Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
File: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer (raw, json)
Hash identifier: Vxb2mt2NNSbi+Z8EjtpWP6g6wC/F8wu0Y3uOZ49sL+c=
Subject key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797EE2DBC0059A326C6DEDD8E576A553
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 24952
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:e2:db:c0:05:9a:32:6c:6d:ed:d8:e5:76:a5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:6e:94:73:73:08:7e:e2:3d:a1:cd:c4:bd:
9b:01:0f:f1:50:c3:c7:85:c8:ae:69:ac:ad:19:26:
31:16:ac:be:54:f4:f6:9e:09:ab:5e:a2:61:bb:e7:
dd:88:40:9f:f2:be:53:19:fe:40:95:e1:65:e3:af:
09:74:ef:98:3f:97:b2:74:2a:8d:6f:33:60:71:07:
ef:5d:bd:d6:41:99:2d:c1:a7:f5:48:73:1f:eb:ba:
b3:10:bf:1b:5f:ba:4a:85:95:7c:a6:ad:8b:b0:fb:
38:76:e5:a5:8f:67:14:f6:b1:c8:9e:45:f5:23:5f:
e7:b0:83:1b:dd:60:a5:bc:ad:c3:2e:46:02:cc:5d:
8b:ef:f9:19:71:92:11:ce:b4:13:b8:a3:c3:6b:6f:
72:fe:21:45:36:c1:bc:52:db:b9:b2:53:19:0a:86:
20:b5:75:41:d8:1b:a4:69:48:8d:62:33:06:52:40:
24:2c:47:2c:83:3d:bb:d7:3f:84:01:b6:fc:8d:bd:
47:27:0f:27:c6:44:07:93:0d:fe:a9:1e:8f:b2:a4:
8b:6b:e8:ae:7e:fe:0e:15:ad:82:92:91:0c:92:03:
68:fe:b9:c2:dc:8d:4e:f6:9e:70:42:31:2b:31:f8:
1a:de:27:1b:a7:1e:36:da:e6:17:ed:a1:57:1b:c5:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24952
Signature Algorithm: sha256WithRSAEncryption
04:d5:73:07:65:a5:e7:7c:3a:03:c6:4c:02:d3:9a:5f:e2:b2:
c5:6a:f9:04:dd:a9:73:11:05:5f:b0:c1:c0:b1:c6:56:09:fa:
ec:40:a0:aa:4d:2b:c1:42:a6:2e:d8:2c:34:72:c3:87:a8:7c:
91:c2:44:82:22:6c:a9:de:bd:1f:b8:c4:fd:de:3d:ed:35:89:
61:e5:26:bd:24:8f:57:68:fd:71:45:9a:c3:af:ac:d8:7a:65:
9f:48:e7:f7:ba:64:38:c9:84:85:3f:bf:fb:1e:3c:e9:01:d3:
c5:8b:f6:d8:60:f3:de:6a:bc:bb:03:44:67:39:c7:93:59:d7:
96:9e:e1:60:e1:27:22:b9:1f:55:12:92:4f:78:98:15:f2:14:
f6:97:c3:3f:bd:e9:1a:95:0c:fb:c2:e1:7b:76:44:a4:26:50:
7e:64:f3:65:99:e5:5b:60:9d:0e:c1:f4:d2:f5:22:c9:2f:ce:
ff:d5:f5:d2:3e:09:2a:44:1b:eb:5f:e4:98:4e:51:fc:11:a4:
32:6a:34:9a:21:7f:e1:d7:89:a9:81:49:7f:4d:60:26:1f:f2:
79:f0:e3:c3:29:41:24:f8:24:2e:0f:45:d2:d7:e2:8b:d5:42:
0a:31:77:bf:95:cc:bf:7b:ab:9a:2c:04:3e:e8:e2:cc:c8:72:
a7:9e:c1:1a
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAZt5fuLbwAWaMmxt7djldqVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWU2ZjE1ZWY3NTI2NDlmM2IxMTg3ZGU2ODNmZTgzYjFjZTY5ZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFxulHNzCH7iPaHNxL2bAQ/xUMPH
hciuaaytGSYxFqy+VPT2ngmrXqJhu+fdiECf8r5TGf5AleFl468JdO+YP5eydCqN
bzNgcQfvXb3WQZktwaf1SHMf67qzEL8bX7pKhZV8pq2LsPs4duWlj2cU9rHInkX1
I1/nsIMb3WClvK3DLkYCzF2L7/kZcZIRzrQTuKPDa29y/iFFNsG8Utu5slMZCoYg
tXVB2BukaUiNYjMGUkAkLEcsgz271z+EAbb8jb1HJw8nxkQHkw3+qR6PsqSLa+iu
fv4OFa2CkpEMkgNo/rnC3I1O9p5wQjErMfga3icbpx422uYX7aFXG8WUwQIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFPHm8V73UmSfOxGH3mg/6Dsc5p8DMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzA0YTQy
YS1kNDU0LTRhNmUtYmNiZC03N2U2ZDM2M2IxOTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMDRhNDJh
LWQ0NTQtNGE2ZS1iY2JkLTc3ZTZkMzYzYjE5Mi8xLzhlYnhYdmRTWko4N0VZZmVh
RF9vT3h6bW53TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAmF4MA0GCSqGSIb3DQEBCwUAA4IBAQAE1XMHZaXnfDoD
xkwC05pf4rLFavkE3alzEQVfsMHAscZWCfrsQKCqTSvBQqYu2Cw0csOHqHyRwkSC
Imyp3r0fuMT93j3tNYlh5Sa9JI9XaP1xRZrDr6zYemWfSOf3umQ4yYSFP7/7Hjzp
AdPFi/bYYPPeary7A0RnOceTWdeWnuFg4SciuR9VEpJPeJgV8hT2l8M/vekalQz7
wuF7dkSkJlB+ZPNlmeVbYJ0OwfTS9SLJL87/1fXSPgkqRBvrX+SYTlH8EaQyajSa
IX/h14mpgUl/TWAmH/J58OPDKUEk+CQuD0XS1+KL1UIKMXe/lcy/e6uaLAQ+6OLM
yHKnnsEa
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:59:54 2026 by rpki-client