Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-yRF-erKIIDmV0cEBQkMzOxxhRg.cer
File: 1-yRF-erKIIDmV0cEBQkMzOxxhRg.cer (raw, json)
Hash identifier: Wjo20AJqrjl7KeMDWma12yT+hoV/Cib0pNfOxs6nQW0=
Subject key identifier: FB:24:45:F9:EA:CA:20:80:E6:57:47:04:05:09:0C:CC:EC:71:85:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E40D6FAA19176207EFBFC58B676E28EFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 19 May 2026 15:24:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200767
IP: 85.116.248.0/22
IP: 185.96.116.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:d6:fa:a1:91:76:20:7e:fb:fc:58:b6:76:e2:8e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 19 15:24:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb2445f9eaca2080e657470405090cccec718518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:23:68:f0:7d:fd:62:c8:d4:47:95:8e:f4:
bd:8f:19:8d:92:44:2a:25:50:bb:38:17:5f:db:d7:
b3:e7:d2:7c:60:22:22:fa:01:fc:30:59:67:b7:af:
15:8f:64:b0:34:dd:29:eb:2b:69:24:fe:1e:10:57:
dc:f1:14:e0:fb:64:cf:ec:4c:b3:8f:88:0d:1a:ed:
aa:5b:68:65:69:88:93:91:7f:11:58:83:27:26:2f:
16:dd:1c:94:ef:90:59:dd:6e:fc:ed:97:78:13:90:
2f:c4:56:df:34:e7:35:6b:b6:4f:64:cf:f8:91:42:
7d:79:bf:96:64:f8:fb:d3:6a:2c:05:d7:51:a1:83:
df:dd:b3:ad:ec:3b:3d:01:db:f8:87:92:a1:1f:af:
a9:24:d4:28:29:2a:22:b1:87:1c:5f:28:63:da:63:
92:b7:c6:be:52:d0:71:15:14:8f:65:e6:b7:f7:c4:
4f:7c:12:df:8d:a2:f1:59:c6:7a:39:a1:b1:13:64:
5e:ba:51:26:a1:a3:f0:d5:30:6b:34:a5:a0:a0:13:
e0:bf:42:73:61:cd:e4:3f:74:1c:bb:dc:ba:c0:2c:
17:28:9f:7a:49:0f:4d:8f:4d:a9:5b:71:8e:3f:ff:
fb:a2:dc:93:78:a6:4d:c2:27:d0:f7:3e:bf:2e:4e:
a1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:24:45:F9:EA:CA:20:80:E6:57:47:04:05:09:0C:CC:EC:71:85:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.248.0/22
185.96.116.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200767
Signature Algorithm: sha256WithRSAEncryption
a4:54:1c:e0:d9:6d:83:89:5c:f2:b5:a5:c4:40:0a:05:d3:ac:
ad:2f:93:e0:58:c3:3e:f5:86:ab:2c:3c:3a:9f:60:27:4b:05:
87:a5:d1:a6:c3:7d:2a:36:14:66:6b:43:14:c1:6b:3d:6a:c1:
a7:bf:1e:d0:0f:c9:fe:b6:82:2f:24:e4:9b:3b:cf:ed:a4:07:
af:d3:a0:21:2c:5b:a7:7f:04:e5:52:42:c5:a7:d6:05:9d:b4:
09:5b:fd:6a:ed:50:6f:01:aa:7c:b1:07:32:4e:76:23:6a:6c:
6d:b7:96:a8:f1:3c:6a:d6:51:19:a3:ad:d4:93:f2:65:5d:a9:
6e:80:44:62:dc:4c:31:e4:2e:36:69:2e:ce:32:11:6a:60:2c:
73:92:9d:72:5e:5b:85:6e:54:cb:32:85:f9:bb:2b:bc:58:b7:
ab:e3:27:81:be:a4:21:07:99:5c:36:31:58:d5:3c:ee:be:78:
03:14:9c:98:77:29:38:3b:f0:2b:ca:88:ad:d5:c1:ab:4b:7e:
f0:e2:cd:b4:c7:04:55:54:4b:fc:30:7d:b8:03:69:62:87:21:
ba:65:39:69:00:5f:54:24:6a:52:5d:e2:b4:b0:83:79:43:82:
a0:9b:29:88:46:8a:9f:57:7d:6b:8e:ec:ae:47:58:91:b0:1e:
c4:42:40:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:06 2026 by rpki-client