Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yJbP-cJR_s0u2v0x7UaPGj9XoJE.cer
File: yJbP-cJR_s0u2v0x7UaPGj9XoJE.cer (raw, json)
Hash identifier: BEZzaajEQm4udU/SFF/BTe2Er9RTHSmhWrL/rncjA+Q=
Subject key identifier: C8:96:CF:F9:C2:51:FE:CD:2E:DA:FD:31:ED:46:8F:1A:3F:57:A0:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FA814932EAFD166A89F0DCBF93951CAB2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Jul 2026 09:35:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 138.4.0.0/16
IP: 138.100.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:14:93:2e:af:d1:66:a8:9f:0d:cb:f9:39:51:ca:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 28 09:35:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c896cff9c251fecd2edafd31ed468f1a3f57a091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:94:f8:75:fb:58:71:23:66:4a:f3:6e:3a:
33:19:60:a2:c4:2d:d4:1a:2d:db:98:5b:a4:c7:6d:
1b:7c:70:b4:25:56:48:13:73:7c:0f:bd:65:4a:e6:
b3:ce:6f:e1:3a:86:a9:cd:29:ef:11:ca:db:10:b6:
cf:93:93:ae:f8:80:74:fb:20:b7:cc:3c:32:c0:53:
06:db:f3:27:cc:f4:ae:ab:dc:e5:a1:9e:e8:26:50:
4c:41:53:ce:d0:47:13:91:1a:b3:60:c2:6d:cf:8e:
6f:f4:0c:2d:78:22:b4:11:d8:98:3b:58:98:4a:ba:
e8:27:b1:9a:33:85:2a:b5:89:89:60:39:f0:17:50:
ed:5b:e3:1b:6a:51:c2:46:0f:e3:09:e8:07:7c:d0:
34:e7:a5:71:ce:b3:85:d0:2a:4a:c1:cb:da:b7:c5:
9f:7e:c9:d1:10:f2:d3:c2:39:a5:f6:ef:68:a9:12:
29:87:1e:59:59:9a:ef:68:93:d3:6d:43:e9:33:d7:
37:70:fa:c2:e5:91:88:9c:d3:79:7f:c4:f2:2d:29:
7e:26:dc:26:1c:bf:0d:64:00:f4:c6:55:1f:e1:56:
15:99:9e:66:aa:2c:99:ba:90:49:55:74:a5:13:98:
64:3d:0c:86:bb:a1:36:3a:b2:95:06:15:de:8e:20:
aa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:96:CF:F9:C2:51:FE:CD:2E:DA:FD:31:ED:46:8F:1A:3F:57:A0:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.4.0.0/16
138.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:9a:52:2c:72:9a:ba:83:79:51:c8:9a:ed:89:ae:ea:5c:5c:
ba:85:03:86:31:9f:d2:dc:af:9d:62:e0:57:d8:d6:04:22:ba:
41:c6:a2:f4:27:7e:8a:75:f0:2b:bd:9e:bc:33:91:7f:9e:41:
ca:82:20:3c:02:a1:1a:b3:aa:29:82:80:d9:d6:19:40:84:43:
3f:eb:29:d8:a2:e2:e0:27:60:19:36:e0:f8:fa:76:30:49:ce:
c4:22:bd:b5:19:65:61:c0:66:b4:5a:f6:8d:b8:ee:1e:35:0e:
30:aa:3b:ce:14:e3:35:06:9e:dc:28:a2:d4:81:62:88:46:6a:
c7:c2:eb:39:42:fe:37:3b:47:44:ed:cf:c1:90:4e:5a:80:a3:
09:31:08:59:12:a8:76:15:d5:8d:ef:4f:b0:d1:c0:f5:dd:60:
b1:d6:1e:45:e7:04:d3:01:5c:03:f1:68:18:92:0c:16:43:81:
fc:00:64:ca:48:4b:b0:25:5f:c2:d5:d0:dc:af:cb:a8:35:86:
86:eb:a4:4f:32:66:a5:9a:8f:ce:b2:81:ea:ed:b5:ec:75:71:
da:37:02:30:3c:87:7e:f8:96:a3:d0:41:37:0c:5b:2d:78:a8:
23:ba:35:61:33:c7:c1:7f:90:84:40:c8:f9:bd:71:3e:18:33:
dc:6e:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:19:37 2026 by rpki-client