Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer
File: YE6Z8sS9AZ63cxUmRSbdauHWK00.cer (raw, json)
Hash identifier: nzZCJMssiodLvOOnyl/1mmp4rd1cdgAIxNHZkG7N87M=
Subject key identifier: 60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F834DF2DC1DC4243562A7B4440908BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:21:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35198
IP: 193.238.200.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:4d:f2:dc:1d:c4:24:35:62:a7:b4:44:09:08:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:21:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=604e99f2c4bd019eb77315264526dd6ae1d62b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:60:97:06:40:db:28:f4:6c:cc:e7:29:1a:
ca:85:b7:28:92:f7:7b:17:62:43:c6:c2:a0:37:d0:
82:8a:c3:94:72:af:c5:38:00:cf:6c:75:23:a0:4a:
bb:d6:45:ee:58:86:15:38:ef:b3:e5:f3:65:02:a1:
b8:df:5d:95:3a:53:80:9f:91:cb:91:8e:75:4c:d6:
0b:f9:89:b1:6b:9c:e8:d0:ae:88:ba:ea:b4:c4:c2:
b0:17:3d:03:f2:47:bf:62:91:bd:25:79:77:fc:cc:
b9:ec:d8:0c:b4:05:79:ac:f3:3b:58:0c:c3:1d:09:
89:90:12:60:b7:f9:ff:2d:06:0d:81:91:49:8e:c1:
09:83:19:cd:29:b9:dd:6b:4e:a6:42:55:bf:9e:5f:
e6:6b:1c:b3:f9:33:3f:d1:fa:17:b7:d9:4c:4f:49:
d9:2d:32:59:06:79:cc:fb:78:bd:64:65:be:23:06:
9f:d9:3c:2c:2d:c5:18:0c:c2:76:3f:13:96:e5:ac:
a3:ad:2a:3d:21:13:61:27:e6:da:74:83:a6:6a:92:
4f:f3:e1:81:e9:66:88:d1:8d:b4:ca:7a:e6:0d:a1:
96:fb:70:22:9f:22:3f:45:a8:ee:5e:e6:3d:c1:97:
4e:22:f7:f1:97:43:c4:28:c5:14:f6:f2:0f:72:97:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.200.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35198
Signature Algorithm: sha256WithRSAEncryption
9b:3b:28:ca:25:84:57:20:b4:b6:bd:21:ab:ac:1e:38:92:c8:
83:1c:54:58:b0:30:71:29:7a:90:41:84:2b:e4:ef:57:b8:ad:
27:b8:41:3f:48:20:80:68:67:5b:3d:34:54:c1:b3:26:f5:17:
3a:35:b0:69:66:b5:6c:7f:ad:e4:e9:07:cc:89:55:d8:be:e4:
db:cc:af:cf:cd:5c:f5:5b:e1:b4:11:26:44:b2:2c:83:02:ff:
d5:42:28:e5:b4:31:af:96:aa:f6:4d:ad:d6:c6:06:1c:33:97:
7e:f7:7a:ba:6c:98:1d:3b:83:c2:e6:a3:1b:7e:22:58:20:81:
f8:00:0d:22:d8:a3:90:7e:c9:6a:af:cb:95:c4:07:27:8e:bc:
89:a9:5e:98:fb:92:7a:ef:b0:ba:39:65:83:3d:d0:d3:da:d6:
78:27:71:a2:2c:ad:4e:f1:3d:3c:f0:f7:87:8e:6d:27:c5:f6:
05:e1:a6:b7:97:81:71:09:e7:bc:21:b0:00:32:2f:d4:c3:e3:
b6:38:47:f1:04:92:9b:05:90:72:28:61:61:a0:e9:61:7a:cd:
74:78:ae:1a:33:b5:47:93:3e:ac:1a:c1:a0:b0:e2:bd:0a:55:
54:77:91:c7:ae:22:6b:12:b0:01:ff:ea:83:b8:50:a2:d9:45:
4c:1c:3f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:51:21 2026 by rpki-client