Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
File: 1-YUzm9bktvZypnyvdxbuQMFLlWk.cer (raw, json)
Hash identifier: ak7U8bm47C3/9gBLpsf/dRnxgaP6dqYTuFnOFCTiKx0=
Subject key identifier: F9:85:33:9B:D6:E4:B6:F6:72:A6:7C:AF:77:16:EE:40:C1:4B:95:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D00EFD1CF8D43AB466B4CFCD12E2BAED1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Mar 2026 12:33:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200483
IP: 79.134.193.0/24
IP: 79.134.198.0/23
IP: 79.134.222.0/23
IP: 93.191.58.0/24
IP: 93.191.60.0/24
IP: 93.191.63.0/24
IP: 95.161.156.0/22
IP: 95.161.164.0/22
IP: 95.161.216.0/23
IP: 95.161.221.0/24
IP: 95.161.223.0/24
IP: 95.161.239.0/24
IP: 178.16.151.0/24
IP: 185.102.8.0/22
IP: 185.119.0.0/22
IP: 185.171.192.0/22
IP: 185.241.176.0/22
IP: 217.79.4.0/23
IP: 217.79.8.0/24
IP: 2a12:9c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:ef:d1:cf:8d:43:ab:46:6b:4c:fc:d1:2e:2b:ae:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 18 12:33:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f985339bd6e4b6f672a67caf7716ee40c14b9569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:63:4e:bc:ed:98:b1:12:de:20:ba:3e:a3:d9:
b7:69:a3:da:84:95:a4:d0:39:2a:47:a4:2d:eb:08:
94:2c:e4:cc:82:a8:25:bd:fd:98:40:b7:4b:d1:db:
cb:e4:70:a9:78:03:e5:43:3b:0f:15:b2:78:fe:07:
46:21:42:5c:56:eb:95:5b:44:0f:cf:30:53:1c:9b:
dc:6d:ed:1c:c5:59:58:df:4d:c9:9f:39:3d:75:b5:
14:ae:a2:22:3d:da:70:54:24:36:02:70:9e:3e:f6:
04:1b:22:12:b8:21:18:9c:6a:03:17:a7:4d:c1:6b:
ab:11:0b:e6:ab:58:37:fe:fa:2d:3a:e7:57:d4:42:
33:c5:8a:34:08:c4:29:c9:96:6e:6b:a0:bb:12:ac:
06:b8:b8:27:db:cf:44:10:46:ab:3d:bd:25:d1:a0:
f4:93:f3:77:f5:95:93:74:49:1b:aa:1d:75:e3:ed:
87:c2:91:80:54:7d:b1:3a:db:bb:fc:4a:dc:c4:64:
6d:a9:03:2f:d8:86:56:5e:0a:ee:99:c6:1d:06:d0:
88:6a:97:a4:a9:78:d9:6a:29:b0:13:2b:c2:6b:1f:
c9:c5:02:93:60:89:63:66:56:70:fa:ce:42:1c:1a:
ca:28:a5:62:65:80:ce:ac:d2:ac:d2:f2:3b:56:5e:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:85:33:9B:D6:E4:B6:F6:72:A6:7C:AF:77:16:EE:40:C1:4B:95:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.134.193.0/24
79.134.198.0/23
79.134.222.0/23
93.191.58.0/24
93.191.60.0/24
93.191.63.0/24
95.161.156.0/22
95.161.164.0/22
95.161.216.0/23
95.161.221.0/24
95.161.223.0/24
95.161.239.0/24
178.16.151.0/24
185.102.8.0/22
185.119.0.0/22
185.171.192.0/22
185.241.176.0/22
217.79.4.0/23
217.79.8.0/24
IPv6:
2a12:9c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200483
Signature Algorithm: sha256WithRSAEncryption
97:41:20:37:ce:80:ac:54:64:40:bb:53:d1:4e:3f:53:d4:44:
b9:fe:df:d0:5d:4b:3f:28:7f:e0:cf:09:58:18:25:1d:55:03:
f3:3b:e8:3c:70:c1:62:6e:7b:6c:a7:85:14:c8:27:c9:66:63:
55:46:a0:52:c1:ab:9c:cb:d4:47:ff:5a:8f:59:06:57:09:03:
78:c1:bd:ae:09:7d:56:0a:17:af:3f:e2:0b:ca:55:3a:33:cd:
dd:82:c4:f5:55:9b:6f:93:b7:62:cc:0a:a5:84:6b:03:b7:b0:
95:ca:d7:8a:1f:eb:d2:f4:65:1e:0c:df:7c:37:dc:51:28:0e:
96:e3:a3:61:e0:ab:9e:7c:5e:c5:8b:86:c1:9c:67:ee:b6:16:
b0:64:3b:26:86:71:ae:69:13:83:90:57:ce:31:ce:e9:04:e7:
0a:87:65:9a:9f:58:cf:9a:e5:19:0e:b5:fe:af:57:79:a6:eb:
95:f6:bf:da:00:5d:b8:0e:fb:73:08:19:05:1e:93:6b:86:a0:
30:8e:ee:00:02:e6:6c:85:f5:00:07:e9:b8:8f:2c:13:e7:a0:
0f:7f:96:a5:d1:de:eb:68:08:4c:f5:db:c0:6a:92:2c:9b:a7:
63:1e:a8:21:30:53:21:99:00:b3:a6:45:25:2c:a2:31:86:b5:
32:31:ac:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:05 2026 by rpki-client