Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
File: Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer (raw, json)
Hash identifier: +T6W3Vorflponn6Qr3Riehw6mxhnqnPNr0e1YV0XvqY=
Subject key identifier: 63:EC:63:94:13:4A:17:D6:49:7C:A3:AB:AC:D3:75:C4:01:42:F3:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F38CDBA2A7C8E23D592ACE160183D78F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 06 Jul 2026 19:00:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.79.254.0/24
IP: 2a14:740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:cd:ba:2a:7c:8e:23:d5:92:ac:e1:60:18:3d:78:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 6 19:00:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63ec6394134a17d6497ca3abacd375c40142f3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ee:ed:d2:64:84:cf:3e:88:80:f3:6c:b2:97:
3c:5a:64:fd:6f:30:02:de:7d:67:78:74:58:30:81:
3a:7b:90:05:67:fb:62:71:ac:de:b7:4d:21:07:02:
6c:a1:72:cf:93:1f:56:a0:e1:93:5a:0c:31:06:1a:
94:6a:c8:b6:10:5b:6a:06:ea:fa:fe:8d:c0:9c:d5:
60:49:db:35:97:70:6b:c2:ed:b2:68:2d:67:9d:ec:
88:72:23:30:c1:8f:54:d5:40:48:2b:b6:91:04:e3:
0d:d6:2e:33:c5:52:fa:17:08:b1:30:84:86:02:c9:
b7:45:6e:4d:9d:11:5f:0c:f7:44:3c:40:e9:0a:e3:
88:bc:35:df:02:b0:0e:43:61:f6:1a:63:33:89:19:
d7:d8:13:34:73:11:4c:08:c4:e1:f6:73:8e:73:fa:
a4:4f:83:de:ab:13:6d:80:bc:4e:7d:2e:e4:13:22:
7f:89:85:4f:2c:a7:66:7d:3a:a6:2d:35:f1:7d:c7:
07:37:91:a2:56:dc:14:0c:6c:19:2f:60:d7:d7:e9:
b9:dd:3c:59:72:fc:dd:d1:30:9e:f5:5f:a5:a2:77:
d3:01:1e:ba:e4:2b:55:9d:c4:78:19:4e:8e:63:51:
c0:e0:02:bd:16:1e:16:9d:b7:eb:0c:6e:f9:d8:59:
3f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EC:63:94:13:4A:17:D6:49:7C:A3:AB:AC:D3:75:C4:01:42:F3:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.254.0/24
IPv6:
2a14:740::/29
Signature Algorithm: sha256WithRSAEncryption
51:12:48:4f:a2:75:50:bc:10:fe:ca:6b:39:6f:d8:01:c0:62:
33:a3:20:6c:66:1f:95:6a:2c:03:49:89:28:33:c5:3b:d0:70:
5d:3d:8b:d7:74:0b:b4:38:8c:c8:78:c1:fd:25:58:46:cf:b4:
e8:cc:54:7f:6c:b2:d5:ed:78:b6:42:22:7d:16:11:ee:60:0f:
82:02:97:13:be:94:4a:9e:5e:92:ea:0a:b6:d7:ff:a2:e2:e8:
07:30:f0:36:ef:6d:e6:aa:cd:2d:90:5a:48:0d:8c:82:4a:e1:
8e:cc:17:c8:a8:5f:bd:c4:d2:15:2b:75:a4:c3:3a:15:8d:19:
e3:6e:a4:7a:9c:0f:4c:13:85:e8:81:76:a5:f1:2d:4b:2f:37:
fd:a7:0a:10:06:dc:db:ea:2d:cd:ec:6c:da:9b:15:56:2b:08:
80:6b:58:12:77:86:eb:82:b7:c2:1c:8c:a4:48:96:63:f2:74:
f8:e8:77:eb:e4:5b:13:c2:27:30:ad:0d:fe:9e:18:a1:5d:e7:
99:85:88:84:90:f9:0a:4f:b3:3e:e6:1c:52:f2:98:af:ec:60:
c0:d0:f1:bc:58:8d:a3:89:f7:68:48:d6:c9:2f:07:fe:46:41:
b7:fb:f7:3a:9c:3d:58:8f:7a:1e:55:6c:ef:78:06:b0:80:a8:
0d:b7:fb:19
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZ84zboqfI4j1ZKs4WAYPXj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNzA2MTkwMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2VjNjM5NDEzNGExN2Q2NDk3Y2EzYWJhY2QzNzVjNDAxNDJmM2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+7t0mSEzz6IgPNsspc8WmT9bzAC
3n1neHRYMIE6e5AFZ/ticazet00hBwJsoXLPkx9WoOGTWgwxBhqUasi2EFtqBur6
/o3AnNVgSds1l3Brwu2yaC1nneyIciMwwY9U1UBIK7aRBOMN1i4zxVL6FwixMISG
Asm3RW5NnRFfDPdEPEDpCuOIvDXfArAOQ2H2GmMziRnX2BM0cxFMCMTh9nOOc/qk
T4PeqxNtgLxOfS7kEyJ/iYVPLKdmfTqmLTXxfccHN5GiVtwUDGwZL2DX1+m53TxZ
cvzd0TCe9V+lonfTAR665CtVncR4GU6OY1HA4AK9Fh4WnbfrDG752Fk/cwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGPsY5QTShfWSXyjq6zTdcQBQvPoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzBmMDUz
Mi01ZDI1LTRlMTAtYmZkMy05ZDhlZTc2MDkxNWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvMGYwNTMy
LTVkMjUtNGUxMC1iZmQzLTlkOGVlNzYwOTE1YS8xL1kteGpsQk5LRjlaSmZLT3Jy
Tk4xeEFGQzgtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwk/+MA0EAgACMAcDBQMqFAdAMA0GCSqGSIb3
DQEBCwUAA4IBAQBREkhPonVQvBD+yms5b9gBwGIzoyBsZh+VaiwDSYkoM8U70HBd
PYvXdAu0OIzIeMH9JVhGz7TozFR/bLLV7Xi2QiJ9FhHuYA+CApcTvpRKnl6S6gq2
1/+i4ugHMPA2723mqs0tkFpIDYyCSuGOzBfIqF+9xNIVK3WkwzoVjRnjbqR6nA9M
E4XogXal8S1LLzf9pwoQBtzb6i3N7GzamxVWKwiAa1gSd4brgrfCHIykSJZj8nT4
6Hfr5FsTwicwrQ3+nhihXeeZhYiEkPkKT7M+5hxS8piv7GDA0PG8WI2jifdoSNbJ
Lwf+RkG3+/c6nD1Yj3oeVWzveAawgKgNt/sZ
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:15 2026 by rpki-client