Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/yZh_r4QGhFO856CF9-JEFZPET2E.cer
File: yZh_r4QGhFO856CF9-JEFZPET2E.cer (raw, json)
Hash identifier: wM0SOpF7NH3oC8hsoj079PYWOWsftotfNq+FSrWBvLc=
Subject key identifier: C9:98:7F:AF:84:06:84:53:BC:E7:A0:85:F7:E2:44:15:93:C4:4F:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FD642D02E5C423BF5A323FC8545B21D60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Aug 2026 08:48:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.96.237.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:42:d0:2e:5c:42:3b:f5:a3:23:fc:85:45:b2:1d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 08:48:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9987faf84068453bce7a085f7e2441593c44f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a2:5d:e6:bf:d0:36:31:07:fa:43:fe:eb:df:
1e:c3:81:40:7f:e7:f5:2b:68:35:e0:6b:4f:a9:9f:
1c:1d:89:ba:24:56:5b:66:78:0e:77:94:a8:2c:a4:
62:69:ba:ca:70:74:bb:0c:d6:af:d9:7a:e7:a2:57:
e8:a6:21:7c:24:e4:32:7b:90:1f:7e:f6:1a:dc:b5:
04:22:73:a7:99:a6:cf:59:d8:82:14:3e:bd:ea:93:
6d:51:10:01:65:07:b5:6e:aa:06:97:dd:51:58:d5:
c8:76:7d:8a:d7:9f:d8:be:38:39:3c:04:63:4c:ca:
87:30:28:d5:52:88:d9:f9:64:af:af:29:f4:1d:c4:
0f:76:3a:b6:51:ba:67:11:d1:0f:63:33:eb:2d:1c:
5c:0f:ba:6f:c0:b5:18:3f:b3:8f:8f:df:70:1c:0f:
c2:b7:65:df:2f:a4:f0:fd:f5:8b:e8:a9:56:7f:42:
9a:85:f9:75:6b:67:39:ae:32:55:ab:51:3d:ef:dd:
fa:6f:dc:e0:c0:b3:e7:70:d5:7a:54:4d:5a:db:c3:
b6:a8:42:87:c4:c8:e2:38:f2:2d:2f:18:a1:ac:b4:
4b:0c:d6:4e:6a:aa:0e:7d:92:4b:45:e3:ba:0a:bb:
09:e1:5d:20:61:bf:30:b1:f2:0c:76:95:39:4b:f1:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:98:7F:AF:84:06:84:53:BC:E7:A0:85:F7:E2:44:15:93:C4:4F:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b0bcc-1012-47a9-8782-3c8a2611ccd5/1/yZh_r4QGhFO856CF9-JEFZPET2E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.96.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:04:16:11:b7:9c:3d:bc:d2:da:03:af:d5:6c:3c:79:01:c8:
f0:39:b0:3d:f3:5c:1a:1c:55:09:22:21:f5:5c:e7:97:f4:28:
51:e7:0e:c8:c1:2e:59:cf:32:05:b9:6a:91:e9:9e:a6:28:f7:
08:cd:14:bc:99:4b:4f:8a:8a:e5:a5:5f:39:eb:f9:88:3f:21:
32:15:12:cd:00:3a:d5:8c:0b:63:85:7f:9e:b7:ac:da:41:ba:
e6:c2:a4:55:92:81:cb:2f:60:33:8e:f5:52:c8:4c:8f:24:f6:
2b:74:9c:ef:ac:0d:41:37:a2:4f:23:24:a9:aa:32:bd:8f:34:
68:20:8b:b2:87:c0:ab:be:2e:d0:92:4f:5f:12:2a:0e:3d:d9:
cf:d9:8c:58:00:d4:28:fa:d5:2d:f7:63:c7:b7:23:20:93:40:
43:d4:1e:31:25:1a:47:47:ef:17:2d:bf:88:db:1a:4c:04:33:
6a:ab:08:a7:c2:9a:fc:42:28:74:95:6e:f8:94:ba:c0:38:76:
4a:3c:74:01:5b:d5:75:10:00:3e:63:04:97:76:24:0d:22:33:
ee:5e:c2:09:b5:5a:56:a7:95:4f:e8:56:aa:ec:c8:fd:c3:4d:
51:26:26:2f:05:b3:ac:52:e2:0f:0f:0e:dc:be:dc:65:b7:b9:
ef:46:c7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:31:22 2026 by rpki-client