Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
File: yE1hzRftkuVLszl_HlprOQSsbwU.cer (raw, json)
Hash identifier: WDFouTVaZF5U0/nnhI8VQoHm2WvBWM1P3cKsfR4ARWA=
Subject key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FAC966A977572C543EDB56DF4BEAF7664
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 29 Jul 2026 06:36:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 16376
AS: 39537
AS: 51491
IP: 31.210.128.0/21
IP: 37.35.88.0/21
IP: 45.145.180.0/22
IP: 87.237.64.0/21
IP: 93.95.8.0/21
IP: 94.190.240.0/21
IP: 94.199.184.0/21
IP: 109.69.80.0/21
IP: 151.236.208.0/21
IP: 185.11.240.0/22
IP: 185.31.252.0/22
IP: 185.33.184.0/22
IP: 185.49.236.0/22
IP: 185.68.0.0/22
IP: 185.71.24.0/22
IP: 185.122.216.0/22
IP: 195.94.112.0/20
IP: 195.189.124.0/22
IP: 2a00:e620::/32
IP: 2a01:500::/29
IP: 2a01:b280::/29
IP: 2a03:25e0::/32
IP: 2a04:5ac0::/29
IP: 2a0a:fd80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 06:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:96:6a:97:75:72:c5:43:ed:b5:6d:f4:be:af:76:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 29 06:36:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:48:36:04:69:f8:5e:81:4d:94:c1:f4:ff:
9e:f3:a7:81:66:c1:ea:03:4a:f1:a8:a3:48:7a:c7:
25:b9:0f:61:d0:81:0f:40:0d:00:54:dc:4a:fa:62:
f3:7e:28:d9:de:36:7d:3a:53:e4:06:9d:b5:0c:c6:
91:c6:fe:dc:df:2f:d9:03:52:d3:7e:07:9b:ac:6e:
5c:34:b0:df:07:d6:b7:0b:39:8c:e2:38:49:fa:0c:
d4:de:6f:eb:81:14:e8:0c:42:b4:e9:77:ad:30:0e:
06:9b:41:e2:8a:51:5c:27:d2:f5:98:0f:f1:de:85:
db:92:2f:00:b0:5b:96:b5:51:d5:d9:73:f0:03:e8:
5e:ad:e8:3e:1e:b8:76:61:e0:3a:36:7a:dd:cd:61:
3f:26:ef:94:0a:2c:02:88:b0:9a:57:03:f1:7a:b6:
c6:28:ef:e9:f9:0c:7a:e4:94:05:ac:aa:ba:25:65:
f6:2c:fa:8c:3f:f4:4a:bb:c7:ad:02:e8:44:a3:a2:
d5:f3:11:fa:2a:57:b1:b6:94:08:f0:c6:c5:be:c9:
d7:d9:22:6a:6d:8a:bc:34:d2:91:ba:34:a3:44:f7:
6b:e5:47:7a:3b:b8:90:e3:14:29:68:d3:7b:9b:4a:
7b:6d:64:0d:88:6f:a3:7d:64:bc:8d:e5:67:be:f8:
ad:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.128.0/21
37.35.88.0/21
45.145.180.0/22
87.237.64.0/21
93.95.8.0/21
94.190.240.0/21
94.199.184.0/21
109.69.80.0/21
151.236.208.0/21
185.11.240.0/22
185.31.252.0/22
185.33.184.0/22
185.49.236.0/22
185.68.0.0/22
185.71.24.0/22
185.122.216.0/22
195.94.112.0/20
195.189.124.0/22
IPv6:
2a00:e620::/32
2a01:500::/29
2a01:b280::/29
2a03:25e0::/32
2a04:5ac0::/29
2a0a:fd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16376
39537
51491
Signature Algorithm: sha256WithRSAEncryption
53:eb:f6:d4:57:d2:51:e7:c5:8e:2f:d6:cc:68:9b:c5:25:09:
46:29:85:40:e3:9d:bf:6b:63:a4:c1:8c:8e:b8:4d:7f:52:56:
3b:e5:d3:a7:43:fc:24:6d:b3:61:18:47:82:4a:14:1d:8f:38:
5b:1a:ee:92:e4:65:27:72:c2:8f:51:3a:6f:ea:4e:99:4a:c9:
3d:00:ee:5a:94:d5:1a:a9:51:11:fb:c0:5c:4f:c7:e3:25:d5:
3c:f8:47:95:a9:e1:93:35:92:16:58:0d:60:18:67:53:dc:89:
8b:b1:5d:8d:46:c3:45:4f:00:fd:d9:13:11:2c:7d:26:83:d8:
fc:2f:72:0d:c8:57:6d:28:4a:6b:03:47:6d:d1:1e:eb:43:89:
e8:46:d1:e4:33:94:82:3f:49:71:18:aa:9c:d1:4f:49:6c:1f:
ce:b6:4f:22:ba:fa:f1:94:36:eb:c2:8e:4d:f4:32:ca:a5:90:
f5:4e:81:5e:ba:98:9e:63:fa:a5:19:1a:f1:0a:7a:3a:19:f5:
b4:9b:aa:8d:bb:e9:de:51:33:14:f0:17:ef:07:8d:e8:c3:f4:
ef:0c:e6:02:5f:66:0c:f9:28:4c:52:58:5e:71:41:d7:7c:ee:
33:c5:2d:fc:ac:c2:ac:31:8f:7e:2c:42:29:ea:f8:3b:d0:bd:
e6:90:46:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 10:30:25 2026 by rpki-client