Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y4HNpg5_XtX_8DjLSQkTr_4jMeo.cer
File: y4HNpg5_XtX_8DjLSQkTr_4jMeo.cer (raw, json)
Hash identifier: TKSYfmVDZfUHFGFGXXrQYYOC0l0rn2aSMBKRIoQKx38=
Subject key identifier: CB:81:CD:A6:0E:7F:5E:D5:FF:F0:38:CB:49:09:13:AF:FE:23:31:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EE069D1B5CCCC723D2A98AB1B0016EA7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 19 Jun 2026 15:04:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219406
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e0:69:d1:b5:cc:cc:72:3d:2a:98:ab:1b:00:16:ea:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 19 15:04:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb81cda60e7f5ed5fff038cb490913affe2331ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:7d:cc:a8:6f:82:74:bf:77:36:b0:64:70:
c2:26:64:30:2d:b3:6a:7a:83:49:98:f8:fe:5f:f7:
76:ab:5f:89:b0:1b:93:02:81:5f:45:72:f1:60:12:
86:96:e5:f0:a8:fe:64:a8:a1:0e:eb:30:96:af:d4:
fe:85:86:20:52:fe:92:37:dc:1b:35:e7:a3:48:4f:
ca:ae:53:4d:78:54:12:4b:74:85:df:df:1d:e2:ff:
b0:71:bb:13:e0:1a:b7:20:b9:4b:b0:59:92:48:69:
15:00:72:1b:6f:2f:ac:28:86:39:97:f4:8b:e4:c6:
ef:60:fc:26:57:bc:e3:e9:8b:5d:50:fb:f0:d2:73:
55:b6:7a:32:f2:49:ac:74:7b:b5:f7:1b:ec:8d:d6:
9e:6a:b0:4f:e9:38:c4:03:87:f4:08:f6:cc:4e:5a:
63:9f:fe:e9:84:f5:b7:b4:89:34:17:a4:16:61:c2:
fb:c0:b2:1b:c2:97:b0:ec:9c:b3:f7:c1:54:18:c8:
df:31:7f:c1:8a:cd:f3:ae:6c:4a:12:2a:f2:a7:c8:
0e:ad:6e:e9:9a:fa:79:c2:89:28:3e:bf:07:da:dd:
47:95:b9:8c:6b:8f:4c:cd:91:6e:d7:44:4d:47:8a:
38:09:ce:be:0e:b6:30:29:e3:38:9a:c2:0c:bb:a6:
f6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:81:CD:A6:0E:7F:5E:D5:FF:F0:38:CB:49:09:13:AF:FE:23:31:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6fb18c-48eb-4e3f-bbbe-b3f66b3d542c/1/y4HNpg5_XtX_8DjLSQkTr_4jMeo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219406
Signature Algorithm: sha256WithRSAEncryption
80:a5:42:d5:a1:3f:36:c0:50:bc:bc:f9:ff:23:a8:d6:84:b5:
9c:39:4f:84:e9:0b:54:ad:f6:65:32:1a:03:bb:08:bf:83:f6:
77:a9:ac:ef:48:72:74:4a:8b:b0:23:3f:be:37:d1:fa:3b:97:
c5:cb:35:d5:85:09:d6:f9:f9:94:8b:ee:8e:0c:0a:0b:d0:63:
85:5f:f6:ad:d5:0c:59:61:61:ec:3d:43:3e:f5:f5:bf:1d:ba:
fc:1b:6f:0f:e5:5e:fc:d3:cb:0c:ae:2d:19:8f:1b:90:6a:ca:
c4:d7:a6:11:29:fc:94:c8:e4:ff:98:db:70:1b:ed:78:2b:b0:
78:7c:a7:f7:d1:1c:96:3a:fa:d5:e5:7c:1b:45:8d:5e:8e:c3:
fb:92:e2:af:74:fa:9e:18:a3:92:73:e5:0d:81:d2:f9:6c:c7:
42:ff:54:4a:c9:66:00:c1:07:f3:16:95:00:35:26:ce:b9:91:
23:dc:a5:c3:94:05:33:14:f8:cc:8c:eb:85:10:f8:a7:47:91:
07:a5:28:f2:77:1b:e2:49:c8:3d:85:16:85:c5:2e:99:d6:82:
c9:b6:3e:f5:24:ff:26:a7:1b:94:5e:a4:eb:d3:02:c7:d3:13:
bf:1a:69:70:37:6a:df:26:53:42:1c:a3:d8:ab:71:0f:cf:4a:
97:8d:2d:9c
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZ7gadG1zMxyPSqYqxsAFup9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjE5MTUwNDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjgxY2RhNjBlN2Y1ZWQ1ZmZmMDM4Y2I0OTA5MTNhZmZlMjMzMWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhp9zKhvgnS/dzawZHDCJmQwLbNq
eoNJmPj+X/d2q1+JsBuTAoFfRXLxYBKGluXwqP5kqKEO6zCWr9T+hYYgUv6SN9wb
NeejSE/KrlNNeFQSS3SF398d4v+wcbsT4Bq3ILlLsFmSSGkVAHIbby+sKIY5l/SL
5MbvYPwmV7zj6YtdUPvw0nNVtnoy8kmsdHu19xvsjdaearBP6TjEA4f0CPbMTlpj
n/7phPW3tIk0F6QWYcL7wLIbwpew7Jyz98FUGMjfMX/Bis3zrmxKEiryp8gOrW7p
mvp5wokoPr8H2t1HlbmMa49MzZFu10RNR4o4Cc6+DrYwKeM4msIMu6b2+QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFMuBzaYOf17V//A4y0kJE6/+IzHqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzZmYjE4
Yy00OGViLTRlM2YtYmJiZS1iM2Y2NmIzZDU0MmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvNmZiMThj
LTQ4ZWItNGUzZi1iYmJlLWIzZjY2YjNkNTQyYy8xL3k0SE5wZzVfWHRYXzhEakxT
UWtUcl80ak1lby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNZDjANBgkqhkiG9w0BAQsFAAOCAQEAgKVC1aE/NsBQ
vLz5/yOo1oS1nDlPhOkLVK32ZTIaA7sIv4P2d6ms70hydEqLsCM/vjfR+juXxcs1
1YUJ1vn5lIvujgwKC9BjhV/2rdUMWWFh7D1DPvX1vx26/BtvD+Ve/NPLDK4tGY8b
kGrKxNemESn8lMjk/5jbcBvteCuweHyn99Ecljr61eV8G0WNXo7D+5Lir3T6nhij
knPlDYHS+WzHQv9USslmAMEH8xaVADUmzrmRI9ylw5QFMxT4zIzrhRD4p0eRB6Uo
8ncb4knIPYUWhcUumdaCybY+9ST/JqcblF6k69MCx9MTvxppcDdq3yZTQhyj2Ktx
D89Kl40tnA==
-----END CERTIFICATE-----
Generated at Sat Jul 25 01:35:19 2026 by rpki-client