Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer
File: YfX7g9pFWEbqZBqnIRHF_Cx8RoM.cer (raw, json)
Hash identifier: s4jsOR4eG+whvRmnVaPvrLnR6aIVAMIs/g+Y9ZzOcLM=
Subject key identifier: 61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E8D8C12D560D83AC065D09B004D6E7B5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Jun 2026 12:53:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.158.184.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:8c:12:d5:60:d8:3a:c0:65:d0:9b:00:4d:6e:7b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 3 12:53:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61f5fb83da455846ea641aa72111c5fc2c7c4683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:f6:f3:1e:b5:44:f5:34:98:b9:0a:22:b9:
d9:13:5d:98:c5:29:f9:17:05:3a:08:62:3d:44:14:
a0:20:c0:3c:bc:ce:2b:8f:eb:b6:8e:bf:67:07:ee:
15:8d:30:0c:1e:c0:bc:9a:59:f2:b0:30:94:20:39:
d6:f5:24:77:81:a2:f3:92:92:f9:f5:2c:76:a5:c3:
13:b1:fb:e8:51:f6:a0:5b:d2:a7:f7:3c:ef:d8:0f:
21:ac:d2:f0:81:8b:e7:95:9f:e0:34:e6:80:91:9d:
30:33:c7:5a:5d:cb:96:48:f9:97:fe:e4:18:bf:80:
4b:e2:69:7e:41:8c:24:f5:40:82:49:a1:cc:ba:9d:
b0:d3:51:38:74:cb:10:0d:66:8a:88:7c:06:62:d1:
d5:12:2a:aa:46:71:e7:45:f0:64:19:90:70:53:da:
8b:a9:73:85:6b:71:c7:b7:4e:4f:df:aa:72:5a:08:
73:1e:b2:62:44:5f:f9:eb:13:5b:05:4f:5f:81:1f:
41:64:c8:1a:ed:71:db:25:66:61:76:06:3c:0c:57:
0a:ec:91:6d:85:67:dd:c6:92:ab:6d:83:bf:22:a2:
36:4c:21:d1:10:d8:37:35:4c:90:07:a5:0f:9c:5d:
f9:b7:d4:75:80:da:5f:de:0b:b4:41:41:78:82:af:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F5:FB:83:DA:45:58:46:EA:64:1A:A7:21:11:C5:FC:2C:7C:46:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8e58db-3989-47e7-be04-7aa6ade1af07/1/YfX7g9pFWEbqZBqnIRHF_Cx8RoM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.184.0/22
Signature Algorithm: sha256WithRSAEncryption
91:a5:63:f6:af:51:af:ae:67:aa:e6:ed:27:8c:ae:7e:46:65:
96:ec:08:e3:20:4a:c6:97:ca:25:e4:43:34:d9:4e:6d:3f:02:
cd:01:e0:81:9a:11:06:51:b0:2a:a0:d2:b9:ea:e4:17:3c:3d:
9e:91:2c:2d:1a:2c:87:86:dd:1b:3f:ec:01:31:13:2f:53:3d:
02:5d:69:b6:86:3a:ea:5d:9c:99:33:3d:48:73:c0:38:b9:0f:
f5:65:26:7a:2c:7d:9a:05:4f:9f:a2:e4:2f:6a:f3:f9:23:ad:
d2:1f:68:45:6e:7b:af:9f:7f:76:9b:57:0c:2c:90:cf:69:72:
a3:66:f4:40:81:d5:5d:0e:3d:71:f0:47:08:9d:72:4a:99:86:
6d:1d:8c:19:1c:35:7a:0f:ff:8e:d1:74:10:8f:06:ad:92:83:
44:fd:12:00:fb:3c:e8:58:aa:54:f9:7a:7d:27:1f:b6:d4:41:
9c:b9:1a:c2:77:29:dc:d5:5f:65:be:2b:0a:13:87:23:1f:1f:
f8:bb:e3:1f:66:62:c1:25:3b:f0:b7:c5:de:07:8f:3a:dc:a6:
e6:ee:c7:80:c4:92:71:bc:08:ca:64:fe:07:f7:2a:2f:9a:7c:
9d:51:fe:6b:72:e4:95:ee:bd:84:bf:bb:1b:04:c3:46:79:67:
04:14:3e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:58:56 2026 by rpki-client