Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.cer
File: Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.cer (raw, json)
Hash identifier: 1HmjptMSwY345uI7t1XduPuk8uAqv3W7d+OVLBkg4Hg=
Subject key identifier: 63:F4:2E:D5:F7:BD:1B:25:AF:9B:EC:15:D2:D9:C7:E8:2C:50:46:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F5F4A7072CF6328F6599D2690444B596D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 Jul 2026 06:22:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219251
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:4a:70:72:cf:63:28:f6:59:9d:26:90:44:4b:59:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 14 06:22:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63f42ed5f7bd1b25af9bec15d2d9c7e82c504612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:3f:dc:b7:b7:5c:22:b2:e1:15:a1:12:a2:
44:8d:67:b2:e3:0c:3c:2b:90:b2:2f:4f:5c:04:68:
23:16:2d:fb:cb:2d:8b:a9:3a:56:10:10:78:70:48:
b8:9a:b2:bb:1b:2c:f1:6d:72:17:50:a7:b9:55:8f:
d1:38:9e:3d:a5:1e:aa:11:23:a2:d5:cf:ce:ac:5d:
76:e8:a0:4d:0b:05:1f:85:4d:9e:2f:73:44:c1:16:
ff:ab:a2:0e:c6:c6:c4:3a:96:3b:c9:7d:83:c3:6d:
dc:05:fb:39:f2:e9:53:ec:aa:3a:a9:22:7d:a5:3b:
09:3c:ff:54:dd:14:d8:18:71:f5:27:ef:5e:21:c5:
ff:f6:e0:5e:5d:e4:0a:03:83:5c:f5:1f:7d:ca:8d:
58:44:02:ef:b8:02:61:95:b9:36:a8:d9:51:d0:d6:
8b:fc:7f:1d:07:7a:b6:3b:55:82:e9:3b:92:54:ff:
ec:d1:1e:c0:1b:61:ff:5d:1b:9c:19:f0:4a:c7:08:
5b:d4:ff:60:ff:8a:be:8f:d9:db:cd:4e:10:1a:4c:
4a:38:65:69:81:f4:44:1d:55:7c:dd:d2:98:32:9a:
48:3f:b2:c3:04:c4:6a:cd:cf:da:b4:0a:7b:73:21:
b9:b8:62:ac:e6:9f:1b:5f:e0:e9:2d:f5:0d:9a:49:
5f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F4:2E:D5:F7:BD:1B:25:AF:9B:EC:15:D2:D9:C7:E8:2C:50:46:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219251
Signature Algorithm: sha256WithRSAEncryption
07:e5:b4:73:28:91:75:5f:45:57:57:d5:e9:e9:1b:24:0f:ca:
b2:12:76:21:e7:32:b9:f9:4d:bb:df:22:96:05:ee:77:04:cc:
a5:05:d6:29:b7:d6:6c:3c:c8:dc:15:95:d7:a0:db:c1:96:9d:
2e:95:17:f2:68:9c:1f:66:4c:95:80:4c:e3:77:d5:8b:a3:56:
ee:aa:d6:22:ef:54:04:a4:56:97:44:59:4b:fb:cc:f9:7d:bd:
b2:71:61:01:71:49:48:42:df:a0:f2:d4:12:91:03:50:65:de:
81:7a:ee:e3:3f:6c:3c:62:6d:05:74:ba:23:1a:24:d1:55:1b:
59:55:2a:a2:c3:3a:fd:42:6c:fa:ad:b8:54:13:3d:13:f5:cd:
ea:f4:fb:29:85:e5:90:f0:a1:6d:08:33:95:21:22:4b:eb:79:
24:9e:8d:d1:07:97:b1:5b:85:f0:11:f9:18:84:18:88:bb:07:
4f:16:80:8b:89:8f:97:79:5f:20:17:15:e5:ec:b4:1f:e4:6d:
cc:b6:51:88:2b:46:9c:b6:df:23:1a:02:cb:61:1f:41:e4:79:
24:b3:08:e1:eb:14:06:4b:31:64:b8:43:fb:05:b0:49:d1:3c:
92:52:33:0b:22:6d:48:e2:94:22:d0:c0:92:db:cd:d0:95:4f:
6d:f8:d8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:41:15 2026 by rpki-client