Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer
File: 8FeESpdTnPV_g8yXTVju0ofv2as.cer (raw, json)
Hash identifier: sjpU4mgfe6/kLlJ4mhAM2HVVbbC/oWwlv420eoxSqus=
Subject key identifier: F0:57:84:4A:97:53:9C:F5:7F:83:CC:97:4D:58:EE:D2:87:EF:D9:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB0BC22886E927D9223C6994C77A22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.209.245.0/24
IP: 193.200.171.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:0b:c2:28:86:e9:27:d9:22:3c:69:94:c7:7a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f057844a97539cf57f83cc974d58eed287efd9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e2:a1:27:90:fd:31:cd:86:87:86:d1:df:95:
91:0b:55:b4:77:34:fc:1e:1e:8a:e5:cf:5c:32:e5:
d8:cf:0b:aa:4e:50:00:d9:77:99:d2:0e:94:a8:25:
64:31:55:57:f6:12:84:23:31:b1:4a:7e:83:e6:0f:
05:84:79:4b:db:d4:10:ce:fa:29:92:9a:86:23:9d:
33:c2:4d:0d:2c:da:df:4e:86:98:fb:5b:59:a4:72:
66:99:b6:fd:f3:52:f5:fc:5a:f0:30:29:4d:89:71:
48:d2:fd:75:c3:ab:6d:28:c0:8a:aa:58:67:b7:bc:
dd:08:69:b5:c4:98:1f:d2:56:6d:0d:e4:03:3e:bb:
cd:31:64:40:bf:6f:f1:30:2e:ba:c7:f1:c4:a7:78:
a7:f5:67:76:88:05:51:38:e9:45:42:2f:05:2f:21:
49:23:ee:ee:01:f1:db:05:be:e4:45:39:e8:97:db:
1f:b5:2b:d3:29:15:9d:98:34:fc:92:58:5e:97:a9:
c7:97:77:f5:23:80:fd:ab:fb:39:6c:c2:ce:e6:13:
69:26:fb:df:67:1c:7d:f6:e2:77:a4:47:f2:7b:dc:
52:89:53:87:12:1c:06:01:3d:2a:fa:3e:02:c1:99:
4d:33:1d:17:b3:52:ad:31:57:b9:7f:51:56:30:ce:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:57:84:4A:97:53:9C:F5:7F:83:CC:97:4D:58:EE:D2:87:EF:D9:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.245.0/24
193.200.171.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d0:99:b7:f1:b7:55:87:3c:8c:d8:f2:cb:30:01:43:14:8e:
8e:32:dc:88:a8:76:4f:98:69:95:af:65:02:05:c5:a9:51:5d:
3a:ea:b5:77:c0:59:9d:e7:0a:b3:5b:cc:ea:f0:2c:47:fb:e2:
65:3f:05:d1:2a:64:4f:3d:8b:dd:5b:97:3c:58:37:b2:18:82:
4f:74:a1:0d:e7:52:33:35:f2:9d:b5:c4:e9:31:b1:df:66:73:
a1:6f:2a:da:23:93:e5:e2:3a:a1:d3:64:2f:4e:03:bb:e0:b9:
8e:64:23:f5:b2:19:15:71:d3:10:8f:ca:3f:e7:62:2d:4c:0d:
4f:3f:70:c4:4f:e4:bc:ea:93:c6:ed:f3:3c:18:e8:2c:6f:37:
f9:19:e5:10:a5:7c:d7:cb:66:cc:ef:9d:92:94:b1:41:c2:d3:
61:35:e1:db:c4:48:52:3a:0b:69:7a:b5:21:e3:11:19:94:8d:
66:6b:16:2e:65:ef:ac:6e:5b:32:66:11:b2:96:39:74:8f:a2:
9e:6d:cc:1b:ba:8c:02:92:4b:51:0c:c8:d4:34:c9:69:d2:38:
d5:8d:26:10:40:36:8f:b9:33:d8:e1:17:5e:de:66:e2:75:5e:
1e:a6:75:8d:c3:6e:e6:f0:28:83:56:e8:23:86:ef:1c:9c:ea:
3b:6e:ca:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:17 2026 by rpki-client