Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.cer
File: ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.cer (raw, json)
Hash identifier: mKhQlmqxKrlPA+/K6u2oeVUxgju4DAVeoQG+mDmjtIE=
Subject key identifier: CA:D5:B7:91:0D:B0:B7:86:37:F9:7C:6D:87:C7:80:45:CB:90:DD:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A05D676787E44A11C2BA9B8C85CC81B919
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 01 Sep 2026 14:37:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218791
IP: 2001:678:1314::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:67:67:87:e4:4a:11:c2:ba:9b:8c:85:cc:81:b9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 1 14:37:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cad5b7910db0b78637f97c6d87c78045cb90dd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:9f:e9:d0:f5:e5:6a:cb:e3:c7:28:56:0e:
25:67:66:8e:31:16:07:9d:77:08:b2:85:f1:68:f4:
02:17:22:1a:b0:40:f4:fb:6f:97:7c:8b:b1:ff:23:
e5:cb:ab:3d:a9:cf:49:a1:65:a4:35:f6:26:55:d4:
c8:db:ce:43:0d:7d:fc:a6:b6:07:16:1c:1d:9b:72:
86:12:17:de:e2:6b:f2:a1:17:58:85:bf:53:09:4a:
a6:47:61:ac:d9:54:f8:c2:cf:87:42:5a:12:15:9e:
02:00:a0:fa:cc:fd:88:6c:ef:49:9b:9e:bf:4d:85:
58:fc:5e:9a:33:7b:98:b5:e0:8f:17:61:59:bc:91:
4a:97:04:ed:5f:dc:a3:c9:02:38:cd:91:72:ad:27:
bf:e1:dc:b0:35:25:ce:36:0a:29:f6:2d:33:df:79:
18:89:97:1d:54:0a:76:76:5d:4f:33:66:0c:c5:04:
e0:54:72:47:e8:e0:b0:63:2b:6b:3d:ae:d2:b1:1a:
fa:2e:42:0e:68:4f:f9:db:09:e0:4a:72:23:fe:59:
e5:e3:f9:ee:cc:87:c7:98:17:70:77:3e:df:1b:14:
2f:ed:22:55:aa:90:c2:54:2c:34:ec:d9:95:ed:13:
fa:1f:01:a9:2f:1b:9f:59:5b:37:a3:e2:60:f0:24:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D5:B7:91:0D:B0:B7:86:37:F9:7C:6D:87:C7:80:45:CB:90:DD:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098b44-81dc-408b-93d6-f9300380c517/1/ytW3kQ2wt4Y3-Xxth8eARcuQ3SY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1314::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218791
Signature Algorithm: sha256WithRSAEncryption
a9:db:8e:1f:73:de:42:52:2f:d6:4d:53:86:95:90:4a:ae:c7:
89:e4:0d:f3:e4:f3:d8:f9:c6:7e:b3:16:62:56:c0:a7:f7:40:
f8:56:ca:51:68:fe:6c:18:a8:ec:3b:cf:c4:49:ba:6b:9f:f9:
d7:e0:df:d8:c8:7d:14:be:7e:52:81:38:16:56:35:e4:57:fe:
62:0a:09:bd:29:11:fc:3a:09:22:4a:6e:c7:87:8d:c7:52:43:
36:74:98:31:01:f6:c7:1f:2e:7c:bc:a6:1c:ed:d6:78:ed:a0:
ef:0c:d7:1d:d0:71:48:32:c6:a7:e7:85:6b:d4:f5:6f:34:f0:
ca:64:86:4d:c4:76:a7:66:c2:b0:be:c3:50:76:ea:30:6b:eb:
d0:44:71:ac:b9:71:80:bb:89:02:cb:75:b2:f2:0b:55:5b:de:
6e:4b:c1:71:9e:63:18:9c:40:ec:0b:4d:34:36:54:37:a1:cc:
41:52:e1:c0:bc:a8:60:b4:3f:20:9c:0f:e3:0b:d8:f4:ad:e9:
d4:bd:fc:5d:5f:52:50:fe:f2:3e:e2:49:05:56:4a:1b:87:bd:
c5:00:b9:a9:17:3e:e9:9a:36:25:70:23:96:4a:84:0b:fa:50:
7f:97:77:a4:74:06:d3:2c:6e:e0:08:36:03:6e:93:c6:65:1c:
9c:af:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:41 2026 by rpki-client