
Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6gYYKsxq1GcoC4E9L0AOvibTYnE.cer
File: 6gYYKsxq1GcoC4E9L0AOvibTYnE.cer (raw, json)
Hash identifier: I3MzFZdhrZsobfHMaxxbl+1MQ1hgnNbsuBcPjVROatk=
Subject key identifier: EA:06:18:2A:CC:6A:D4:67:28:0B:81:3D:2F:40:0E:BE:26:D3:62:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A01924433BC102F3C51C14595C1B239D23
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/6ac443-d8be-48b5-8819-c470335ff1a8/1/6gYYKsxq1GcoC4E9L0AOvibTYnE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/6ac443-d8be-48b5-8819-c470335ff1a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 19 Aug 2026 08:30:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213930
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:24:43:3b:c1:02:f3:c5:1c:14:59:5c:1b:23:9d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 19 08:30:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea06182acc6ad467280b813d2f400ebe26d36271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:5a:3a:37:8a:0c:03:c5:4e:2b:54:2e:79:
5a:ad:4c:4d:36:bd:05:d5:bf:ae:d2:92:05:1f:80:
bf:fa:e2:b9:3c:2a:c4:43:d6:c9:9a:24:f2:e6:68:
1d:b5:78:3c:c4:20:cb:d4:f3:8c:e1:10:58:bb:07:
54:ed:94:25:4a:0d:95:f4:7f:ed:19:b9:c9:d0:ef:
bb:a8:7d:b0:4b:0c:10:b8:42:06:cb:7d:9c:ff:a3:
4f:f4:c5:84:3a:a0:9e:dc:33:6c:e8:ff:fd:27:bf:
0e:4a:8d:44:3b:0e:bd:6c:f2:8f:7d:17:ce:fe:c8:
52:4c:9d:05:15:48:97:e2:1d:53:50:c6:41:34:63:
a0:ec:57:68:67:f1:11:8b:47:36:f6:00:cc:f5:79:
f8:ba:94:18:69:a4:fd:0e:a4:b5:3f:33:a2:db:5f:
e7:9a:ba:63:92:c9:dc:83:15:89:9c:8b:05:70:55:
ae:2b:ba:d1:a9:71:7c:ec:79:e3:ef:10:29:32:9d:
c5:b7:2c:ba:5b:80:cb:b1:20:9b:01:ce:77:0e:3d:
c6:bb:e1:6a:4c:00:64:33:e6:9d:09:c1:08:29:bf:
63:be:cf:c6:31:11:e3:db:95:c3:53:5b:2f:fe:cf:
84:bb:fb:cc:ae:07:67:98:ce:05:83:09:c2:f0:b5:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:06:18:2A:CC:6A:D4:67:28:0B:81:3D:2F:40:0E:BE:26:D3:62:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6ac443-d8be-48b5-8819-c470335ff1a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6ac443-d8be-48b5-8819-c470335ff1a8/1/6gYYKsxq1GcoC4E9L0AOvibTYnE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213930
Signature Algorithm: sha256WithRSAEncryption
8d:1e:dc:ca:f9:c5:db:ac:16:e2:1d:a2:68:78:c1:73:bf:8b:
92:62:cf:6e:10:37:b6:3e:cd:76:47:ab:cf:37:ff:fb:ca:c4:
e7:30:a1:9c:5d:60:3b:b7:c6:3b:36:fa:11:d5:1f:93:a9:4d:
69:f9:89:17:11:25:fd:60:eb:90:c5:32:04:91:07:ca:74:5b:
ce:91:00:e2:80:aa:a4:75:fb:76:03:b2:57:27:73:bf:87:f4:
a8:72:62:2c:37:88:70:ae:bc:20:e8:6a:e0:10:c9:71:8f:df:
69:8d:a2:a0:3b:98:f6:a7:44:ff:29:3f:37:04:35:33:97:28:
f4:c8:68:a3:85:f2:1c:e7:17:49:cb:15:85:d7:ae:44:8d:97:
87:f0:84:ce:b2:6b:a1:e8:45:a0:d4:0d:5b:08:fe:c6:7d:67:
88:a4:91:ea:92:cc:bf:99:01:99:a9:0e:a2:73:51:de:39:14:
9f:8a:97:9c:93:b9:ef:30:b6:9d:d9:07:40:3e:ff:ca:93:de:
a3:1b:ed:2f:fc:a1:45:09:c9:35:c7:0b:27:60:4b:ae:2d:d8:
f7:d5:90:60:91:8a:50:ec:04:46:d0:f6:5a:11:96:ed:3c:ab:
92:4d:01:71:ae:a7:7f:ec:8d:2a:c5:e5:72:b0:b0:29:1e:60:
89:7d:ff:55
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAaAZJEM7wQLzxRwUWVwbI50jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODE5MDgzMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTA2MTgyYWNjNmFkNDY3MjgwYjgxM2QyZjQwMGViZTI2ZDM2MjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEFaOjeKDAPFTitULnlarUxNNr0F
1b+u0pIFH4C/+uK5PCrEQ9bJmiTy5mgdtXg8xCDL1POM4RBYuwdU7ZQlSg2V9H/t
GbnJ0O+7qH2wSwwQuEIGy32c/6NP9MWEOqCe3DNs6P/9J78OSo1EOw69bPKPfRfO
/shSTJ0FFUiX4h1TUMZBNGOg7FdoZ/ERi0c29gDM9Xn4upQYaaT9DqS1PzOi21/n
mrpjksncgxWJnIsFcFWuK7rRqXF87Hnj7xApMp3Ftyy6W4DLsSCbAc53Dj3Gu+Fq
TABkM+adCcEIKb9jvs/GMRHj25XDU1sv/s+Eu/vMrgdnmM4FgwnC8LVoKwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFOoGGCrMatRnKAuBPS9ADr4m02JxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzZhYzQ0
My1kOGJlLTQ4YjUtODgxOS1jNDcwMzM1ZmYxYTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvNmFjNDQz
LWQ4YmUtNDhiNS04ODE5LWM0NzAzMzVmZjFhOC8xLzZnWVlLc3hxMUdjb0M0RTlM
MEFPdmliVFluRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNDqjANBgkqhkiG9w0BAQsFAAOCAQEAjR7cyvnF26wW
4h2iaHjBc7+LkmLPbhA3tj7Ndkerzzf/+8rE5zChnF1gO7fGOzb6EdUfk6lNafmJ
FxEl/WDrkMUyBJEHynRbzpEA4oCqpHX7dgOyVydzv4f0qHJiLDeIcK68IOhq4BDJ
cY/faY2ioDuY9qdE/yk/NwQ1M5co9Mhoo4XyHOcXScsVhdeuRI2Xh/CEzrJroehF
oNQNWwj+xn1niKSR6pLMv5kBmakOonNR3jkUn4qXnJO57zC2ndkHQD7/ypPeoxvt
L/yhRQnJNccLJ2BLri3Y99WQYJGKUOwERtD2WhGW7Tyrkk0Bca6nf+yNKsXlcrCw
KR5giX3/VQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 00:51:55 2026 by rpki-client