Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8jhsPFHpFWdv2RMCrLncu5no8Uw.cer
File: 8jhsPFHpFWdv2RMCrLncu5no8Uw.cer (raw, json)
Hash identifier: 1YZLT82syct4BMMPH95eS/BAWNYdcEEhk4PRp4zUObU=
Subject key identifier: F2:38:6C:3C:51:E9:15:67:6F:D9:13:02:AC:B9:DC:BB:99:E8:F1:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D6842F25B41B91EE849655FF9602A11A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/8jhsPFHpFWdv2RMCrLncu5no8Uw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Apr 2026 14:05:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205460
IP: 185.218.8.0/22
IP: 192.175.1.0/24
IP: 194.55.140.0/22
IP: 2a09:c380::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:42:f2:5b:41:b9:1e:e8:49:65:5f:f9:60:2a:11:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 7 14:05:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2386c3c51e915676fd91302acb9dcbb99e8f14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:ef:75:24:2f:a7:97:b7:d9:57:c3:00:d8:
21:57:6c:16:1a:2f:c8:fb:50:86:da:33:60:10:d8:
2b:bc:3c:fc:49:d5:2c:87:61:61:4e:9f:95:56:01:
79:a6:90:67:4b:02:56:18:dd:55:66:cd:6b:4a:70:
4b:7c:58:ad:af:e6:8a:b4:48:5a:b2:f9:d5:ec:f7:
99:c5:73:d3:a4:e2:d1:b1:c2:e9:09:06:fe:7e:69:
37:f2:14:8b:b6:83:03:0a:a3:d7:9d:f8:20:a0:65:
9b:04:82:86:2f:af:dc:20:09:b0:b9:c7:75:ca:84:
32:e8:20:d9:4d:6e:b9:0d:fe:53:6e:78:49:3d:ed:
be:5d:4f:19:d7:90:a3:a3:02:85:73:12:1c:9d:19:
12:c6:bb:b8:d7:0e:7a:ee:69:84:c9:d0:49:14:7e:
03:33:41:11:bf:8a:d2:7a:13:30:50:57:6e:35:f5:
56:b4:34:60:b8:40:56:6a:97:b6:a4:65:e0:a7:0c:
ba:21:af:0e:50:e4:2f:61:cf:f7:ca:24:18:a1:65:
ec:54:f1:0b:7f:ac:68:62:50:e1:98:5c:46:d8:f2:
f8:bd:d4:f4:d9:ce:00:50:cb:de:80:aa:2c:44:0f:
be:a3:49:16:89:28:58:cb:6f:c8:78:97:df:56:23:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:38:6C:3C:51:E9:15:67:6F:D9:13:02:AC:B9:DC:BB:99:E8:F1:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/8jhsPFHpFWdv2RMCrLncu5no8Uw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.8.0/22
192.175.1.0/24
194.55.140.0/22
IPv6:
2a09:c380::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205460
Signature Algorithm: sha256WithRSAEncryption
8c:04:eb:3d:f6:d2:28:24:31:07:e8:1e:d6:e3:1c:0f:a7:c6:
b8:1b:a9:3b:09:0c:87:66:0c:86:82:3a:67:a9:09:24:30:79:
85:20:fa:df:23:89:f2:eb:b1:1b:be:cd:f9:d4:44:70:d6:37:
20:3a:b3:8f:79:e4:15:8d:f8:6d:06:08:23:c1:12:ef:39:ad:
d7:4d:18:c6:f0:f7:fb:37:8c:21:4e:95:dc:15:1a:b1:ef:01:
b2:4a:82:a8:3f:6e:1f:5a:e8:dd:36:9a:52:87:39:f4:ec:79:
4f:0f:22:90:99:fd:46:9a:d3:c2:d7:1c:78:16:eb:81:80:6e:
3c:9c:ca:80:92:62:ac:a0:9c:12:2a:6a:f6:c1:46:79:20:3a:
d3:a5:55:0d:aa:3d:43:e7:2f:2f:a4:f3:70:33:e1:65:25:7a:
eb:8c:a1:7d:f3:6b:d3:ba:2a:b0:08:0a:a9:3d:1c:9c:c9:55:
4d:78:15:20:b3:bb:dd:0c:bb:23:91:80:fe:7b:8e:2d:62:2c:
f9:da:d2:dd:35:34:79:b9:3e:00:9a:4f:b8:d6:33:32:91:6a:
a8:fa:ad:f5:42:42:2d:86:03:cd:2b:8a:23:8d:a2:69:4c:a2:
0f:fc:52:6a:7a:56:97:dc:49:c0:22:ec:00:40:0c:63:97:f9:
81:ad:41:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:07:46 2026 by rpki-client