Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8hEACUuG4ilphmWhnp-jFxbblPI.cer
File: 8hEACUuG4ilphmWhnp-jFxbblPI.cer (raw, json)
Hash identifier: 3Fzy/OHinan9PGRZ55u+jKNM6nxNisFB58Ym5LKfNoY=
Subject key identifier: F2:11:00:09:4B:86:E2:29:69:86:65:A1:9E:9F:A3:17:16:DB:94:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A16AF58512B8B5ECB2A7AE72809CAB48E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/fa81d6-12da-4813-87ff-bbb22d24f76d/1/8hEACUuG4ilphmWhnp-jFxbblPI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/fa81d6-12da-4813-87ff-bbb22d24f76d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 23 Oct 2026 22:50:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218295
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:f5:85:12:b8:b5:ec:b2:a7:ae:72:80:9c:ab:48:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 23 22:50:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f21100094b86e229698665a19e9fa31716db94f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:07:04:ab:bc:5b:cf:f9:1e:1c:9a:63:18:
c9:48:d4:d3:10:16:72:5f:95:0e:cc:68:c4:4b:b1:
1e:c3:4a:23:50:a5:71:42:b9:d7:ce:bf:6f:1f:16:
49:96:cc:2f:d0:34:d6:10:34:97:68:64:75:a3:0e:
10:11:9d:0f:06:31:c3:12:ca:31:6a:18:16:0a:2f:
ed:a7:54:9b:6f:26:f9:25:a3:c1:04:84:88:54:42:
4b:c7:8f:21:78:3b:63:bc:5f:8f:31:e1:df:76:75:
68:12:42:a7:18:98:43:df:69:56:8b:97:27:73:0f:
14:3c:44:79:ba:c5:83:63:cc:be:f2:a6:f1:69:3d:
26:4f:27:9f:53:b1:ef:c2:fc:58:9c:08:e6:b3:7e:
41:17:0f:c5:43:dd:4d:fc:dd:59:3a:95:58:ba:b5:
eb:8a:74:b0:d3:b7:92:1c:c3:51:21:f1:f0:87:f6:
53:ef:bc:e7:cd:e5:83:d0:b1:91:96:35:41:13:8f:
2c:cc:19:46:00:6e:9a:e0:80:f2:fe:f8:c5:32:27:
9f:e1:74:9d:c9:11:cc:1a:9a:1b:9a:fa:48:f5:01:
6c:48:9a:1d:22:2b:11:b5:d5:6b:70:0e:50:19:57:
81:8c:04:16:29:1f:8e:36:f1:6b:d0:8c:3d:5b:40:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:11:00:09:4B:86:E2:29:69:86:65:A1:9E:9F:A3:17:16:DB:94:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fa81d6-12da-4813-87ff-bbb22d24f76d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fa81d6-12da-4813-87ff-bbb22d24f76d/1/8hEACUuG4ilphmWhnp-jFxbblPI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218295
Signature Algorithm: sha256WithRSAEncryption
a4:b3:cf:b0:d3:02:fc:cc:44:c3:93:f6:47:fd:2f:b9:16:ed:
19:77:95:dd:c1:fe:42:14:c9:06:91:42:21:13:52:b3:86:fe:
38:ed:bc:6d:35:36:2d:75:8e:8a:9c:90:76:78:a9:ee:f5:ea:
e6:99:69:17:ac:f4:28:bf:a0:a8:11:3b:b6:ea:6d:17:a4:05:
4c:47:5c:e6:ee:1c:fb:43:7d:67:2d:f8:38:7f:d9:32:ed:fd:
b8:40:39:81:0f:fc:03:79:c0:98:ff:e0:8e:cb:86:32:d5:91:
53:95:90:29:24:fc:5b:34:64:a3:82:c0:dc:c4:09:8b:06:26:
d9:36:f1:72:31:83:12:ef:3d:de:7a:0d:3a:84:a6:d6:4a:45:
5f:ef:21:0e:99:50:d6:b7:fc:d8:d7:cc:0f:b3:bb:96:f8:cd:
d7:12:57:75:0c:71:07:f9:56:c2:d4:3e:ed:89:f3:61:5d:c7:
93:2d:a5:3b:f0:42:73:f6:92:1d:85:b4:14:d0:9c:42:a5:da:
e0:67:47:0a:a1:23:42:bb:5d:0f:28:dc:46:22:93:be:56:bf:
9a:4f:7e:5d:3e:53:e9:f5:12:ee:3a:64:f5:84:b9:0f:1d:df:
c4:dc:5c:7a:3a:af:9a:06:c2:3e:07:8e:98:20:cf:54:ed:c5:
de:9a:3a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:16:23 2026 by rpki-client