Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y6GFqLFiAn6F7zGQGYh_4hk96qs.cer
File: y6GFqLFiAn6F7zGQGYh_4hk96qs.cer (raw, json)
Hash identifier: sUil33nx0GT52CIVkZGhA+UDdd+Nm6nV3fvCNzRf/DA=
Subject key identifier: CB:A1:85:A8:B1:62:02:7E:85:EF:31:90:19:88:7F:E2:19:3D:EA:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB3F223197B85617A6DE8DD168B369
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/y6GFqLFiAn6F7zGQGYh_4hk96qs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199754
IP: 2001:678:121c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:3f:22:31:97:b8:56:17:a6:de:8d:d1:68:b3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cba185a8b162027e85ef319019887fe2193deaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:36:db:91:0b:ab:b3:3e:8a:f1:b1:96:64:
84:1a:9f:3a:80:fe:c7:94:f7:a3:39:55:c6:40:42:
b3:d3:42:8f:6a:26:13:f8:70:5a:bc:77:e9:a0:40:
54:d2:eb:e5:97:87:be:f8:f8:ac:4d:5d:97:22:e8:
f0:02:42:0c:0f:03:50:bf:59:3e:fc:ef:59:eb:f6:
28:80:a4:91:e0:b7:f2:20:4f:03:d6:15:77:50:c7:
ba:c0:45:f0:22:e7:92:ad:f1:59:0a:fa:04:c8:82:
cd:5a:9f:3f:41:33:f3:aa:ea:b0:3a:c8:c1:dd:97:
a9:9b:90:4c:ad:8e:6b:1d:32:db:08:17:3e:75:e6:
2a:61:ce:83:7c:c3:54:53:47:25:22:01:39:42:52:
19:af:c4:e5:9f:84:f5:11:93:d7:af:6a:1f:3f:b4:
66:a8:7f:32:1a:1b:32:fc:90:ff:de:bf:99:1e:7d:
a9:ad:aa:67:37:aa:fd:4f:e5:69:7b:ed:bd:35:4f:
e0:5f:d8:ee:6b:49:23:10:60:8a:95:9c:bb:10:a0:
55:09:51:38:94:61:97:b9:18:30:a4:d0:25:0f:fd:
ef:92:ba:69:85:b3:e0:0e:71:82:af:e9:50:98:42:
d0:28:31:32:17:55:a9:ec:db:0c:94:d7:59:8f:96:
73:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A1:85:A8:B1:62:02:7E:85:EF:31:90:19:88:7F:E2:19:3D:EA:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/y6GFqLFiAn6F7zGQGYh_4hk96qs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:121c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199754
Signature Algorithm: sha256WithRSAEncryption
ab:6d:ea:40:ff:fc:94:ff:2b:03:92:09:c0:bb:22:8a:86:57:
c0:db:14:9a:a8:fa:4e:62:84:b8:c5:54:34:db:24:66:be:77:
0a:c1:80:9f:13:21:80:08:bf:cf:08:bd:54:77:30:22:8a:b7:
8f:ec:12:e1:f5:df:8f:f7:58:7f:bc:8e:be:2c:fe:d6:6a:d9:
a7:ba:6c:2e:bd:43:c6:94:35:75:62:1a:c3:3a:2d:d0:31:c6:
a7:b4:89:db:eb:1c:b8:50:ff:51:4e:70:86:57:94:c8:6b:96:
6f:b1:3f:35:d9:3a:a7:ed:a4:b1:ab:dc:78:43:7e:ae:e2:20:
5c:ad:e9:5b:ed:11:0e:50:75:6c:d3:ad:54:9d:af:75:bb:4c:
09:7a:ba:23:ac:7c:22:ae:86:a1:b6:6f:18:30:3c:d7:82:4e:
6c:a9:4d:e4:13:a5:a2:c4:fb:da:d8:2c:99:99:3d:64:69:14:
84:62:69:8b:af:b4:26:77:d5:2d:13:97:80:84:27:89:da:ef:
db:2f:a5:76:ec:6d:27:ea:16:16:49:51:af:e8:7d:71:66:c8:
10:a8:02:c7:55:59:4f:69:33:1f:49:1b:c4:5e:0c:6a:62:3b:
ab:a6:9c:e7:57:e1:af:18:11:0f:aa:15:27:cc:36:6c:d9:28:
0c:24:b8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:49 2026 by rpki-client