Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer (raw, json)
Hash identifier: WgqWUiz6/dqm/sqjZSGUP8G8U8MrtWE3OkC3lqv/aXU=
Subject key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B783539FA1E7F33D0BED17C9D2B038EEA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207880
IP: 2001:678:b6c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:39:fa:1e:7f:33:d0:be:d1:7c:9d:2b:03:8e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:6c:74:07:70:82:f1:9f:33:39:b7:6d:eb:
57:c3:ac:ed:59:2d:e7:bb:94:9c:1e:cb:54:20:85:
97:f8:6f:69:8f:c2:2b:17:93:8c:78:ea:56:34:aa:
a7:9b:4a:d3:5b:a6:82:71:f1:e3:30:e3:c8:7f:89:
e4:9b:85:ac:14:54:d2:c3:db:36:28:c9:c8:d4:71:
20:76:dd:ff:74:14:a0:10:4c:fb:36:7a:98:8d:00:
f7:e9:30:7e:cf:65:76:b5:51:38:ce:fd:35:be:d3:
78:67:af:f2:99:c9:bc:e7:92:c7:7d:7d:b6:7d:5f:
5f:4e:d3:75:80:09:9a:62:a5:68:05:d3:f4:e2:7c:
74:fe:e7:71:ee:7d:29:46:c9:72:fb:97:45:79:f9:
21:81:c0:34:53:3f:cc:92:40:ea:d3:69:6f:33:3b:
09:96:2f:83:23:a1:28:f8:93:f3:89:6e:fa:bf:cc:
6c:c3:20:40:9b:fb:7d:32:ec:25:c1:e0:cd:18:8b:
16:a6:c4:64:d6:da:96:ef:f5:10:1e:40:e4:05:70:
f2:03:ae:a3:dc:4b:13:47:5c:56:db:a3:cd:63:50:
6a:f5:75:b1:c7:15:54:b0:c0:ff:35:d6:ee:57:82:
c1:40:9b:c7:d8:9b:53:ac:86:49:56:cb:d8:fc:dc:
da:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b6c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207880
Signature Algorithm: sha256WithRSAEncryption
0f:9e:f2:0c:04:3a:0b:57:60:d9:85:93:df:1a:12:43:00:f7:
29:57:bd:f9:8e:2c:f7:af:dc:01:f1:92:ea:7c:09:0c:cf:16:
54:59:cd:31:af:b6:c1:bc:1b:54:0a:df:b1:02:fc:f0:98:3a:
7b:ea:8b:50:a8:45:9e:50:69:92:7c:31:17:31:fc:71:ee:d3:
bf:0b:b0:87:43:6a:5b:46:84:69:df:68:2e:8d:e0:fa:92:8c:
15:2f:57:72:b2:1b:5d:45:9b:27:de:82:4c:9b:90:fc:90:ee:
29:4c:8f:bf:89:21:c1:4a:4e:23:b4:47:35:c7:59:ed:ce:fb:
67:ff:db:54:ed:17:35:56:f9:8b:b9:42:77:d0:3e:e3:06:44:
5b:4d:25:5b:68:81:87:a7:e4:ac:72:9c:f6:d3:66:03:da:26:
2f:e1:51:61:6a:11:d1:50:80:20:84:4c:9f:45:e8:a9:c3:fb:
24:dd:2e:a8:15:3c:29:73:c6:e2:31:b8:13:51:c5:00:35:e8:
d3:7d:da:1a:d4:d2:2c:69:03:db:db:56:dc:55:85:c7:8a:48:
e4:49:5e:5b:d6:ff:ca:89:ce:32:66:a1:30:df:69:ef:cc:cd:
e9:bc:64:5a:e8:ec:27:62:2f:ad:6b:e1:3c:3c:ea:f0:2f:53:
91:d9:3e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:52:00 2026 by rpki-client