Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.cer (raw, json)
Hash identifier: aR91rPOd0GUHmVspB+oGuQ6ptC2OFwSYzxSX6cnL+Mk=
Subject key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEE6E94E1A4E726C9E25222E3DD81ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:19:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60486
IP: 83.143.72.0/22
IP: 85.184.244.0/22
IP: 185.29.152.0/22
IP: 2a00:a920::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:6e:94:e1:a4:e7:26:c9:e2:52:22:e3:dd:81:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:19:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:a6:6f:69:af:60:1d:2f:53:db:01:ab:aa:
2f:09:a6:b7:de:2e:52:c7:88:7a:3e:94:f8:f3:16:
4a:d1:59:f1:9e:f1:9c:b4:76:f1:c0:c7:ce:97:d6:
5b:28:4b:f0:c3:e1:66:62:cf:93:38:2a:d8:cc:99:
e1:eb:ac:6f:cd:f8:4b:5b:28:32:2b:a3:ad:35:a6:
9a:7d:8b:46:15:93:2b:14:34:70:82:2a:a9:94:3e:
57:d9:ac:5c:cf:c6:6f:d2:80:62:a6:a0:01:0c:f6:
98:82:b6:7a:93:23:c4:0a:0d:52:93:62:b6:a2:73:
da:49:f2:e5:de:3f:d3:5a:ef:36:f9:59:df:58:4c:
b5:16:07:c1:38:fc:ac:5c:52:37:0f:6b:de:20:c1:
92:26:cd:4a:33:b6:28:18:c2:3d:3c:b9:90:bf:de:
cd:f9:13:2b:a3:67:4c:46:42:8b:8b:40:a0:83:81:
52:76:44:ae:2b:84:ce:09:db:1e:c5:61:01:ef:66:
b8:b8:19:d9:e0:1e:3c:4f:15:18:b7:9d:48:f5:78:
ce:2a:2a:3f:b1:9c:23:65:6e:69:d1:b8:56:0c:6b:
7f:48:15:39:51:3b:cd:a7:a7:f5:fb:b3:a8:97:ff:
4d:89:a7:45:df:63:bf:81:45:67:74:64:62:73:eb:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.72.0/22
85.184.244.0/22
185.29.152.0/22
IPv6:
2a00:a920::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60486
Signature Algorithm: sha256WithRSAEncryption
6b:c4:cc:99:28:d7:da:05:2c:08:8b:62:c2:2d:63:86:8a:c5:
00:e5:1b:97:a0:65:5d:58:ad:9d:8e:8c:b4:33:5b:70:f6:88:
1b:b3:b6:7d:af:81:48:05:49:8f:03:15:f7:80:57:4d:31:39:
68:b6:21:a5:25:5a:cc:7c:dc:d4:fc:e9:10:12:f2:d5:4b:f8:
5b:97:37:84:34:a3:b2:0d:2d:a4:6e:ad:11:56:48:c8:f5:cb:
d0:a9:9a:80:b0:3c:25:b0:40:82:69:81:31:86:43:5f:d3:9d:
69:ae:b9:45:31:db:b3:1c:f6:e9:ab:09:ff:08:69:79:db:03:
0a:3e:4a:33:c8:78:d6:36:63:07:f4:47:cb:17:a0:a1:92:f6:
b4:c1:8d:13:f1:cf:c1:80:da:15:8e:50:c2:a1:1f:b0:5a:2e:
42:ba:25:d6:a1:73:bd:5e:3f:89:f4:a6:33:4f:99:55:36:55:
38:fb:67:7d:40:05:29:64:4c:b0:e9:7f:8c:a0:34:c8:c7:15:
15:c2:bb:f6:f2:50:e1:9a:2b:4e:0d:1f:1d:da:c2:b7:8c:8c:
d8:22:f6:03:bc:35:76:90:4b:bd:d4:2a:b2:3a:90:e1:d4:96:
1c:a2:a0:77:42:06:74:b3:4a:67:9a:ee:56:a3:58:df:cc:c6:
e8:30:b4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:00:02 2026 by rpki-client