Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yFKOFLm6mFBWKUjNeshNKytqNx0.cer
File: yFKOFLm6mFBWKUjNeshNKytqNx0.cer (raw, json)
Hash identifier: ND4TU1DpE8Ut6dBnaNP4ZpQqzOkXEMN0RHL38Fh79gg=
Subject key identifier: C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9CECF286690C56A26A4887E9E7990
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34572
IP: 83.173.64.0/18
IP: 185.170.148.0/22
IP: 2a02:6100::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:ce:cf:28:66:90:c5:6a:26:a4:88:7e:9e:79:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8528e14b9ba9850562948cd7ac84d2b2b6a371d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:2c:34:aa:c4:e3:29:50:23:6a:05:1e:7d:
67:6f:0a:23:6f:cb:58:e4:49:5a:f2:71:08:28:59:
1b:6b:a6:28:b7:2b:12:36:ca:bc:f5:7f:67:2c:37:
2e:17:34:80:0d:cf:33:75:41:60:8d:44:00:ee:c2:
7f:c6:8e:6d:1a:8d:0f:4a:e3:d4:2f:a7:93:9d:ef:
e3:17:17:85:1a:9b:2b:60:ec:cc:2f:51:67:08:93:
04:64:47:67:1a:95:84:d6:d6:67:a7:3d:9b:b3:ae:
58:b0:41:b5:c5:1d:36:5e:1b:f4:7b:9a:0d:f6:3d:
a8:cd:05:b2:74:79:45:eb:2b:99:c7:6d:d5:7f:16:
fb:e8:88:e4:8d:f8:a6:3a:b4:5a:bd:17:50:56:5e:
d1:8d:ba:11:d5:13:68:30:4a:5b:82:8a:eb:75:ef:
59:28:dd:b1:cb:5f:a5:99:c6:fa:23:3a:5a:87:b8:
2d:e4:70:bd:85:80:b3:d0:58:24:a3:99:52:ca:71:
c1:a6:d8:3e:f1:74:ec:d0:06:d5:a9:fe:1b:ab:04:
4f:23:74:3d:32:36:59:78:80:b9:38:8f:1d:73:c4:
1b:80:1a:03:e1:31:41:36:61:13:37:69:4e:0a:42:
b3:06:39:d9:e5:af:ed:dc:aa:87:fc:d6:64:58:cf:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:52:8E:14:B9:BA:98:50:56:29:48:CD:7A:C8:4D:2B:2B:6A:37:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/yFKOFLm6mFBWKUjNeshNKytqNx0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.173.64.0/18
185.170.148.0/22
IPv6:
2a02:6100::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34572
Signature Algorithm: sha256WithRSAEncryption
29:03:9a:ad:d2:74:d6:a8:60:0c:16:5e:0e:44:68:5f:56:e7:
57:d1:cc:fb:5a:f2:c4:88:f5:89:a7:b6:b8:a0:b2:7e:47:bd:
42:a1:fe:0a:74:06:6d:48:4a:61:9d:14:99:b1:7f:32:29:c9:
bc:26:a4:cc:0d:a1:ff:cf:d7:cf:ce:9f:81:02:c0:b3:8a:dc:
97:c5:0c:83:06:39:cb:08:a2:b2:6f:9a:1a:78:d0:60:fa:d6:
f7:e7:c5:05:b5:6b:30:0f:b2:25:8c:d8:54:36:19:40:c9:2e:
bb:7f:98:f7:92:15:41:c8:d9:e7:9e:1b:39:20:1f:4b:3c:1f:
c3:7b:5a:d2:cb:77:1a:d0:70:9f:78:25:a2:3d:e4:a8:ac:6b:
20:c7:b6:1a:2f:3b:7c:d0:a9:fe:85:5c:78:07:c1:f5:0c:b0:
3e:58:dd:ef:0e:f4:0a:15:c6:f5:e1:43:d6:2d:94:b8:ba:ad:
f7:3f:5e:a7:5b:c3:16:bc:59:ab:52:b7:d0:1a:e2:26:cc:45:
62:10:a9:01:b2:e2:1a:9d:a9:99:e4:fb:7c:5a:68:97:9a:bf:
c8:21:fd:54:75:b4:7a:47:24:4b:f1:db:42:bf:9e:77:fa:33:
a7:04:11:6a:72:f7:23:a4:de:1a:e2:c6:a4:cf:11:05:b8:cf:
ed:63:e1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:37 2026 by rpki-client