Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
File: 8j79S9kntM6jMSCiG09zFNy-oXk.cer (raw, json)
Hash identifier: mG6h2mzDFF5IDn3RypL1YL/4UyypAWAPjsswEPiFYD0=
Subject key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC7FAF79964A9E38F34C73138DC0557
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:18:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.28.190.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:fa:f7:99:64:a9:e3:8f:34:c7:31:38:dc:05:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:8c:cc:18:99:03:d4:a6:87:76:3f:63:6c:
fa:9f:2d:30:b8:6b:0f:b9:ae:59:4f:63:46:a6:40:
92:de:17:b6:d7:f1:22:8f:59:33:e9:45:51:41:69:
5f:d4:9e:ff:80:f4:53:d8:cc:71:3f:8f:c8:df:92:
38:0d:0d:4a:d1:1e:44:80:07:40:df:62:5d:75:98:
1c:42:06:54:64:44:67:22:91:a1:8a:15:f0:68:f0:
d4:bb:0f:73:ba:7e:73:f2:98:d9:9f:1b:56:13:b4:
07:a7:95:a7:2e:2a:a9:44:13:cd:29:52:3d:89:24:
ce:8f:ec:61:88:7a:2a:de:82:93:c8:1d:fe:93:0b:
ce:9e:15:da:af:bd:f2:6d:87:f9:35:4f:59:21:32:
b3:40:6a:fc:6f:f5:bf:f7:1c:69:5c:fa:2b:37:58:
70:78:c8:4e:f6:c1:7a:e7:57:f5:74:8a:c2:9a:e9:
9f:a9:aa:be:09:27:0b:fc:39:61:82:77:c1:83:1c:
83:05:f8:59:cc:73:83:6a:c1:75:62:03:66:50:61:
bb:cc:f5:85:e1:80:0b:0b:40:62:c0:5e:f8:2b:ef:
46:66:68:4d:de:2a:b5:ee:a4:43:67:76:1a:88:bd:
d2:9f:dd:f0:2e:25:a5:b6:88:53:1d:b2:d3:c4:93:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.190.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b4:ce:b3:93:2b:14:f6:e5:7f:6e:0b:e7:b4:7c:17:72:0a:
b0:ac:c5:df:fe:aa:5b:03:91:b0:c7:fe:68:0a:e4:d4:7f:13:
bc:2d:de:31:7a:f5:89:a3:5b:7e:10:56:73:aa:d2:34:8d:e6:
ec:89:4b:6a:e4:0b:b1:69:5a:cf:b8:41:33:3e:a7:c1:da:57:
dd:65:12:49:2c:ed:46:8b:9a:cb:fb:07:e6:24:a4:a5:c5:09:
fe:ac:b9:c9:93:73:5c:1d:60:60:1e:34:7a:b0:4d:bd:b1:21:
05:7e:d2:7e:ad:36:4c:ba:cf:a0:4e:fb:32:fd:66:53:99:48:
ef:7a:b2:53:41:24:88:82:fc:6b:d3:eb:c5:44:ed:93:59:7e:
9e:33:0f:41:01:7e:7b:5f:4c:b4:55:b1:27:22:c2:4a:4b:17:
3d:e3:ae:d5:6d:25:db:6b:aa:1a:08:7a:00:1a:f7:02:a8:bd:
b3:ac:c9:2b:b5:cb:db:01:83:a9:49:d1:53:29:12:ad:0e:f5:
22:90:0c:e9:86:70:1b:78:b1:73:2e:07:c1:93:4b:db:a5:2e:
c1:5f:81:51:29:3c:df:f3:36:1c:e7:df:fc:06:a4:7c:e6:ef:
91:47:48:7d:6e:8e:97:35:80:51:f0:75:60:ca:4f:94:7c:b6:
e6:34:89:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:44 2026 by rpki-client