
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-8ydX7ftf1Wu4LRr__Iuq7YJMJY.cer
File: 1-8ydX7ftf1Wu4LRr__Iuq7YJMJY.cer (raw, json)
Hash identifier: wQ+63/Bf0zRFxf4wGP9sY+qeT5nVZJSNoxiXhHLbbCY=
Subject key identifier: FB:CC:9D:5F:B7:ED:7F:55:AE:E0:B4:6B:FF:F2:2E:AB:B6:09:30:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA661CA784E3F10877023E49835045
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/1-8ydX7ftf1Wu4LRr__Iuq7YJMJY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 59545
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:66:1c:a7:84:e3:f1:08:77:02:3e:49:83:50:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbcc9d5fb7ed7f55aee0b46bfff22eabb6093096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:5a:b5:c9:d1:65:15:bc:49:0b:ea:df:c8:
40:88:fd:5b:7a:f7:d0:4e:9d:e6:a2:43:2b:10:eb:
08:4a:05:6e:24:ee:7d:e1:03:6f:74:00:06:11:c0:
8e:d3:b3:1d:7f:78:21:c9:d6:4e:90:78:18:ad:3e:
40:b2:c2:0f:11:54:fd:ea:da:37:1b:c5:b4:9f:f0:
ee:c3:a4:f3:02:71:78:91:77:22:ef:92:6f:45:69:
c3:32:1d:00:8e:02:e9:bd:50:a1:40:29:0e:1b:0e:
95:a3:0a:19:4b:8c:c3:e3:74:b9:41:ca:c4:d2:6f:
76:f3:16:89:63:36:cb:7d:2a:88:eb:eb:9e:43:3a:
1e:29:e5:d1:43:63:de:3e:11:24:97:50:41:86:03:
0d:2a:e3:a6:6c:21:2d:e0:8f:1e:14:8d:bc:00:34:
2c:0c:80:06:c7:f9:c9:a7:d2:56:98:f6:24:16:fd:
c8:de:9e:98:aa:e9:a0:8d:09:1c:3a:1f:3b:64:9d:
30:8e:f6:f0:05:7f:fb:1d:14:49:42:a2:af:1d:c1:
81:b5:0d:f4:73:ac:41:64:f9:cd:ef:89:61:1b:64:
d5:0d:bf:9b:04:6b:d8:1c:0a:cb:3e:d4:a9:8f:32:
67:36:cf:84:f5:8e:5e:b9:b2:6d:92:ec:a0:17:81:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CC:9D:5F:B7:ED:7F:55:AE:E0:B4:6B:FF:F2:2E:AB:B6:09:30:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/1-8ydX7ftf1Wu4LRr__Iuq7YJMJY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59545
Signature Algorithm: sha256WithRSAEncryption
18:e9:03:6c:0d:83:15:43:11:14:a7:cc:3c:3d:b8:f1:91:98:
d1:97:f1:63:32:9c:58:67:d4:10:a5:f4:12:36:ac:6f:39:cc:
63:38:6e:08:c1:7d:eb:c3:0d:23:59:25:28:91:8d:ea:a0:db:
01:30:86:8f:36:85:97:79:18:c7:98:4a:1d:cb:bb:da:fd:3f:
1c:53:d2:f9:3c:1b:aa:2f:d1:b7:31:b2:69:11:2c:4b:7e:ca:
b2:f1:cb:00:e6:ed:ae:c6:37:f3:96:6d:b8:8e:65:a4:51:07:
9d:0f:62:3c:a5:69:ab:67:24:00:bd:6a:94:fb:cb:f3:dd:25:
93:98:55:0f:38:6f:1b:75:09:ee:61:8b:7f:fc:07:0a:74:4a:
98:1e:f3:b4:fa:d9:1a:6c:b4:8f:c4:90:1e:24:7f:d8:5b:ff:
a7:0b:00:33:ef:33:aa:07:94:a2:b0:e5:3a:a0:5d:35:50:a3:
f2:48:08:dc:8f:81:9c:e3:de:9d:23:ec:4f:f6:12:f7:f2:39:
81:be:5b:2e:f0:57:78:d1:1d:43:1e:7e:98:02:b4:0a:45:a8:
fc:37:ea:1c:d8:bd:5d:f0:a1:22:a1:32:1b:bb:8e:d9:50:91:
eb:0d:7c:7d:79:bb:f9:93:71:60:72:52:a8:3a:6e:50:f9:20:
95:cc:c0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:21 2026 by rpki-client