Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.cer (raw, json)
Hash identifier: ks42vpnlGiU9wGpf0SbG3nh6lXSWQZCCsLrudzZrphw=
Subject key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019ECFCDE98ECEF3EAEB2D6B81BA2B6BEDF5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 Jun 2026 09:40:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 56701
IP: 45.157.212.0/22
IP: 77.73.234.0/24
IP: 91.214.122.0/23
IP: 161.104.24.0/22
IP: 168.222.196.0/22
IP: 178.236.29.0/24
IP: 2a0f:f280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:cd:e9:8e:ce:f3:ea:eb:2d:6b:81:ba:2b:6b:ed:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 16 09:40:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:a3:7b:00:8b:ae:0e:1c:2c:c7:59:a4:04:
f4:4c:2f:50:ac:65:e3:be:26:20:86:05:e2:e9:52:
62:6b:73:0b:a6:e6:2a:5e:e0:88:27:f2:1d:45:8c:
6d:f6:f4:47:ae:25:58:9d:dc:55:e3:0a:33:05:65:
43:62:27:70:88:38:25:60:b1:4b:ef:8e:30:cc:86:
a9:5f:4e:98:e7:2e:44:d5:d2:71:8a:35:ae:d2:f4:
d7:1c:e1:02:81:3d:ea:e8:de:4a:fd:5b:e8:ba:6c:
18:63:1b:a7:a3:0a:49:cd:44:db:ef:36:a5:4d:36:
cf:10:be:e8:76:73:20:b2:a8:67:ac:cb:52:ac:43:
51:7c:f4:03:9d:22:4f:e1:67:3f:88:65:cc:41:69:
64:cc:a1:98:df:60:d6:47:b0:7b:41:c8:78:44:ad:
0f:78:18:ee:ec:bf:2f:23:3d:11:92:67:ec:2b:27:
a9:07:51:e4:75:ce:3f:a4:62:63:4d:7c:a1:58:2c:
8d:9e:f4:dc:0b:8f:36:7e:f1:6b:40:40:dc:34:93:
f5:34:fb:e8:2e:43:ea:09:e1:47:07:d6:fa:b3:b1:
a2:5b:fc:73:86:4b:54:28:d8:4b:a7:ce:13:73:57:
bb:e6:6d:5a:90:d5:54:0b:98:4c:c0:8a:9a:c5:56:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.212.0/22
77.73.234.0/24
91.214.122.0/23
161.104.24.0/22
168.222.196.0/22
178.236.29.0/24
IPv6:
2a0f:f280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56701
Signature Algorithm: sha256WithRSAEncryption
77:f8:b6:47:c7:ee:05:39:cb:3e:de:61:dd:bc:e0:d0:f9:ad:
46:95:9b:b0:47:a0:45:6d:13:6f:c8:36:50:eb:b4:a5:f3:c8:
cd:f2:46:7e:59:be:90:91:d3:58:99:bc:dd:38:24:49:14:96:
74:af:b1:39:b7:68:21:0b:84:e3:57:1e:17:e2:83:1d:ba:e6:
82:6d:c1:22:8a:90:89:37:56:7f:2d:29:14:91:5e:7c:9a:d9:
7c:b1:f5:e0:33:63:dd:8d:e8:59:02:e0:9e:d5:6d:6a:7a:4d:
ae:77:b0:d9:10:3d:c7:6b:ea:14:f5:45:a5:ea:63:06:d1:31:
14:52:c2:4e:cf:74:63:8c:68:3a:bb:b7:f0:a2:d6:cf:2b:46:
d6:c5:0c:ab:ae:eb:d5:fc:4a:92:8b:c9:6a:c4:8b:33:c5:7c:
c0:4b:46:b8:a2:5b:14:56:b4:b9:e0:1f:37:64:23:5d:c0:92:
6d:12:2d:64:01:d3:f9:c2:b6:ec:bc:e1:ef:73:38:9d:66:65:
9e:1a:9a:42:28:bf:d1:57:89:90:24:c1:0d:a6:d9:ff:0a:bc:
60:6e:07:ca:cc:36:37:f2:32:fc:4a:05:f0:43:20:59:7e:26:
98:fa:0f:c5:82:7d:a1:b9:a3:02:a4:77:ec:c9:22:af:a6:56:
83:0e:1b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:20:56 2026 by rpki-client