Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.cer (raw, json)
Hash identifier: 1FP9whdq36hXw1v/itq+1/ZqDcFUXgLPqd0oejdNJ08=
Subject key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FAD98C7C5EE02AC17F48769F0BD6E5D5A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 29 Jul 2026 11:18:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.171.248.0/22
IP: 193.23.226.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:98:c7:c5:ee:02:ac:17:f4:87:69:f0:bd:6e:5d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 29 11:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:3a:48:c0:d9:a1:ff:89:09:55:62:08:ca:
aa:17:cc:62:57:26:c4:41:7a:49:5e:ff:05:51:69:
74:f8:f6:97:ce:00:0a:4c:de:72:d3:e6:3a:62:47:
45:d3:a5:4c:de:4f:11:62:a4:d8:b8:2a:39:d8:6d:
df:bf:bf:d7:65:4e:99:a8:7c:c9:8f:10:f4:4e:21:
9b:f8:f2:8a:6d:8b:c9:2f:ff:37:cb:0b:36:4b:e3:
db:b2:69:58:30:27:ed:4a:aa:a8:28:3a:7e:e6:11:
2a:5c:5d:18:2e:ca:f8:4e:3b:2a:ec:cf:a8:33:85:
3d:d1:8e:48:47:f7:d8:fe:21:ca:7f:a0:a6:a8:e1:
49:b7:c9:7a:8c:58:17:e4:77:88:2e:f3:8a:1c:a5:
35:e5:cc:de:e5:51:eb:84:03:5f:7d:5c:98:74:38:
f1:ce:57:3f:66:1d:a6:d3:bf:eb:b2:e6:4c:f5:e9:
4c:d1:a1:41:71:fd:a5:e0:80:66:1a:8d:59:03:66:
18:6a:30:c8:35:af:de:ef:84:9f:59:23:83:55:35:
65:13:e8:48:7a:13:de:b0:2c:10:ae:fc:df:fe:84:
e8:a5:b1:de:3d:58:ed:96:cf:36:28:e9:23:48:f1:
2e:b7:9d:a2:5b:89:bb:fd:c9:f1:2e:f9:6e:2b:17:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.248.0/22
193.23.226.0/24
Signature Algorithm: sha256WithRSAEncryption
24:8d:33:7a:73:bf:b5:0a:6f:54:7b:5c:ef:9d:e1:a7:cd:45:
23:69:23:9c:a6:cd:8a:9c:77:52:69:d7:71:b6:b0:95:46:61:
f3:31:67:3f:0d:e7:75:fe:e8:62:41:18:74:9d:7a:9c:70:27:
b3:dc:ad:a6:bb:ac:70:5e:d8:11:c6:4f:ac:00:bb:48:d6:6c:
9d:fb:60:e2:c6:26:55:e7:cd:ac:d5:04:3d:3f:6c:51:a0:1d:
c2:d0:f1:57:07:e2:52:b0:4b:1a:31:f1:3a:56:31:d6:e3:c3:
7c:93:d2:7d:84:82:27:67:5a:db:31:1a:40:a5:d7:f7:f8:25:
53:28:d3:45:5a:e8:52:b4:f7:a2:db:b7:4d:cd:11:5a:7f:80:
ec:22:cf:57:9e:d6:85:cf:c1:4a:4b:6b:f1:ad:57:6d:90:6b:
2d:a9:89:28:10:41:41:19:5e:24:a9:bb:01:b9:de:c7:a9:f1:
b8:fa:c4:b6:66:f7:90:2a:af:9e:23:c9:f1:1e:f0:09:c6:88:
76:5f:21:66:eb:02:9b:a3:9c:bf:5e:82:da:b1:0b:48:39:7e:
1b:89:36:33:3a:c6:aa:16:c6:bc:13:ae:b2:a7:c8:a3:c5:fd:
09:e5:2d:74:00:ea:36:bb:bd:8f:0a:92:38:fd:ce:1e:ec:87:
09:c5:63:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:05:49 2026 by rpki-client