Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
File: Y3bCUtsJvoF7hypxepWe3KxEJms.cer (raw, json)
Hash identifier: o/psKjnEOgnwZxMnm6L09H5XHk8/NUsAJOtXZgTZxVs=
Subject key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C4CF0466A6DC60588B727777C8E3D8CB2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Feb 2026 13:42:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200336
IP: 194.56.192.0/22
IP: 2a0f:d6c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:f0:46:6a:6d:c6:05:88:b7:27:77:7c:8e:3d:8c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 11 13:42:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6376c252db09be817b872a717a959edcac44266b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:5b:89:e1:db:26:12:67:68:db:0c:4c:a2:
0a:f6:20:fc:be:cb:82:5a:b4:8b:ed:66:7b:8b:b9:
0f:ed:e4:0f:92:b8:bf:5e:d4:a9:a5:90:94:a6:00:
51:60:4f:48:ce:4f:48:f6:10:6c:6b:bb:1d:ca:c0:
d7:f5:b8:8e:2b:fd:48:b0:be:30:a3:7c:72:c4:76:
2d:26:4d:85:5c:53:80:c1:b3:62:0b:7f:67:46:a4:
69:e4:b6:d5:bc:30:41:0d:05:02:97:29:f0:cf:51:
93:57:83:15:1e:81:9e:34:15:bb:1f:13:50:e3:6a:
43:db:ca:ac:02:f8:84:aa:c5:5f:d3:02:33:4a:1a:
b2:1a:71:6c:02:6a:5c:6d:f2:e1:62:7e:d1:b1:38:
b9:fc:a2:cb:7f:eb:0d:b7:e5:1e:85:64:7f:88:f2:
cc:36:a3:e0:78:07:43:1b:bf:3f:82:d9:f1:90:f9:
92:07:c0:4b:79:12:10:13:7f:5a:20:59:64:59:e9:
50:a0:49:40:d5:cd:90:9e:f8:1e:29:b3:81:e5:28:
80:17:d2:bd:5a:23:4f:86:38:2c:08:54:19:0a:30:
02:01:b1:36:34:6d:21:fa:e8:ae:07:33:cc:78:20:
75:63:af:eb:45:e2:d6:1d:95:d1:60:78:95:e7:89:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.192.0/22
IPv6:
2a0f:d6c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200336
Signature Algorithm: sha256WithRSAEncryption
4f:ca:2f:7d:b7:2f:38:21:92:61:87:b4:78:dc:ce:db:f1:56:
1b:ec:90:c8:d2:67:99:7d:49:5f:89:c1:0c:52:ae:96:10:e3:
3f:7c:ba:e8:ce:75:fa:cc:11:69:d4:ff:21:24:16:ca:ac:a4:
fa:5f:60:8b:47:5b:dd:87:1d:d7:76:54:45:0d:4b:e9:a9:6c:
e4:96:b1:93:95:4d:3b:64:47:0d:2c:ce:72:b6:75:4b:a0:6b:
b1:0d:75:51:7f:1f:04:92:af:9a:11:7a:ed:a3:ef:58:a4:5b:
34:4d:95:a7:e0:0c:63:19:73:df:58:9f:79:c8:1b:8b:bb:0a:
e5:94:f9:43:4a:9a:fa:a9:f3:29:f1:2d:02:b9:4b:c2:b4:55:
48:7f:e8:41:72:37:f7:aa:19:79:46:ab:d3:04:1f:47:8e:8e:
5e:7b:ae:59:02:85:94:0f:67:e5:53:ef:03:08:de:36:88:cb:
d5:63:b5:e6:8e:0d:0f:9d:ae:be:55:27:ea:a0:5a:cb:2e:76:
93:10:1c:d2:95:32:1b:77:6c:80:a1:b3:72:36:35:8e:b4:94:
41:59:73:d5:bd:ec:22:53:6a:de:c2:c0:b0:08:d3:7c:ca:81:
4c:fc:b4:69:03:6f:2d:4b:87:f1:44:60:c1:07:21:7b:84:a1:
82:dd:d6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:44:01 2026 by rpki-client