Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.cer
File: Y_nSPXQ3XBOOpWPkzJfwlAbteQY.cer (raw, json)
Hash identifier: 9dNcMdGmF9fKPxFtqv88wFryX8n6sjvdajqEWT2yCgc=
Subject key identifier: 63:F9:D2:3D:74:37:5C:13:8E:A5:63:E4:CC:97:F0:94:06:ED:79:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA17FAA586A0AEFCF1FEC70C263F86
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 25460
IP: 5.61.120.0/21
IP: 45.154.208.0/22
IP: 185.91.124.0/24
IP: 185.118.28.0/22
IP: 2a01:5ac0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:17:fa:a5:86:a0:ae:fc:f1:fe:c7:0c:26:3f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63f9d23d74375c138ea563e4cc97f09406ed7906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b9:58:ff:54:dd:49:3c:7e:d4:48:be:ae:fc:
a6:ea:b1:35:6a:a0:e4:14:0f:b1:a0:ab:07:c0:36:
e0:6b:4c:cc:ea:2a:3d:27:93:57:8e:d6:e0:05:c1:
85:a9:51:be:3e:65:3c:51:f4:fd:a9:0c:52:18:a3:
a0:2b:32:6e:55:0d:f5:5f:4b:82:1a:1a:8e:5f:48:
22:d9:21:60:53:9a:f9:4b:f8:d2:43:2c:af:31:c0:
e2:73:5a:05:6d:fa:c8:b7:d6:ac:e2:96:cc:ac:8c:
51:5b:d1:61:dc:c5:ce:5a:15:94:66:20:e0:8c:7f:
90:ee:dc:e1:23:ce:e9:2d:02:34:06:14:28:e2:0c:
89:1b:5f:49:56:02:62:61:cc:1b:ab:20:96:6d:32:
36:3a:f4:99:c9:34:38:02:fa:00:4a:88:7c:e8:d7:
06:87:00:28:a0:92:ef:f4:b5:cd:57:b6:0d:98:ac:
1e:78:e6:f2:82:05:99:82:7a:92:ad:35:29:35:84:
84:6b:08:fd:e3:84:51:e9:5d:6c:35:36:73:bf:43:
a4:e9:22:45:a4:65:ae:3a:4f:db:7a:c3:ab:1d:ba:
62:75:5b:a6:43:1b:6a:be:18:bb:9d:60:a4:35:3f:
ef:9a:e6:fc:a2:49:51:0e:72:40:d1:7c:e7:5a:97:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F9:D2:3D:74:37:5C:13:8E:A5:63:E4:CC:97:F0:94:06:ED:79:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/Y_nSPXQ3XBOOpWPkzJfwlAbteQY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.120.0/21
45.154.208.0/22
185.91.124.0/24
185.118.28.0/22
IPv6:
2a01:5ac0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25460
Signature Algorithm: sha256WithRSAEncryption
27:df:e6:ef:f1:aa:a4:a9:40:10:f5:70:1c:fb:4f:9e:70:84:
bf:1e:21:f4:67:00:40:f3:4c:f4:65:6f:64:62:67:0c:c6:c3:
d0:39:8a:05:3c:3d:d2:61:07:41:3c:6a:79:50:82:62:ff:fa:
c9:c4:bc:b8:65:4b:af:43:53:76:cc:d7:97:5e:b2:a8:8f:4a:
ee:e9:f3:3e:d5:55:61:cc:0f:2c:db:52:d9:a5:75:2a:40:78:
0f:5d:d2:bd:40:52:a3:49:d1:80:de:99:53:50:df:0f:1d:46:
85:f5:4e:a9:f5:43:72:47:23:b0:2b:fd:98:5b:6a:c5:b1:32:
a1:5c:fe:55:e8:5c:82:e2:f1:dd:a9:24:f8:bc:98:66:1d:bd:
f6:50:60:fb:a6:88:cc:98:f5:a6:d2:47:93:b4:da:68:51:86:
b8:2c:d2:e0:89:2d:98:a0:38:eb:69:70:1c:a0:d4:6f:e4:74:
60:2a:a6:99:00:df:8d:f5:fc:9f:16:1f:d2:e5:62:5c:ab:f9:
ec:ee:44:a2:f8:1b:0e:7a:3b:08:84:cc:32:41:5b:2e:eb:ff:
a9:f4:8f:05:3b:54:41:ae:a9:e8:79:24:7c:4d:d8:73:15:06:
d0:1d:df:38:0d:85:68:7c:65:c0:99:f6:ac:8f:83:02:c6:30:
28:14:c1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:35:08 2026 by rpki-client