Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/yYPuPVHGojyZCacJi4Z41cjf7O0.cer
File: yYPuPVHGojyZCacJi4Z41cjf7O0.cer (raw, json)
Hash identifier: 9Dgbva8jpUpTld17azFhGwfaAz5D8ZSulP0uzfAi5BY=
Subject key identifier: C9:83:EE:3D:51:C6:A2:3C:99:09:A7:09:8B:86:78:D5:C8:DF:EC:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A00FA9469779CDBD0EF16B65C46D6319E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Aug 2026 12:19:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218947
IP: 2a05:1f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:a9:46:97:79:cd:bd:0e:f1:6b:65:c4:6d:63:19:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 17 12:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c983ee3d51c6a23c9909a7098b8678d5c8dfeced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ae:5c:de:16:fc:09:7f:b6:f4:ec:93:0d:3b:
f8:fb:dc:74:b8:06:11:4e:fe:92:41:5a:ea:39:b3:
18:da:44:c0:d8:d1:83:dd:ff:59:ff:35:8a:22:5e:
8b:2a:79:ef:f8:92:25:8e:be:e6:ae:7c:03:94:f4:
5a:85:7a:10:67:9e:3a:22:76:f2:be:f7:bb:e1:ba:
ac:eb:ae:6c:b4:59:56:8c:86:83:f1:a7:16:42:db:
94:09:16:45:fe:b2:2a:2e:42:6b:66:f3:4b:a1:ec:
72:13:dd:7d:56:24:6c:20:21:45:66:fa:6d:f1:f5:
3d:7f:0f:7c:29:56:f9:78:6a:58:ea:c5:d7:55:af:
61:18:a8:d8:18:e9:0b:3a:06:ae:9e:29:a8:7f:af:
c3:b8:94:52:9d:de:74:c1:9d:8a:08:b3:a9:42:ae:
81:5b:90:bf:e0:ce:97:ff:9d:95:69:b4:33:04:7a:
9f:6f:4a:e3:5f:73:81:a1:6b:58:d7:1e:e9:c9:f0:
1c:c5:43:78:3e:01:98:9f:ec:ce:ae:fd:66:a2:a8:
5b:43:36:5e:62:88:af:fe:2e:11:68:7e:43:b3:19:
df:77:7d:bc:4c:05:78:e7:9f:1f:f0:a6:36:e6:6b:
97:f6:0f:26:b9:85:c8:90:32:1c:67:51:07:02:4f:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:83:EE:3D:51:C6:A2:3C:99:09:A7:09:8B:86:78:D5:C8:DF:EC:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a2d87-e53d-49bb-be01-60aad3db3e38/1/yYPuPVHGojyZCacJi4Z41cjf7O0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218947
Signature Algorithm: sha256WithRSAEncryption
63:a7:29:43:4e:95:52:6d:fb:06:6c:44:ff:a8:a8:80:9e:60:
b7:8f:14:a4:70:e2:32:06:a9:20:08:f1:a3:16:8d:69:02:36:
71:48:cb:08:e5:26:48:0e:8b:9a:0b:38:78:17:54:ef:9d:d6:
bc:5f:52:cd:85:fd:57:88:cb:42:6a:a2:d8:9b:c4:11:77:38:
31:51:ec:8f:1f:66:92:af:a5:a3:ee:4f:54:0c:0d:a2:56:4e:
99:f3:52:0c:07:89:34:6f:b8:7a:26:62:49:b6:9c:87:6d:05:
c3:76:7a:6c:b2:3e:6e:cb:ec:1b:91:f3:79:d5:7c:63:29:44:
ff:7e:de:e7:22:27:ab:f1:c0:a0:4a:f0:82:80:b3:63:e6:82:
1c:f9:ae:6f:58:d4:d0:47:08:7b:22:a9:17:25:35:0c:e0:45:
f0:6c:e7:7e:1b:ff:40:47:bd:39:bb:b9:4f:a5:65:dc:8e:d2:
c5:68:6f:ec:ec:bd:00:08:bb:36:ef:af:6f:53:9d:02:c2:76:
2c:ba:70:43:43:bf:67:4c:82:a1:44:b5:42:42:9e:67:f5:1e:
9e:d8:e1:8e:5b:20:55:87:82:ac:71:ce:c1:f9:1d:9a:d1:10:
e5:87:b9:f1:5f:02:58:12:0e:da:1f:56:44:81:cd:65:20:31:
ac:dd:99:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:32 2026 by rpki-client