Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.cer
File: Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.cer (raw, json)
Hash identifier: vFLIcfW19IFAfuj4qDHZPXFeTy2B7aBhuulR3aDc/mg=
Subject key identifier: 63:C3:5C:89:ED:4A:E9:A3:D6:41:B1:1C:BE:6A:D0:FC:BE:93:26:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77595E7698138F2645FFF1C735A5D9FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:18:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199061
IP: 176.122.212.0/22
IP: 176.122.224.0/20
IP: 2001:67c:618::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:5e:76:98:13:8f:26:45:ff:f1:c7:35:a5:d9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63c35c89ed4ae9a3d641b11cbe6ad0fcbe932655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:0f:3a:87:42:e2:fe:c6:cd:02:6c:ae:10:
00:0d:3a:35:5e:06:4a:12:dd:fd:b2:e2:fe:2b:98:
ad:12:83:8e:68:72:64:73:f7:92:8f:5a:9d:5a:ad:
92:df:b0:13:ac:87:31:ae:5a:d6:e0:32:7e:ce:b7:
bb:b4:a5:f5:3b:6c:f7:dd:f9:0d:fa:95:a5:ee:f8:
f9:86:21:0d:dc:14:d8:f9:9c:5a:e5:b2:39:8d:99:
fd:84:d7:7e:56:22:4d:8b:e2:9e:34:7b:e8:0e:98:
24:66:36:77:49:3f:c7:29:6f:5d:41:34:7e:c6:d7:
c0:42:73:1d:f5:00:13:f9:24:87:e0:aa:81:62:e7:
47:49:99:b2:5b:cd:0f:3f:19:74:a0:97:e2:0f:78:
5f:77:c5:4a:45:ad:cc:e6:b9:69:56:8a:6b:2c:23:
00:b0:a4:7a:f3:d6:e8:8a:22:95:8e:2c:41:d0:8e:
92:f8:9c:c9:d9:dd:3c:83:50:47:ed:dd:1e:4c:aa:
ab:e2:8a:b0:89:0c:d1:0f:2a:18:46:a7:78:80:a0:
8f:f3:70:6e:58:b9:79:e9:69:29:de:a6:7e:cb:68:
32:9f:fc:4a:3d:53:b2:ff:6b:0d:78:d0:f9:6b:9f:
ef:bd:73:6d:5b:8e:e2:ac:e1:19:11:26:61:ea:8d:
40:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C3:5C:89:ED:4A:E9:A3:D6:41:B1:1C:BE:6A:D0:FC:BE:93:26:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.122.212.0/22
176.122.224.0/20
IPv6:
2001:67c:618::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199061
Signature Algorithm: sha256WithRSAEncryption
a5:f2:98:1b:4f:38:f3:6b:a3:4e:1a:49:8c:b1:42:e7:d9:34:
8e:ae:ff:a7:c8:4c:8f:5a:c8:b3:68:55:fa:28:36:ba:a4:a8:
60:75:bb:c1:5f:d9:c2:9e:e7:2b:c3:b8:04:96:b7:d7:34:22:
64:5b:a8:d8:01:61:2f:ed:ec:59:35:bd:22:b0:d9:77:67:28:
b8:54:75:9f:3f:76:74:5d:bc:60:2a:f3:64:ad:a5:d9:56:6c:
59:20:cc:83:ea:9f:af:9c:3d:90:f1:4f:84:a0:22:d9:6d:d9:
ff:92:3b:7a:48:5a:e9:41:9d:c2:62:95:c4:ee:7a:b2:f7:f6:
db:3c:f7:3b:4f:d2:94:31:77:dc:a2:d1:db:a8:1d:66:e5:34:
12:4c:bb:0e:4c:15:18:74:d8:37:c7:6a:bd:ca:d0:93:d0:a7:
59:8c:6c:ee:ec:09:09:fe:f9:fb:ea:5c:24:21:2e:a4:2c:c7:
ce:6e:70:66:92:92:04:52:7a:3c:f2:bb:e4:c2:6b:1e:e0:96:
e3:60:45:f7:c3:32:02:1d:5e:a3:65:34:38:05:ae:9a:01:5b:
00:83:c9:d7:58:5f:30:04:45:18:65:28:b3:f1:da:6f:66:00:
c3:10:26:f3:f4:ad:d7:88:86:ed:b6:79:f3:72:98:36:ac:69:
57:77:f0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:31 2026 by rpki-client