Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
File: 9YmCO6FHWAB83oc69L9H_Zw5c3s.cer (raw, json)
Hash identifier: /aLAdzfsJ1la7YK3A3mkHEBi81ClC8Nml0S6TPAq5MY=
Subject key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7758C9684041C05549450E2645E09B74
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:17:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 6782
IP: 194.117.160.0/19
IP: 194.140.244.0/24
IP: 195.196.0.0/16
IP: 2a00:ff40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:c9:68:40:41:c0:55:49:45:0e:26:45:e0:9b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f589823ba14758007cde873af4bf47fd9c39737b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fe:67:fa:3b:59:53:2c:55:27:3f:d1:7a:cd:
bb:da:0c:65:eb:1b:59:7d:14:0b:09:72:18:20:8f:
1d:4f:44:1a:c7:c6:e7:2b:a2:d8:fb:99:59:58:25:
9d:1a:19:63:f4:f4:b2:d9:03:f7:f7:59:a3:09:10:
73:f7:b5:dd:ea:7a:58:a9:b6:a7:9a:ff:74:3f:bf:
8b:b1:9f:d2:15:98:b6:43:07:25:00:e4:04:a3:32:
ee:f4:59:e6:14:8b:6b:48:15:bb:09:0e:bb:70:e5:
4e:98:9f:96:2a:eb:3c:7b:f0:04:0e:68:0d:20:11:
e0:38:53:cf:9a:3b:4a:84:a8:08:e6:7f:e9:71:1b:
8b:24:4c:69:b2:c5:d8:9f:85:22:25:bb:48:24:33:
89:57:95:02:e7:46:9b:a4:12:71:48:d7:8d:1b:f5:
e3:0d:89:8f:3a:6a:07:11:2f:55:a9:c0:de:37:9a:
f0:29:43:4d:0b:9c:3d:80:f7:a6:dc:88:79:fe:09:
89:13:0d:dc:42:b8:0a:fa:81:8c:11:9f:8a:ab:ef:
d2:41:75:61:47:f4:41:55:dd:91:c8:7c:ae:d5:bf:
85:82:49:97:1f:10:d9:e3:66:bc:58:6d:ce:c3:4b:
4c:5f:3f:cb:56:ae:6d:f7:23:8d:39:f2:b6:4b:b5:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.160.0/19
194.140.244.0/24
195.196.0.0/16
IPv6:
2a00:ff40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6782
Signature Algorithm: sha256WithRSAEncryption
0f:89:01:35:64:3c:ff:bf:9c:32:dd:5e:d3:b6:7c:0a:c4:97:
f8:c6:a4:36:9b:18:75:88:bb:07:24:ac:4f:dc:12:16:34:48:
90:0e:42:aa:05:1e:44:08:34:52:1d:43:a5:de:f5:52:db:4e:
bd:7c:15:53:ca:5f:c9:22:22:b1:47:75:40:59:56:5f:32:02:
fb:20:ba:89:3e:56:d5:fa:63:27:c7:60:d2:06:a9:88:19:7d:
04:8a:2d:27:56:1b:02:c1:c7:c3:c0:d6:d0:ce:cf:71:fc:02:
78:9d:01:ef:35:40:db:a4:4c:3f:1d:c4:06:3f:4e:6f:00:54:
48:45:62:03:cf:49:59:7c:5f:82:58:f9:c3:c1:83:14:7d:8a:
29:60:5d:89:bc:44:f3:7c:3a:d0:43:94:13:19:a9:66:27:9b:
5e:5c:91:8a:a8:77:76:99:ea:a4:f1:63:8e:cf:b7:18:6a:d2:
ca:e0:e2:14:69:33:9e:1f:31:0d:74:97:bf:51:37:43:55:29:
41:5e:2f:f0:5b:16:ff:fc:3e:a8:73:11:ba:fe:51:28:3e:05:
7d:06:e8:d6:78:40:1d:36:16:a5:ff:dc:3a:bb:24:e0:e2:8f:
7b:bf:18:fd:3b:bc:20:a4:cb:bb:a0:bb:3d:1e:3e:e8:a7:5b:
ba:04:df:de
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgISAZt3WMloQEHAVUlFDiZF4Jt0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTg5ODIzYmExNDc1ODAwN2NkZTg3M2FmNGJmNDdmZDljMzk3MzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP5n+jtZUyxVJz/Res272gxl6xtZ
fRQLCXIYII8dT0Qax8bnK6LY+5lZWCWdGhlj9PSy2QP391mjCRBz97Xd6npYqban
mv90P7+LsZ/SFZi2QwclAOQEozLu9FnmFItrSBW7CQ67cOVOmJ+WKus8e/AEDmgN
IBHgOFPPmjtKhKgI5n/pcRuLJExpssXYn4UiJbtIJDOJV5UC50abpBJxSNeNG/Xj
DYmPOmoHES9VqcDeN5rwKUNNC5w9gPem3Ih5/gmJEw3cQrgK+oGMEZ+Kq+/SQXVh
R/RBVd2RyHyu1b+FgkmXHxDZ42a8WG3Ow0tMXz/LVq5t9yONOfK2S7WzkwIDAQAB
o4ICuTCCArUwHQYDVR0OBBYEFPWJgjuhR1gAfN6HOvS/R/2cOXN7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0L2FlMTc1
YS0xYzAwLTQwOTEtYTA2MS05YmE0ZWMzMWNiNmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvYWUxNzVh
LTFjMDAtNDA5MS1hMDYxLTliYTRlYzMxY2I2Yi8xLzlZbUNPNkZIV0FCODNvYzY5
TDlIX1p3NWMzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF
BwEHAQH/BCowKDAXBAIAATARAwQFwnWgAwQAwoz0AwMAw8QwDQQCAAIwBwMFACoA
/0AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICGn4wDQYJKoZIhvcNAQELBQADggEB
AA+JATVkPP+/nDLdXtO2fArEl/jGpDabGHWIuwckrE/cEhY0SJAOQqoFHkQINFId
Q6Xe9VLbTr18FVPKX8kiIrFHdUBZVl8yAvsguok+VtX6YyfHYNIGqYgZfQSKLSdW
GwLBx8PA1tDOz3H8AnidAe81QNukTD8dxAY/Tm8AVEhFYgPPSVl8X4JY+cPBgxR9
iilgXYm8RPN8OtBDlBMZqWYnm15ckYqod3aZ6qTxY47Ptxhq0srg4hRpM54fMQ10
l79RN0NVKUFeL/BbFv/8PqhzEbr+USg+BX0G6NZ4QB02FqX/3Dq7JODij3u/GP07
vCCky7uguz0ePuinW7oE394=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:19:38 2026 by rpki-client