Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/_yNu-MNnK1qw0si3J_fkUU6EV0s.cer
File: _yNu-MNnK1qw0si3J_fkUU6EV0s.cer (raw, json)
Hash identifier: Qr1v+mxXmknOWCuavYfSuXf9LcESqJjAi1DASGTNmeM=
Subject key identifier: FF:23:6E:F8:C3:67:2B:5A:B0:D2:C8:B7:27:F7:E4:51:4E:84:57:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A18CDD369BFCB821C6B61166214618CDDC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 30 Oct 2026 12:51:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48529
IP: 212.47.42.0/24
IP: 2a12:9140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:dd:36:9b:fc:b8:21:c6:b6:11:66:21:46:18:cd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 30 12:51:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff236ef8c3672b5ab0d2c8b727f7e4514e84574b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:df:fa:b1:da:42:27:a0:ec:04:20:b2:e3:
77:df:30:35:ef:2f:49:9d:3d:f1:1c:c7:f7:01:e4:
cf:84:09:56:72:8d:3f:b5:5b:40:84:a5:64:68:b8:
48:88:a6:ce:c0:43:12:17:c3:a0:40:41:0d:75:75:
b2:f2:4f:01:cb:ad:c8:33:32:d8:eb:19:23:0b:39:
86:5b:eb:35:6c:2f:f7:66:ae:85:22:ac:e6:28:8d:
27:e8:6b:6b:ea:1d:ef:c6:12:b3:fd:ed:35:95:d8:
fc:9b:de:31:5c:19:b5:f8:9b:71:28:64:d4:db:d7:
c9:77:c8:6c:cb:9d:55:d4:b5:28:e3:c5:0e:33:c3:
fa:23:c7:a2:7d:e0:dd:1b:26:1d:62:97:6f:18:bc:
19:1d:50:b4:8b:4b:6f:22:a7:78:c2:5a:dc:3b:20:
75:86:f7:db:39:af:9a:f0:e0:df:c5:a1:eb:f8:52:
23:1c:a8:f7:e3:e9:6d:f2:70:c0:da:6a:59:38:e5:
61:93:5f:30:37:49:f4:89:51:e6:77:d1:9b:91:b5:
74:22:4c:d6:bd:5e:f9:0a:4f:8b:f2:fe:b6:f4:2f:
df:17:5d:c7:3b:61:27:5d:aa:e0:3d:e1:bf:c8:a6:
17:3c:d6:56:a1:a2:ef:43:4b:c9:bd:61:4f:8b:ae:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:23:6E:F8:C3:67:2B:5A:B0:D2:C8:B7:27:F7:E4:51:4E:84:57:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.47.42.0/24
IPv6:
2a12:9140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48529
Signature Algorithm: sha256WithRSAEncryption
71:38:52:48:6d:73:62:d0:bc:b6:e5:a0:28:3b:77:94:f3:88:
fc:67:be:f8:b2:25:17:55:8a:a8:e2:08:e1:0c:ce:6d:e5:3c:
c4:3b:be:50:94:c2:bb:37:05:8f:59:8b:36:13:b6:0e:94:0f:
6e:93:80:f6:33:d8:46:b1:95:5c:8b:b7:0b:9d:45:aa:5f:28:
6e:4d:1a:cb:b3:cb:bd:fe:ff:e6:5b:be:0c:7f:e1:70:80:ea:
3b:fc:30:52:a7:76:70:85:e3:94:91:27:97:e3:9e:54:4e:6c:
5a:7a:a9:9a:06:90:fc:62:78:92:a3:6b:91:83:9e:1f:d6:ad:
0d:e4:c4:e8:66:ea:f4:2d:13:84:45:29:af:63:80:1f:05:c3:
b4:55:e1:68:cc:7b:ae:3d:8a:ee:01:3f:c8:04:dc:cd:05:13:
2d:3f:50:2a:f7:ee:63:91:72:87:c5:57:f8:5b:70:dc:24:30:
20:1e:0d:9e:6b:04:13:88:aa:f4:66:ac:42:a7:07:54:fb:fb:
d3:ed:df:4b:6d:fc:73:40:af:69:9b:7e:cf:90:b0:8c:9f:c3:
2d:f7:ee:14:0c:df:7c:d6:d6:6a:ee:d2:1a:25:d1:f3:f8:56:
9e:66:87:55:d3:f5:20:6a:81:82:0c:76:b5:ba:5b:51:4e:2f:
b1:91:9d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:28:17 2026 by rpki-client