Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
File: YKlx2lflTkw-UwoPekkv3uo4mgg.cer (raw, json)
Hash identifier: /xfbhek0OMbOH+AUJuzw599kR39Ja64qIRp2ttZsPu8=
Subject key identifier: 60:A9:71:DA:57:E5:4E:4C:3E:53:0A:0F:7A:49:2F:DE:EA:38:9A:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB2A5A766502DEE68B839500BEB469
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 61336
IP: 91.247.38.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:2a:5a:76:65:02:de:e6:8b:83:95:00:be:b4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60a971da57e54e4c3e530a0f7a492fdeea389a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:a9:40:5d:50:93:01:25:04:87:33:b6:ef:
f3:2b:9b:82:6e:28:5d:d7:6d:6e:ad:4b:d9:3b:34:
40:c7:74:42:b7:a4:27:a3:d5:22:2d:17:27:fc:40:
7f:99:50:a4:1c:9d:0a:bd:28:26:25:c3:9f:58:9c:
81:7d:64:f1:45:a1:a0:6d:dd:e0:43:33:0c:f4:02:
7e:65:0a:b5:d7:ea:b8:03:db:ee:9d:1c:54:b7:bf:
20:68:cb:64:9a:71:ae:44:af:ad:a9:bc:32:9a:ff:
63:13:a9:64:6e:96:f3:d3:d9:a4:98:17:43:07:1d:
38:7c:5a:60:1d:aa:5a:fa:ed:5a:71:16:9f:02:64:
7f:b7:1b:9b:57:6e:47:12:11:3d:b1:5f:12:69:83:
ed:b0:f2:d8:d5:06:74:b1:6c:30:e7:a0:e0:c1:86:
90:c6:05:c4:af:88:e9:c7:35:6d:63:79:9c:4b:25:
3e:82:ec:bd:3f:f2:d7:f2:37:8a:1d:a5:53:28:ff:
cf:40:a4:58:dd:10:db:df:38:d7:e4:d2:dc:77:1e:
d3:11:2a:82:87:03:ac:62:ef:76:50:a8:64:97:b2:
0f:ea:83:e7:f3:cd:de:d0:19:ac:15:d6:a2:e6:d3:
a5:47:5b:8c:ec:9b:95:ea:0e:4e:51:9e:c2:62:82:
9a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A9:71:DA:57:E5:4E:4C:3E:53:0A:0F:7A:49:2F:DE:EA:38:9A:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.38.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61336
Signature Algorithm: sha256WithRSAEncryption
a3:12:f2:83:40:4a:5e:e5:a8:b6:18:4a:ac:f9:6f:27:06:30:
a1:2f:bf:91:81:bd:29:90:a9:ba:29:45:db:35:75:94:58:fa:
8a:eb:88:8e:f7:fd:8f:c1:b1:5f:74:13:a5:e9:1b:ac:11:ae:
cc:0c:94:3e:ff:17:1a:77:10:97:b4:4c:04:0c:1f:4c:30:40:
7a:f8:3e:d2:53:44:58:0f:75:91:65:f9:60:7e:65:8c:f4:f0:
0a:fb:3c:8a:fe:56:77:3f:96:26:da:e7:a8:97:8c:a0:5a:c4:
00:87:9b:c9:22:da:7a:7f:de:c2:f5:58:60:3b:9e:56:59:5a:
45:58:93:fe:d9:77:24:eb:05:87:46:f7:f4:72:17:4b:91:15:
65:50:e6:a8:b8:9e:da:91:2f:62:94:bd:21:8c:9c:af:29:9c:
6c:82:38:33:64:51:d8:13:bd:23:86:7f:0f:79:f7:4c:f2:bd:
9a:7c:d3:8f:e3:b7:fc:0d:60:15:1a:54:1a:be:c3:d7:fd:b7:
7e:73:13:30:25:f7:37:f5:e0:a5:78:6b:4a:94:fd:70:fa:a1:
df:9d:ab:53:8a:f4:ab:a6:3c:53:e2:a8:6b:d1:d1:28:26:79:
96:f0:82:86:db:f5:72:c4:8d:9f:95:d9:26:3e:2b:e9:fd:4d:
d8:47:40:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:47:58 2026 by rpki-client