Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8-vHwbZUMXYi__kRI0BOtsQnr6I.cer
File: 8-vHwbZUMXYi__kRI0BOtsQnr6I.cer (raw, json)
Hash identifier: ZTWIisxnVidpvIbr/AFbTrsbARNeLFPRRH2XFQbS9sQ=
Subject key identifier: F3:EB:C7:C1:B6:54:31:76:22:FF:F9:11:23:40:4E:B6:C4:27:AF:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C66A731E614F7C7B82582F73F58BDEB7F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 16 Feb 2026 13:32:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206458
IP: 185.134.24.0/22
IP: 2a03:2ae0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:a7:31:e6:14:f7:c7:b8:25:82:f7:3f:58:bd:eb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 16 13:32:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3ebc7c1b654317622fff91123404eb6c427afa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:9f:1b:d8:6e:2b:9b:ab:1a:0b:b9:53:75:
fd:a7:2c:81:b2:17:21:ee:54:32:0b:f5:ac:7c:8a:
ff:fc:70:4d:0d:36:33:7e:59:6f:0e:e2:26:44:7f:
18:95:b4:55:e3:df:0f:3b:86:18:0e:1f:06:bd:97:
40:52:88:24:d1:11:01:ae:58:ae:25:a8:03:8b:32:
a0:17:37:8c:e8:bd:5b:2b:7d:d4:07:e6:d6:92:ce:
cc:ff:24:16:4c:78:01:d7:b4:13:37:1c:9e:1d:89:
92:ca:c0:eb:4c:b9:0a:ca:3d:76:03:10:77:79:2f:
c5:59:67:ab:90:05:38:10:3a:f7:be:7f:2a:41:49:
98:1f:d9:78:45:e6:37:c3:3b:fc:5b:bc:c8:47:cb:
bb:c9:42:21:8a:28:6e:2c:50:69:2e:8f:f3:30:71:
65:e4:f6:a2:4a:7d:e5:5f:34:98:de:c6:eb:c8:e7:
96:ef:ff:aa:c4:45:47:ea:d7:7e:fd:cf:67:86:f3:
c4:5a:12:ea:5d:b9:3b:52:2a:ac:c1:4f:a4:d7:78:
21:d1:a7:73:58:b5:3e:c2:5b:34:70:d2:e1:25:81:
09:c7:cf:d1:25:00:25:ba:6a:6d:d6:d0:60:59:6b:
87:d8:e0:10:1d:ca:a7:f4:39:c4:d6:03:07:eb:bb:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EB:C7:C1:B6:54:31:76:22:FF:F9:11:23:40:4E:B6:C4:27:AF:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.24.0/22
IPv6:
2a03:2ae0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206458
Signature Algorithm: sha256WithRSAEncryption
53:ec:b2:ad:4d:96:90:87:fe:5d:81:6d:1a:7c:ad:0a:64:43:
52:6c:c5:36:7c:df:84:4d:c9:94:b7:38:bf:ea:67:f7:d5:dc:
46:65:d4:13:3b:9d:a1:38:e2:b9:f9:46:dc:5b:f0:0c:ff:5b:
43:30:f4:38:1e:27:0c:f3:ff:2a:0a:64:d7:4d:d6:14:e3:9d:
15:8a:1b:54:ca:5e:26:af:8b:e8:e9:ce:f1:8d:02:88:35:50:
63:05:97:a9:ad:89:6c:67:ca:71:30:e1:12:42:dc:05:7d:cc:
c0:4e:1d:e4:0f:42:3b:c0:b5:0e:74:7e:d6:18:18:f3:c2:71:
5f:e5:6d:55:b3:e8:b3:7e:64:a8:4e:31:52:1e:37:92:42:e7:
4c:e1:72:b3:61:21:26:21:e4:f4:f2:8d:27:bd:64:f8:20:f9:
2c:30:c6:1c:d3:94:4e:40:ee:d8:0f:9a:49:d5:bf:83:53:01:
88:3f:c4:48:19:ea:50:7f:ad:31:47:67:48:af:91:cf:2b:99:
79:1b:2d:07:bd:49:b0:eb:b0:df:f8:6e:20:3b:25:57:69:bd:
b9:77:77:21:a2:1e:1f:2b:3a:eb:61:62:17:98:15:1d:3e:fd:
97:2f:b3:2f:99:3a:35:06:56:e0:56:dc:9c:80:08:85:26:0b:
12:86:61:94
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZxmpzHmFPfHuCWC9z9Yvet/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjE2MTMzMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2ViYzdjMWI2NTQzMTc2MjJmZmY5MTEyMzQwNGViNmM0MjdhZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA096fG9huK5urGgu5U3X9pyyBshch
7lQyC/WsfIr//HBNDTYzfllvDuImRH8YlbRV498PO4YYDh8GvZdAUogk0REBrliu
JagDizKgFzeM6L1bK33UB+bWks7M/yQWTHgB17QTNxyeHYmSysDrTLkKyj12AxB3
eS/FWWerkAU4EDr3vn8qQUmYH9l4ReY3wzv8W7zIR8u7yUIhiihuLFBpLo/zMHFl
5PaiSn3lXzSY3sbryOeW7/+qxEVH6td+/c9nhvPEWhLqXbk7UiqswU+k13gh0adz
WLU+wls0cNLhJYEJx8/RJQAlumpt1tBgWWuH2OAQHcqn9DnE1gMH67uQPQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFPPrx8G2VDF2Iv/5ESNATrbEJ6+iMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2Q3Yjgz
OC1kYmFlLTRkMDItYTRiOC1iODIzZDhiNWQ5YjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvZDdiODM4
LWRiYWUtNGQwMi1hNGI4LWI4MjNkOGI1ZDliOS8xLzgtdkh3YlpVTVhZaV9fa1JJ
MEJPdHNRbnI2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuYYYMA0EAgACMAcDBQAqAyrgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMmejANBgkqhkiG9w0BAQsFAAOCAQEAU+yyrU2WkIf+
XYFtGnytCmRDUmzFNnzfhE3JlLc4v+pn99XcRmXUEzudoTjiuflG3FvwDP9bQzD0
OB4nDPP/Kgpk103WFOOdFYobVMpeJq+L6OnO8Y0CiDVQYwWXqa2JbGfKcTDhEkLc
BX3MwE4d5A9CO8C1DnR+1hgY88JxX+VtVbPos35kqE4xUh43kkLnTOFys2EhJiHk
9PKNJ71k+CD5LDDGHNOUTkDu2A+aSdW/g1MBiD/ESBnqUH+tMUdnSK+RzyuZeRst
B71JsOuw3/huIDslV2m9uXd3IaIeHys662FiF5gVHT79ly+zL5k6NQZW4FbcnIAI
hSYLEoZhlA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 08:39:54 2026 by rpki-client