Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/yRi-Y90mFBusC0klaPaK8K3-8-E.cer
File: yRi-Y90mFBusC0klaPaK8K3-8-E.cer (raw, json)
Hash identifier: 67rfUb+7ONcj/GtJrUjMncKR1503/VxW43JgcmZKeR4=
Subject key identifier: C9:18:BE:63:DD:26:14:1B:AC:0B:49:25:68:F6:8A:F0:AD:FE:F3:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019ECE082DA2B45ADFF90B46867E8757BBA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 Jun 2026 01:25:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219442
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ce:08:2d:a2:b4:5a:df:f9:0b:46:86:7e:87:57:bb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 16 01:25:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c918be63dd26141bac0b492568f68af0adfef3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:79:c8:73:2c:97:d9:36:f4:34:54:11:3e:
3b:6b:3a:fc:50:93:0d:c7:9f:19:d6:18:74:b3:85:
4a:98:e1:a8:ce:52:a3:5d:ab:53:48:2c:8b:81:fc:
56:6e:7d:53:d7:90:79:b7:ab:e7:59:67:08:2b:ff:
5a:89:8b:56:d4:81:50:03:0f:4f:9e:9e:ac:4d:7e:
54:62:96:15:48:ac:35:45:58:8f:a2:b6:f5:e7:13:
8c:dd:a0:74:9f:9e:e6:15:1b:f4:23:f8:2d:42:fb:
d7:75:16:3c:b1:78:c0:fa:e2:0f:34:1e:1c:a3:0c:
01:7f:54:36:0b:75:37:b1:71:15:4a:d1:63:ce:ad:
53:d0:e2:55:8d:a4:28:8d:8a:e1:8f:d0:02:7c:f6:
b0:61:56:ec:0a:c6:e0:58:19:7d:6a:e0:87:6c:1e:
0c:69:7e:87:2d:c2:d9:53:ca:af:6d:d7:69:b9:83:
5e:c3:17:c2:50:d3:9f:5c:db:a6:2b:b2:a2:19:90:
72:13:2b:ca:b7:a8:1c:a0:29:07:2d:49:3f:91:b4:
47:8b:3a:46:52:dc:85:2b:1c:02:0f:c7:db:92:6e:
93:e7:88:f3:77:33:ba:a8:f1:b4:f5:c5:b6:84:28:
b5:de:aa:66:3f:59:06:dd:93:53:54:a5:1d:16:db:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:18:BE:63:DD:26:14:1B:AC:0B:49:25:68:F6:8A:F0:AD:FE:F3:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219442
Signature Algorithm: sha256WithRSAEncryption
b0:ad:f1:52:43:2f:27:46:f9:69:db:b3:6e:2a:73:80:5f:ab:
9c:3f:ff:b8:49:c3:fb:d5:00:76:c4:04:30:50:09:43:99:07:
19:66:c2:85:76:c9:4e:f3:f9:e8:9b:06:bc:40:98:4e:86:70:
75:c6:2c:14:e4:21:91:16:07:2a:77:be:90:b8:4a:c8:62:8d:
84:52:7c:bc:35:80:e2:a2:2b:a7:1e:8f:a0:e6:49:ee:c7:25:
41:7f:f5:78:11:37:d3:28:15:ca:a4:d3:50:ad:48:4e:45:6b:
ce:69:94:60:43:15:79:0e:9c:a7:e4:28:48:2e:e7:a0:84:b9:
c1:35:45:7a:71:26:6e:4e:20:18:d6:dc:b9:1b:08:14:7f:22:
04:b4:9d:cd:3e:ac:5d:aa:3f:06:18:24:87:7e:39:7d:e3:eb:
f4:78:e4:48:39:be:c6:ee:7f:f2:d6:66:8f:d0:91:08:85:ea:
85:07:0f:9b:54:42:c6:dd:06:d3:5a:df:8b:73:75:8a:36:73:
4b:ad:50:72:d9:a9:1f:d5:53:43:58:64:a6:76:00:56:38:4c:
1f:dc:5d:de:bb:86:68:a3:1e:6e:74:cf:8a:3d:34:a0:dc:fc:
cf:43:65:a0:78:36:0e:ac:98:35:1a:b3:05:d2:79:0f:f2:16:
7e:99:e7:8e
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZ7OCC2itFrf+QtGhn6HV7uiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjE2MDEyNTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTE4YmU2M2RkMjYxNDFiYWMwYjQ5MjU2OGY2OGFmMGFkZmVmM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVZ5yHMsl9k29DRUET47azr8UJMN
x58Z1hh0s4VKmOGozlKjXatTSCyLgfxWbn1T15B5t6vnWWcIK/9aiYtW1IFQAw9P
np6sTX5UYpYVSKw1RViPorb15xOM3aB0n57mFRv0I/gtQvvXdRY8sXjA+uIPNB4c
owwBf1Q2C3U3sXEVStFjzq1T0OJVjaQojYrhj9ACfPawYVbsCsbgWBl9auCHbB4M
aX6HLcLZU8qvbddpuYNewxfCUNOfXNumK7KiGZByEyvKt6gcoCkHLUk/kbRHizpG
UtyFKxwCD8fbkm6T54jzdzO6qPG09cW2hCi13qpmP1kG3ZNTVKUdFttdrQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFMkYvmPdJhQbrAtJJWj2ivCt/vPhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmL2U5MDdk
ZC1kODU5LTQxZDctYmE2Mi1hMGVhNzcwY2YzZjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvZTkwN2Rk
LWQ4NTktNDFkNy1iYTYyLWEwZWE3NzBjZjNmMi8xL3lSaS1ZOTBtRkJ1c0Mwa2xh
UGFLOEszLTgtRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNZMjANBgkqhkiG9w0BAQsFAAOCAQEAsK3xUkMvJ0b5
aduzbipzgF+rnD//uEnD+9UAdsQEMFAJQ5kHGWbChXbJTvP56JsGvECYToZwdcYs
FOQhkRYHKne+kLhKyGKNhFJ8vDWA4qIrpx6PoOZJ7sclQX/1eBE30ygVyqTTUK1I
TkVrzmmUYEMVeQ6cp+QoSC7noIS5wTVFenEmbk4gGNbcuRsIFH8iBLSdzT6sXao/
Bhgkh345fePr9HjkSDm+xu5/8tZmj9CRCIXqhQcPm1RCxt0G01rfi3N1ijZzS61Q
ctmpH9VTQ1hkpnYAVjhMH9xd3ruGaKMebnTPij00oNz8z0NloHg2DqyYNRqzBdJ5
D/IWfpnnjg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:26:17 2026 by rpki-client