Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ycxfyOcBVDdjrPLMO8CPMkY_oow.cer
File: ycxfyOcBVDdjrPLMO8CPMkY_oow.cer (raw, json)
Hash identifier: JUbUa3OXqwK90Puep2kMAna+ZlETGpD4zL+CG/o4F2M=
Subject key identifier: C9:CC:5F:C8:E7:01:54:37:63:AC:F2:CC:3B:C0:8F:32:46:3F:A2:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A10C3D9ED8C9742BD18376F5B100246E00
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/ycxfyOcBVDdjrPLMO8CPMkY_oow.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 05 Oct 2026 13:25:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.155.28.0/22
IP: 185.237.52.0/22
IP: 193.202.90.0/24
IP: 193.202.112.0/24
IP: 193.202.114.0/24
IP: 193.203.4.0/24
IP: 194.213.29.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:3d:9e:d8:c9:74:2b:d1:83:76:f5:b1:00:24:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 5 13:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9cc5fc8e701543763acf2cc3bc08f32463fa28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:01:58:bd:ff:1e:42:9e:1f:07:12:ff:ac:
cb:c7:d4:01:e6:b7:a5:ce:dd:5a:a9:68:3a:32:f2:
38:cf:4a:01:fe:c2:69:28:3b:ec:9e:c9:b4:94:39:
cf:73:a7:9e:2e:35:d7:2b:4d:5d:91:7d:26:85:55:
f7:3d:18:16:6b:d5:6f:4e:a3:a8:32:78:13:03:fe:
e8:1d:bb:3d:a6:c3:a1:74:c2:58:ab:20:4f:bf:14:
16:c5:50:3f:d7:14:95:90:84:07:43:af:58:de:50:
1d:94:74:ee:22:03:79:e8:f8:b9:a0:3d:46:65:08:
af:55:55:46:19:01:3c:e4:00:56:43:fa:7e:92:a7:
f8:af:f4:12:70:8a:2e:08:66:10:40:7f:e6:93:a3:
ed:46:e3:51:92:d7:c9:67:15:a8:42:3f:1f:00:39:
d0:c3:96:26:f0:dc:b9:fd:e1:37:2b:a9:24:bf:d6:
39:b5:41:41:94:eb:ad:20:57:02:6e:b7:4f:6f:b1:
83:82:6a:26:9d:a5:81:ff:c9:d9:40:47:5b:72:60:
79:48:32:1b:d9:88:f1:fb:45:03:38:a9:81:58:c6:
04:1d:40:94:b1:2e:f9:2e:5e:23:05:93:85:70:06:
c5:0d:c3:e7:70:d7:b5:03:9a:23:36:c3:70:c1:ef:
ff:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CC:5F:C8:E7:01:54:37:63:AC:F2:CC:3B:C0:8F:32:46:3F:A2:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a4b6b2-8edc-4e97-8337-86e076280f7b/1/ycxfyOcBVDdjrPLMO8CPMkY_oow.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.28.0/22
185.237.52.0/22
193.202.90.0/24
193.202.112.0/24
193.202.114.0/24
193.203.4.0/24
194.213.29.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7e:14:ab:26:b3:19:07:d3:4f:b5:9b:b3:db:bf:4f:06:26:
4c:c7:12:21:d4:32:b4:c0:4a:b2:3b:11:c0:e5:41:0d:98:c9:
da:3c:51:ce:79:fc:b8:29:ca:ed:61:09:23:66:69:db:60:24:
34:7b:6e:92:4d:e0:96:40:a8:08:b9:a5:db:23:81:3d:36:9f:
ce:ee:2e:0d:69:69:25:37:90:99:f7:5a:08:33:f1:be:1b:58:
d0:00:f9:32:74:1e:d2:d1:63:aa:bf:d9:e1:ff:fa:12:11:9c:
36:5c:44:a5:8b:a5:53:fe:ee:f3:a6:e7:98:85:5c:09:91:20:
e0:7a:34:27:dc:83:1f:13:09:80:05:9d:2a:9e:db:68:58:c1:
53:b7:a4:51:26:3e:83:7b:f2:48:88:75:05:48:90:cf:40:dd:
19:7d:34:3c:e0:f1:46:a0:e3:68:a6:1c:dc:4e:95:0a:16:2a:
ed:5a:38:cd:90:62:a7:82:ae:08:38:ce:c8:86:9f:54:22:bb:
6c:7b:85:10:6a:8f:39:ae:f4:1d:75:d1:8c:df:e7:59:10:35:
cb:c8:d9:5f:ff:a5:8e:01:bf:7a:d3:4f:03:ce:6e:3e:01:f7:
6c:0d:1b:62:14:1e:92:fc:8a:39:e4:e0:3b:31:a9:9a:1f:1a:
3e:97:5b:5c
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISAaEMPZ7YyXQr0YN29bEAJG4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDA1MTMyNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWNjNWZjOGU3MDE1NDM3NjNhY2YyY2MzYmMwOGYzMjQ2M2ZhMjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3cBWL3/HkKeHwcS/6zLx9QB5rel
zt1aqWg6MvI4z0oB/sJpKDvsnsm0lDnPc6eeLjXXK01dkX0mhVX3PRgWa9VvTqOo
MngTA/7oHbs9psOhdMJYqyBPvxQWxVA/1xSVkIQHQ69Y3lAdlHTuIgN56Pi5oD1G
ZQivVVVGGQE85ABWQ/p+kqf4r/QScIouCGYQQH/mk6PtRuNRktfJZxWoQj8fADnQ
w5Ym8Ny5/eE3K6kkv9Y5tUFBlOutIFcCbrdPb7GDgmomnaWB/8nZQEdbcmB5SDIb
2Yjx+0UDOKmBWMYEHUCUsS75Ll4jBZOFcAbFDcPncNe1A5ojNsNwwe//3QIDAQAB
o4ICqDCCAqQwHQYDVR0OBBYEFMnMX8jnAVQ3Y6zyzDvAjzJGP6KMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2E0YjZi
Mi04ZWRjLTRlOTctODMzNy04NmUwNzYyODBmN2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvYTRiNmIy
LThlZGMtNGU5Ny04MzM3LTg2ZTA3NjI4MGY3Yi8xL3ljeGZ5T2NCVkRkanJQTE1P
OENQTWtZX29vdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF
BwEHAQH/BDQwMjAwBAIAATAqAwQCLZscAwQCue00AwQAwcpaAwQAwcpwAwQAwcpy
AwQAwcsEAwQAwtUdMA0GCSqGSIb3DQEBCwUAA4IBAQBHfhSrJrMZB9NPtZuz279P
BiZMxxIh1DK0wEqyOxHA5UENmMnaPFHOefy4KcrtYQkjZmnbYCQ0e26STeCWQKgI
uaXbI4E9Np/O7i4NaWklN5CZ91oIM/G+G1jQAPkydB7S0WOqv9nh//oSEZw2XESl
i6VT/u7zpueYhVwJkSDgejQn3IMfEwmABZ0qnttoWMFTt6RRJj6De/JIiHUFSJDP
QN0ZfTQ84PFGoONophzcTpUKFirtWjjNkGKngq4IOM7Ihp9UIrtse4UQao85rvQd
ddGM3+dZEDXLyNlf/6WOAb96008Dzm4+AfdsDRtiFB6S/Io55OA7MamaHxo+l1tc
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:03 2026 by rpki-client