:
fa:8a:77:a5:c9:e8:60:96:db:2b:66:d9:8a:09:d3:91:04:66:
d0:28:2b:58:c8:98:4c:5b:f6:90:f6:46:51:79:7f:f4:a1:72:
fa:7b:ec:c5:c6:30:b2:c8:e2:9b:d2:6d:5f:e6:76:91:b0:a5:
c9:6e:34:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:44:00 2026 by rpki-client