Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
File: y0QccfqMdkotwsDswYPlLSOnrh8.cer (raw, json)
Hash identifier: cjht+Z3Ki6LVv9efls/Dg+MsA+rsM+60M2MKTQUgkVQ=
Subject key identifier: CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E43AF121E2A18EA31D7BC1EBC3DC1BB81
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 May 2026 04:40:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200772
IP: 2a12:1340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 13:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:43:af:12:1e:2a:18:ea:31:d7:bc:1e:bc:3d:c1:bb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 04:40:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:f5:3b:6b:8b:c4:52:4b:15:e4:29:95:17:
bb:47:0f:4d:16:cb:1f:12:2e:b8:09:be:9e:d0:9c:
9e:60:99:e3:08:b9:ad:af:f8:e7:be:04:41:7d:5a:
9c:2f:ee:3f:02:c5:c3:04:39:22:d4:c1:5a:0f:4e:
7f:fd:40:23:4a:6e:2b:82:d3:8f:df:36:bf:9c:d4:
c9:26:e4:bf:bd:30:69:22:f6:29:c1:6d:b4:7d:4d:
6f:a9:01:31:30:ef:4b:8b:91:d5:4d:c1:1b:72:87:
01:ab:a6:5c:22:96:16:58:e0:2d:a8:3e:66:2a:01:
80:e0:04:a0:06:c8:3a:44:02:7c:55:ab:49:36:d2:
de:ae:79:c2:9b:77:5a:cd:36:9f:ae:39:52:33:e2:
7f:1f:c6:5f:b5:88:e7:9c:eb:71:77:c9:4e:18:cc:
f6:08:48:7f:38:55:99:90:dc:4b:28:3c:18:61:c0:
16:65:45:b2:bb:fd:f0:3d:64:1f:5b:4d:cc:0d:aa:
9a:8b:7a:95:03:c8:8b:3f:0c:a5:ff:bf:d9:3b:2b:
7a:66:c6:38:ae:63:a8:60:72:3d:59:17:ac:5e:a2:
00:24:0b:00:d4:9b:98:69:21:4b:06:8f:f3:71:7f:
4e:f3:39:79:37:0a:7e:64:5e:4a:79:93:7e:4b:01:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200772
Signature Algorithm: sha256WithRSAEncryption
00:81:c6:21:ef:d5:ea:74:c0:29:d8:4b:db:64:bd:07:24:60:
0a:e2:a2:50:72:85:41:d5:cc:99:08:a3:13:0a:a6:b7:f0:5d:
ef:3b:42:a9:0d:5b:92:57:d5:e0:ca:94:24:2f:79:4d:b8:0f:
1d:13:54:10:ce:70:d2:c0:17:bf:c0:bf:72:30:ef:59:2a:6a:
2f:88:4f:37:e0:44:47:37:85:8c:42:65:de:0b:ba:e7:86:70:
39:d6:20:4d:13:73:55:5e:7c:3b:c2:61:12:62:6e:51:fd:b4:
a7:d9:26:0c:1c:fe:be:c2:cf:de:eb:54:61:22:dd:62:37:7c:
50:ed:be:ca:11:4b:cf:62:1d:94:b2:43:7b:ae:5c:cc:8f:3d:
cf:30:b7:31:3b:3f:d5:cc:7f:03:9e:91:42:27:bc:03:78:1a:
87:47:5d:2f:cf:aa:c1:ac:35:cd:57:6c:87:29:d1:de:fb:7d:
df:38:4a:0b:23:7b:e1:ee:73:59:23:31:81:07:3e:ab:b0:8f:
ac:be:5f:4b:b7:49:68:a1:4a:0d:7d:55:01:d6:6e:9a:8b:b8:
01:b0:21:7e:f9:52:cc:a2:15:5e:39:27:bc:7c:51:97:3d:9c:
32:aa:2f:c7:d9:51:85:0f:2b:14:65:e4:a9:2f:ac:70:74:5d:
4d:af:24:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 15:57:47 2026 by rpki-client