Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
File: Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer (raw, json)
Hash identifier: IkPOkRgydWmc8UF/1RU1OsmP6Ba0nO4Qxc6epW5rbNQ=
Subject key identifier: 37:2F:56:69:F9:8C:FD:50:4E:4A:9D:0E:92:74:27:C5:03:E3:37:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F96F42D02EE08727DB9133058C228A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206867
IP: 185.173.84.0/22
IP: 195.245.116.0/23
IP: 2a0b:3f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:6f:42:d0:2e:e0:87:27:db:91:33:05:8c:22:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=372f5669f98cfd504e4a9d0e927427c503e33796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:12:f0:52:0e:a6:f4:3e:a5:77:1a:d4:ae:
31:d0:d3:8a:14:e9:05:a2:b5:1d:50:d3:72:ab:58:
be:b6:ca:b2:ed:02:8c:32:08:59:fe:96:b2:99:1b:
1b:f8:53:59:30:65:b1:09:1a:07:b0:6d:5a:f5:61:
21:7b:0b:44:52:b0:73:66:a7:52:5e:40:05:f3:93:
9c:19:10:bb:a3:0f:87:e7:8d:a4:24:31:90:ec:52:
d8:d1:90:de:79:17:bb:cb:09:9b:f5:7a:a8:f0:82:
06:83:13:5c:f4:0e:be:bc:42:85:c8:0f:83:cd:f2:
22:6e:7c:68:20:b1:f2:01:49:01:03:93:9a:d0:d2:
f9:c2:35:c7:a4:40:21:2a:ce:15:5c:ba:d2:07:1d:
62:03:42:f7:84:5a:4a:a9:1a:3c:bb:72:51:07:88:
ae:96:86:25:7c:bd:c8:c7:9c:76:6d:41:6e:4b:ed:
db:d5:20:82:a9:09:2b:03:b0:19:b6:88:3a:61:24:
c7:43:96:94:75:df:6e:de:88:5d:fc:1c:f4:27:93:
b8:91:67:be:65:b5:14:97:61:fa:ac:8f:70:83:6c:
29:0c:39:b0:64:9f:71:03:5d:3c:3b:a5:a7:58:a1:
61:b0:9d:c7:ea:3a:07:ee:b7:be:8d:62:d4:f2:bf:
23:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2F:56:69:F9:8C:FD:50:4E:4A:9D:0E:92:74:27:C5:03:E3:37:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.84.0/22
195.245.116.0/23
IPv6:
2a0b:3f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206867
Signature Algorithm: sha256WithRSAEncryption
32:08:27:11:6b:04:60:7a:6a:fe:22:c6:e3:a9:01:d7:5e:ec:
00:7f:a5:d3:31:46:6d:65:48:fe:cd:1e:68:b4:37:f7:18:12:
67:c6:fd:d3:66:21:59:b3:ef:82:1c:03:fa:9b:6a:34:5e:a5:
e1:91:e6:3a:e4:ee:66:be:ff:63:c5:58:42:21:9f:f8:c4:a7:
98:13:12:dd:9f:80:d7:2e:c9:65:d2:7b:88:01:22:fd:c9:69:
d4:d5:6b:9c:55:82:14:47:b7:d9:a7:7d:3c:d9:1f:65:52:b6:
4a:4c:37:7c:ca:15:8e:b2:86:1c:5b:d3:36:61:bc:46:99:e1:
e6:0a:90:76:24:bf:06:30:e7:49:ce:7c:21:6a:77:6c:5c:a4:
93:07:45:dc:17:be:83:f8:0d:c4:51:b1:df:7b:45:b6:07:fc:
9b:59:43:fa:7d:83:14:54:2c:04:fd:fb:a8:89:9a:db:20:b7:
1f:c9:4b:49:22:92:d7:9f:87:f1:b9:98:a7:d9:3a:61:7e:e3:
db:93:ee:23:ae:db:cd:4b:70:76:05:97:50:c3:c2:5c:9c:d6:
88:df:c8:18:be:97:a6:92:91:fe:5a:0a:d7:a4:1b:82:2a:25:
08:a3:c3:83:21:37:2d:97:f1:b0:88:7b:41:7e:a2:78:4c:c0:
d3:06:db:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:03:12 2026 by rpki-client