Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer
File: cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer (raw, json)
Hash identifier: K/DhJ2FyNKJV77LRLambc0jNr4WGbFhTOObjzpSOZ94=
Subject key identifier: 71:8F:17:E4:CF:B3:38:21:62:1F:1C:D1:B1:00:7A:B5:2D:13:72:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A056F524D2A8B559ACEA5F250E3FED8D18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 31 Aug 2026 08:35:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219127
IP: 2a0b:5040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:f5:24:d2:a8:b5:59:ac:ea:5f:25:0e:3f:ed:8d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 31 08:35:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=718f17e4cfb33821621f1cd1b1007ab52d1372e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:4e:4d:87:1b:f7:41:69:77:90:b2:ae:5c:
4b:42:e2:8c:b7:e6:18:55:d4:14:58:71:d3:23:d6:
5c:8c:1d:83:79:fa:7d:65:64:da:b1:e3:ab:96:25:
fe:e8:9a:11:9e:52:d9:0e:fa:22:d0:24:3e:c6:f8:
ec:01:1b:5f:a3:a9:fd:21:05:fb:99:a3:60:89:51:
81:14:6b:63:86:3a:94:9f:45:44:0f:94:7b:f4:27:
33:1b:ef:9d:c7:d6:b6:a2:6b:52:95:b9:7c:5c:18:
85:d4:71:3a:d8:a4:9a:b1:3c:da:40:56:d6:9f:3d:
85:ac:b6:78:f4:2b:6c:0d:b5:82:45:36:0c:34:e8:
08:01:90:ff:a8:88:bc:33:6c:cc:e4:c5:10:5c:1b:
cb:1f:38:ae:41:36:5b:2d:d8:b4:cc:f1:5e:3a:e9:
21:fe:21:59:4d:70:60:10:f2:df:68:ee:9c:ab:c2:
2e:d7:e9:20:0e:4e:61:aa:b1:63:a2:47:1d:f0:d1:
8c:89:80:b4:d9:1f:2d:89:af:b3:32:19:b5:ba:3a:
82:a4:db:42:c7:f7:74:34:81:56:67:37:70:39:d5:
8c:4b:c2:ea:9d:6a:a9:e5:23:73:22:dc:1e:66:cb:
80:ef:88:cb:5e:08:1b:92:b2:ea:6f:da:a6:d6:0b:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8F:17:E4:CF:B3:38:21:62:1F:1C:D1:B1:00:7A:B5:2D:13:72:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:5040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219127
Signature Algorithm: sha256WithRSAEncryption
8a:8c:a9:c4:63:71:65:f2:c4:1f:b0:bd:5d:5b:a4:e2:b2:5c:
c2:60:9d:36:00:61:07:37:44:ba:68:be:0b:3b:62:dc:71:95:
11:3c:2f:ed:99:12:e6:51:fe:25:7c:64:ef:88:66:04:04:54:
92:93:52:36:e9:ba:d4:37:9b:f2:d3:88:27:7d:f6:84:4f:1c:
f1:76:98:f7:fd:65:90:7c:d4:35:10:3e:06:08:09:c8:38:ce:
97:59:50:a3:84:48:ca:07:2a:aa:f2:96:f4:b3:c6:e3:4e:1a:
0d:1e:d7:d5:54:79:7a:d4:06:8c:e2:5a:81:1c:d6:9d:ec:16:
2c:4d:c3:01:9e:e3:1d:c5:59:0f:de:a3:27:5f:e1:23:92:0c:
c9:c6:f2:8a:b3:11:e4:e3:ad:fa:43:9a:26:ab:d2:db:4b:09:
bb:23:2e:1e:30:ec:24:d7:52:92:25:49:5d:4f:bd:81:a0:76:
2d:b9:4d:65:e7:dd:36:62:78:c4:b1:24:56:a1:43:3d:fe:68:
57:ac:27:e2:33:86:14:30:cd:06:83:f4:6c:67:6c:2f:a1:3e:
12:7a:ad:28:c0:e6:7d:76:3c:6a:02:e6:16:17:c8:89:5e:c6:
00:cc:70:7f:0e:a4:bb:52:b8:75:8e:d0:a1:a2:be:3b:0e:ca:
18:14:92:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:46:07 2026 by rpki-client