Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
File: qryfZKSO6lUh4en6qBB5jwiVRrY.cer (raw, json)
Hash identifier: ItF//O6OCLjgCuqBc1HDO0/dGFEIMfKXTHz7lZVClK4=
Subject key identifier: AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F8EE9DCCB84FA04AC6D9931E179D26E16
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 23 Jul 2026 12:18:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 25330
AS: 204306
IP: 2a0f:41c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:e9:dc:cb:84:fa:04:ac:6d:99:31:e1:79:d2:6e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 23 12:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aabc9f64a48eea5521e1e9faa810798f089546b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:d9:ae:bb:f3:6d:4b:23:13:9b:39:53:b7:
88:13:19:2c:2c:1d:cc:57:8e:14:7f:fe:20:8d:b5:
75:84:21:f7:35:60:f2:13:d3:70:1c:e9:f0:b7:16:
34:33:ca:32:59:25:67:a3:5b:15:85:77:7f:d6:b5:
0b:2e:b0:5d:80:71:a8:7b:7b:6a:d2:46:49:ae:a1:
84:d8:2c:f2:36:8b:9b:ef:2c:80:20:7b:35:b0:c1:
66:ed:cb:1b:aa:b4:4a:db:0f:1b:08:b1:24:15:91:
89:d8:e1:e3:63:24:60:9c:0c:ef:0b:d2:13:35:d1:
03:3d:4b:0a:36:71:eb:21:0c:7b:1b:48:8f:7b:40:
36:5e:f8:0f:2c:42:04:32:bd:a9:91:ef:cb:a4:05:
9c:bf:d2:da:5a:e9:16:ff:a0:42:0a:43:92:3e:3b:
58:83:61:92:19:b3:bc:61:38:3c:ec:f1:be:17:d1:
54:0e:9f:b5:11:cc:c1:18:4d:af:c1:92:ec:17:2d:
75:21:f6:c2:d6:77:dc:5f:cb:fe:86:cb:e6:3d:c6:
7c:cc:f1:d1:eb:27:8c:c7:d9:b8:4e:70:12:9c:c5:
01:3c:cb:6c:9d:e8:48:78:2c:1f:46:11:e1:55:87:
51:3a:cc:1c:eb:3d:ec:99:bc:79:07:f6:09:8f:ab:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:41c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25330
204306
Signature Algorithm: sha256WithRSAEncryption
8b:1d:15:65:b4:5d:a6:a9:d6:ad:37:bb:60:bc:34:bc:75:53:
05:54:c3:ea:c5:f9:80:4c:9a:cc:56:f5:39:9d:4f:a5:a4:a8:
42:63:ca:6b:62:51:94:de:48:a0:19:9e:2a:78:bd:90:d9:76:
97:61:94:79:59:66:b8:7d:c4:cb:94:cc:67:7f:fb:77:94:19:
db:c6:68:22:cb:f1:92:ac:87:6e:7c:7a:46:b6:0b:fa:7e:d7:
27:f1:4b:6b:09:67:d2:fb:75:f7:92:91:aa:7a:d8:3c:96:9c:
c4:8a:4c:f3:3b:db:36:51:66:57:22:6b:19:d9:d2:6b:61:66:
b3:2a:d7:c6:69:03:1c:8f:3a:70:2e:d7:2d:d3:e7:de:c2:37:
26:8c:4e:71:a0:30:bb:f6:56:1d:a7:c5:5b:4f:a3:a1:9a:65:
06:3a:55:78:53:ea:29:27:be:7f:29:16:ae:c8:c4:21:ba:82:
bb:c9:a3:ca:86:1f:cb:2e:26:17:9a:43:6a:33:08:da:a9:17:
7d:75:63:64:47:cd:89:ed:22:6a:99:e5:ab:4d:61:6c:05:1e:
37:6a:e2:11:3e:14:15:00:ec:03:7c:55:5f:f3:8d:ad:90:b1:
e3:41:e4:21:ea:ba:a7:32:44:ce:74:66:9b:65:9e:5a:7a:0f:
0f:76:38:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:36 2026 by rpki-client