Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YxFTku9nj6VQgFY4E_pbH4c58cY.cer
File: YxFTku9nj6VQgFY4E_pbH4c58cY.cer (raw, json)
Hash identifier: yZEBe5NhItFybr//reyYhm8cllhEahnpwxwqyNsA73M=
Subject key identifier: 63:11:53:92:EF:67:8F:A5:50:80:56:38:13:FA:5B:1F:87:39:F1:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAB5A48FBD73D2682232106B1E1623
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 78.108.123.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:b5:a4:8f:bd:73:d2:68:22:32:10:6b:1e:16:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63115392ef678fa55080563813fa5b1f8739f1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:65:c7:10:bc:ad:e5:22:3c:6e:2f:56:81:
89:f1:0b:a8:06:90:b6:c9:87:f7:d7:62:0c:60:ff:
f8:44:af:0b:70:6d:aa:7d:55:24:af:72:91:ca:55:
bc:7f:36:ad:44:7a:fa:e4:78:e4:3a:15:27:cc:45:
b5:50:c5:79:53:92:31:03:65:88:2c:06:b9:37:48:
65:f8:92:e1:c5:61:fe:f6:a4:e2:6e:53:3e:17:e8:
15:16:ee:b8:e5:61:c0:57:55:8d:86:41:5e:44:20:
7f:1a:ab:70:a4:06:84:63:09:ad:53:49:54:2b:1b:
99:f3:fe:0f:0a:c6:28:ac:29:36:08:44:f7:b4:68:
37:48:d5:11:d1:f4:ce:c8:ef:d9:41:5e:3d:43:e2:
96:51:c1:56:d8:4a:ad:4a:ab:e8:f2:dd:28:16:86:
82:cc:0e:86:d5:86:60:b7:12:7b:f3:52:ac:00:81:
3b:43:fb:c4:c9:88:d4:36:a1:33:cd:f4:9f:8f:6a:
88:1e:8f:9b:28:3e:f3:83:a7:bf:75:1e:de:67:9e:
1f:a6:e2:7b:13:50:e0:7a:63:39:6c:bc:e2:db:9b:
4e:c3:21:c3:e0:8a:e3:7b:bc:87:37:87:0d:59:c7:
88:1a:f5:1f:9a:df:d3:b0:94:ab:a2:9d:f4:d0:00:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:11:53:92:EF:67:8F:A5:50:80:56:38:13:FA:5B:1F:87:39:F1:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/56ae1d-eeda-4cf2-b093-24c53b43a7d3/1/YxFTku9nj6VQgFY4E_pbH4c58cY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.123.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2a:70:ce:07:6e:ef:1e:44:12:4d:ef:72:d3:38:ed:c1:18:
c0:12:68:63:43:1f:18:ee:da:b8:7c:d1:08:83:a6:f9:90:9d:
f7:bd:a5:96:4e:27:93:58:cd:1b:ce:23:6a:ca:11:f5:a6:e0:
99:84:73:14:da:4d:9d:4c:5c:bd:2e:5a:91:45:41:c3:de:6b:
6b:b7:7c:d4:ed:d3:9b:9d:19:4a:be:40:74:f7:0e:77:2d:00:
8d:b9:29:eb:59:bc:54:ab:04:7a:65:54:c7:a2:e6:32:fe:ba:
b2:0f:12:cf:fa:c6:89:de:99:4f:dc:b0:91:e5:dc:9e:f4:86:
29:81:1f:2d:6d:7b:b6:00:8b:ed:6f:32:71:cf:c1:00:c5:89:
67:cf:d3:79:0b:cf:72:1a:6c:17:a4:53:f4:ba:f6:bb:72:9e:
ed:b6:c1:64:87:69:92:9f:4a:aa:04:84:39:f7:ca:78:04:d5:
46:94:e2:3a:8b:0b:7e:b7:e9:6c:96:03:57:69:dd:88:8c:41:
7f:3c:67:f6:77:6b:fc:40:47:f0:2e:3e:cd:a3:d3:28:ef:d6:
34:c9:10:b2:2e:92:bf:6b:35:a6:11:c1:70:3e:81:48:e9:03:
78:4d:af:b5:be:58:d6:91:17:fb:74:ed:94:75:54:e5:5b:97:
91:d2:f5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:27 2026 by rpki-client