Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fYud7bGKYodS65sTq1OnsFxrvPs.cer
File: fYud7bGKYodS65sTq1OnsFxrvPs.cer (raw, json)
Hash identifier: KT0yY7b/v9cSR/A2pjpxbghusDAJwSlB8tjTJkk84AY=
Subject key identifier: 7D:8B:9D:ED:B1:8A:62:87:52:EB:9B:13:AB:53:A7:B0:5C:6B:BC:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F1E8D3A86326A0CA33961772EF5EC8662
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jul 2026 16:39:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.166.3.0/24
IP: 2a14:ef80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:8d:3a:86:32:6a:0c:a3:39:61:77:2e:f5:ec:86:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 1 16:39:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d8b9dedb18a628752eb9b13ab53a7b05c6bbcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:c1:f3:98:15:9f:7c:13:ee:b2:e1:13:dc:
fb:af:ca:91:c8:29:47:78:68:c4:7b:e4:c2:8f:d9:
52:6b:b6:bd:c0:fa:a8:ae:59:fe:aa:03:89:bd:b2:
88:fb:bc:9b:b7:a3:a9:80:b6:1e:87:85:ad:df:32:
a1:5b:24:f4:1f:27:12:2b:c1:e0:de:2f:a1:ce:82:
3a:1e:96:3d:83:73:60:7f:32:16:91:8c:09:4f:db:
ed:b3:77:4c:43:64:71:54:ac:99:a3:33:4f:f8:dd:
5d:93:1a:0c:ff:e9:03:4d:a4:6d:02:b7:b5:45:c1:
4b:50:0c:dd:9c:fa:9f:cd:76:5d:87:d4:82:c7:fd:
a2:98:f7:d5:76:b7:23:f2:3f:57:72:65:48:06:31:
c2:af:7d:5b:9e:22:81:09:c8:6d:5a:6c:2e:88:e4:
da:44:3f:b9:b8:78:2f:f5:3a:e7:a7:fd:80:d9:39:
67:03:b3:9b:d5:3e:6a:0e:ae:b0:55:d5:cf:03:1b:
e9:02:c5:05:5f:d0:bf:8b:22:6e:6b:20:46:68:24:
96:3a:e7:9f:9f:d8:28:9d:b5:8d:74:b9:95:37:e0:
37:64:0f:cd:02:dc:88:1e:11:cb:7c:fd:2d:e8:b7:
91:ad:42:9d:a7:1e:6f:55:34:7f:c2:d2:10:9a:25:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8B:9D:ED:B1:8A:62:87:52:EB:9B:13:AB:53:A7:B0:5C:6B:BC:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.3.0/24
IPv6:
2a14:ef80::/29
Signature Algorithm: sha256WithRSAEncryption
5a:c6:0b:99:24:c3:1e:bb:88:ca:1c:b3:74:48:7c:3b:9e:42:
69:be:3e:27:17:ca:79:31:ab:95:be:7f:50:ad:0a:c8:03:3e:
4a:c4:8f:07:b9:a1:76:49:a9:26:43:c5:2b:cf:9c:e4:d0:d2:
10:16:18:92:e4:04:cc:78:fd:06:a7:7d:6d:2e:4c:92:cf:1a:
54:2b:d5:42:6a:97:04:82:98:93:72:a3:dd:de:7f:72:81:5c:
65:ff:3b:63:ba:ed:a6:9c:41:a1:65:a4:46:6a:42:1f:03:12:
a9:29:28:67:99:e6:1f:e8:06:9e:2f:d6:0a:00:73:9c:27:34:
c1:7d:b4:7e:2e:2e:e1:f1:91:50:d1:81:b2:4d:09:33:8c:c4:
0b:ab:e2:95:17:07:73:dc:29:35:0d:d2:75:c9:23:db:bb:88:
75:c6:a6:9c:41:e3:51:6c:08:9d:e9:b5:b2:d8:40:1e:1b:e7:
d7:c9:9c:fe:08:29:8e:4a:ae:9a:36:ee:5b:34:7e:22:8d:e8:
c2:15:27:c9:db:29:ae:5c:35:6a:37:8a:ed:a1:93:73:a4:89:
ec:db:20:22:7d:79:30:a8:6f:68:36:25:cb:42:86:c8:84:5f:
0a:1b:16:1a:c8:68:de:d6:23:81:70:41:5d:9c:d9:f7:40:75:
63:8a:44:68
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZ8ejTqGMmoMozlhdy717IZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNzAxMTYzOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDhiOWRlZGIxOGE2Mjg3NTJlYjliMTNhYjUzYTdiMDVjNmJiY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsovB85gVn3wT7rLhE9z7r8qRyClH
eGjEe+TCj9lSa7a9wPqorln+qgOJvbKI+7ybt6OpgLYeh4Wt3zKhWyT0HycSK8Hg
3i+hzoI6HpY9g3NgfzIWkYwJT9vts3dMQ2RxVKyZozNP+N1dkxoM/+kDTaRtAre1
RcFLUAzdnPqfzXZdh9SCx/2imPfVdrcj8j9XcmVIBjHCr31bniKBCchtWmwuiOTa
RD+5uHgv9Trnp/2A2TlnA7Ob1T5qDq6wVdXPAxvpAsUFX9C/iyJuayBGaCSWOuef
n9gonbWNdLmVN+A3ZA/NAtyIHhHLfP0t6LeRrUKdpx5vVTR/wtIQmiWLRQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFH2Lne2ximKHUuubE6tTp7Bca7z7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlL2E0MTgx
My00MGFkLTQ5NTYtYWYwZi1hMzY0OGU2ZDIzNGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvYTQxODEz
LTQwYWQtNDk1Ni1hZjBmLWEzNjQ4ZTZkMjM0Yi8xL2ZZdWQ3YkdLWW9kUzY1c1Rx
MU9uc0Z4cnZQcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuaYDMA0EAgACMAcDBQMqFO+AMA0GCSqGSIb3
DQEBCwUAA4IBAQBaxguZJMMeu4jKHLN0SHw7nkJpvj4nF8p5MauVvn9QrQrIAz5K
xI8HuaF2SakmQ8Urz5zk0NIQFhiS5ATMeP0Gp31tLkySzxpUK9VCapcEgpiTcqPd
3n9ygVxl/ztjuu2mnEGhZaRGakIfAxKpKShnmeYf6AaeL9YKAHOcJzTBfbR+Li7h
8ZFQ0YGyTQkzjMQLq+KVFwdz3Ck1DdJ1ySPbu4h1xqacQeNRbAid6bWy2EAeG+fX
yZz+CCmOSq6aNu5bNH4ijejCFSfJ2ymuXDVqN4rtoZNzpIns2yAifXkwqG9oNiXL
QobIhF8KGxYayGje1iOBcEFdnNn3QHVjikRo
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:35:07 2026 by rpki-client