Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
File: YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer (raw, json)
Hash identifier: 5Dxh88bHjomU9hUkYE9bPUg5tSpGSdLv2OQSl1Xk1Jg=
Subject key identifier: 60:2C:CC:74:B4:FD:14:DA:17:BD:6B:69:BA:9E:19:C2:48:97:F3:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA72C3B0EB5D65F280AB1DAE9B583E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.85.244.0/22
IP: 2a05:b280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:72:c3:b0:eb:5d:65:f2:80:ab:1d:ae:9b:58:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=602ccc74b4fd14da17bd6b69ba9e19c24897f33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:a9:f4:89:35:e4:6f:e0:b3:ab:44:c5:a6:
e2:d7:36:09:ca:82:6d:c3:3d:88:5e:48:45:44:6f:
6c:12:32:6b:31:33:0c:51:5d:da:9f:35:74:d4:0f:
94:9d:d1:bb:3c:e1:e6:a7:51:48:b9:0d:44:0d:eb:
41:6e:bb:1e:c1:0e:e9:df:47:b4:c5:ca:5a:22:42:
4a:3f:e4:59:83:71:d6:20:07:f3:87:90:d0:b6:07:
7d:0c:48:28:f8:bc:83:63:91:92:38:8b:af:a8:c7:
63:2b:2c:c8:7d:23:97:07:37:5e:34:8c:d4:89:14:
86:cc:d9:1a:67:97:d7:5d:c7:77:7b:c2:52:fb:e2:
47:19:93:37:3e:e6:9a:5a:6a:ed:32:5e:2a:53:da:
31:cc:d7:86:5a:c3:4c:06:61:32:62:6f:f7:69:22:
e1:b1:68:95:83:28:78:20:53:4a:b0:ca:2e:df:07:
d0:8c:56:af:fb:18:77:5c:10:e9:e6:ae:00:ba:2b:
a7:4d:9f:c3:25:13:ee:fc:2d:32:07:a2:01:08:b2:
7e:58:0a:8d:a6:9a:59:36:42:5e:79:dc:97:a0:44:
51:da:63:3b:74:89:f3:fd:0f:c8:97:67:d1:af:09:
1e:40:c1:04:87:d0:0d:a9:f3:d0:be:24:28:52:b0:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:CC:74:B4:FD:14:DA:17:BD:6B:69:BA:9E:19:C2:48:97:F3:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.244.0/22
IPv6:
2a05:b280::/29
Signature Algorithm: sha256WithRSAEncryption
51:d6:1b:49:63:69:9c:3b:63:9f:2a:c3:f1:d3:91:e5:2a:23:
39:b4:f9:24:7c:e0:1b:8d:b4:51:09:12:05:e0:56:bf:d8:0d:
f4:3b:84:0f:da:82:92:60:c4:9f:15:55:fb:9d:e9:76:24:67:
3e:49:a1:09:84:b2:d9:0b:45:c8:c2:af:39:28:b6:38:69:90:
f0:a3:6a:54:a7:86:61:7f:be:9b:31:de:da:cf:90:5b:20:3b:
6a:9d:51:2c:cf:62:92:10:b4:28:a6:de:70:d0:d7:25:2e:f5:
ef:38:e0:a9:36:93:e4:61:33:f3:dd:e8:6e:1e:ec:84:99:94:
a2:2f:89:4e:a6:1f:39:5d:cf:f3:8f:e5:bd:c1:1d:4d:46:66:
f7:d7:51:d3:ed:08:3f:2b:76:d0:2a:52:ee:56:14:ff:ff:25:
a5:95:75:3b:83:8f:17:d1:40:4b:68:b8:43:0a:d6:5f:53:1e:
18:1b:3b:24:7c:74:7f:3a:4c:80:11:5f:f7:aa:cc:8b:38:c7:
ac:f9:c9:71:00:af:3e:73:97:ef:5d:9a:3d:bd:62:b2:73:93:
7a:b5:2f:9d:4f:66:1b:73:91:6d:c8:3a:a2:18:9e:3a:57:e4:
94:91:ea:aa:0a:fe:7d:72:4c:00:3b:d4:98:13:67:f8:85:06:
18:85:77:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:08 2026 by rpki-client