Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.cer
File: 8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.cer (raw, json)
Hash identifier: sIiR2HlOvmFhJAxSIjnp59JvXFVUYQeVeZxovOUYdm8=
Subject key identifier: F2:5D:BD:1E:38:F3:A7:44:4D:75:25:2C:DC:5A:A0:FF:D4:9B:BB:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA50B3C6D2E17BAFEDA87F84F41066
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 46.102.248.0/24
IP: 84.40.0.0 -- 84.40.39.255
IP: 84.40.48.0/21
IP: 89.33.207.0/24
IP: 89.36.24.0/21
IP: 89.36.255.0/24
IP: 89.41.60.0/23
IP: 89.42.155.0/24
IP: 89.47.247.0/24
IP: 176.223.192.0/18
IP: 188.215.38.0/24
IP: 2001:67c:4dc::/48
IP: 2a06:6b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:50:b3:c6:d2:e1:7b:af:ed:a8:7f:84:f4:10:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f25dbd1e38f3a7444d75252cdc5aa0ffd49bbb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:6e:98:81:b1:60:b7:c6:49:2c:d1:f3:eb:
55:80:20:63:2a:54:d4:8e:12:32:c6:50:36:f2:3b:
08:bb:d9:60:76:d8:e9:10:2e:90:89:7f:cf:f3:f2:
ff:a4:f0:79:87:51:ec:81:59:2f:8d:d6:2c:f9:67:
23:73:ca:13:17:62:ae:cd:91:5e:e9:4f:c4:51:77:
a6:33:ac:bf:bd:ae:69:16:01:fd:a4:b3:b2:7c:f1:
89:dd:30:48:bb:46:f9:60:db:df:44:c3:04:85:59:
a6:d3:d6:94:89:e4:1a:67:b1:af:c9:d0:3b:9a:d5:
76:72:0f:70:d8:44:8d:f7:48:76:f6:58:00:a3:a5:
a4:72:0d:bf:c3:dd:38:56:30:f9:26:e9:8d:23:9c:
89:c2:c9:2b:84:88:1f:f0:da:33:6f:01:88:1a:ce:
5c:bb:d9:e9:d9:d3:1f:d5:83:3e:33:44:9c:22:8a:
b5:ab:29:49:8c:79:40:36:68:96:f6:13:99:60:1d:
50:4e:01:c0:1b:13:00:3d:78:65:be:85:32:94:dc:
af:03:d4:a2:b5:1d:ab:10:54:af:0a:54:66:10:7e:
db:9d:53:5e:ee:cb:f8:e7:c9:d8:71:f2:1f:fc:e0:
71:91:0b:4a:4d:39:ee:89:a2:54:57:9c:8e:2b:39:
d7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5D:BD:1E:38:F3:A7:44:4D:75:25:2C:DC:5A:A0:FF:D4:9B:BB:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.248.0/24
84.40.0.0-84.40.39.255
84.40.48.0/21
89.33.207.0/24
89.36.24.0/21
89.36.255.0/24
89.41.60.0/23
89.42.155.0/24
89.47.247.0/24
176.223.192.0/18
188.215.38.0/24
IPv6:
2001:67c:4dc::/48
2a06:6b80::/29
Signature Algorithm: sha256WithRSAEncryption
91:09:3d:60:ab:74:df:d0:9f:91:a2:7f:c8:f8:2d:f2:ba:af:
41:2c:ff:ad:f9:49:9a:d1:18:fa:56:ab:65:aa:3e:12:4e:ac:
a4:ce:b6:0f:48:a6:91:04:6b:cc:a0:0e:ac:ca:ae:a8:4e:61:
1a:4b:04:62:46:2f:98:31:66:e3:ef:ae:b6:94:62:a1:f7:e2:
4f:9c:fc:4c:f1:8f:d2:fe:90:d2:76:68:77:7c:4f:a7:ca:3a:
6b:ba:8f:6a:c6:b6:63:ec:33:ef:45:77:ec:6d:55:13:6a:cc:
51:7f:a2:ed:de:8c:c8:5c:ad:6f:1a:87:6a:04:dd:2b:e4:72:
03:9e:10:78:31:37:e2:44:0e:a2:11:2e:af:49:6c:8a:af:5b:
25:de:8c:a4:3c:e5:52:fa:06:1b:e7:73:87:57:d0:29:45:1e:
1d:55:e4:4d:d7:45:2a:7f:b2:4d:27:60:21:0f:97:48:c8:85:
42:d0:68:41:9b:50:82:7b:8f:48:c7:ce:83:60:49:7a:e3:b0:
ec:6d:a3:2c:f9:da:f2:25:23:f8:cf:df:1f:35:57:3b:f8:8a:
73:7e:57:91:ce:7e:37:16:01:37:d6:79:47:d7:65:7b:5c:14:
90:5c:38:5a:f0:f3:29:57:91:1f:f5:12:eb:82:e6:40:72:11:
f5:14:01:3b
-----BEGIN CERTIFICATE-----
MIIF0zCCBLugAwIBAgISAZ8Y+lCzxtLhe6/tqH+E9BBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjVkYmQxZTM4ZjNhNzQ0NGQ3NTI1MmNkYzVhYTBmZmQ0OWJiYjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshpumIGxYLfGSSzR8+tVgCBjKlTU
jhIyxlA28jsIu9lgdtjpEC6QiX/P8/L/pPB5h1HsgVkvjdYs+Wcjc8oTF2KuzZFe
6U/EUXemM6y/va5pFgH9pLOyfPGJ3TBIu0b5YNvfRMMEhVmm09aUieQaZ7GvydA7
mtV2cg9w2ESN90h29lgAo6Wkcg2/w904VjD5JumNI5yJwskrhIgf8NozbwGIGs5c
u9np2dMf1YM+M0ScIoq1qylJjHlANmiW9hOZYB1QTgHAGxMAPXhlvoUylNyvA9Si
tR2rEFSvClRmEH7bnVNe7sv458nYcfIf/OBxkQtKTTnuiaJUV5yOKznXlQIDAQAB
o4IC3zCCAtswHQYDVR0OBBYEFPJdvR4486dETXUlLNxaoP/Um7uSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzFmOTZj
Yy01ZWE2LTQ5ZTMtOGY1Zi0zMGU5MjllZDEwNjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvMWY5NmNj
LTVlYTYtNDllMy04ZjVmLTMwZTkyOWVkMTA2My8xLzhsMjlIamp6cDBSTmRTVXMz
RnFnXzlTYnU1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHoGCCsGAQUF
BwEHAQH/BGswaTBPBAIAATBJAwQALmb4MAsDAwNUKAMEA1QoIAMEA1QoMAMEAFkh
zwMEA1kkGAMEAFkk/wMEAVkpPAMEAFkqmwMEAFkv9wMEBrDfwAMEALzXJjAWBAIA
AjAQAwcAIAEGfATcAwUDKgZrgDANBgkqhkiG9w0BAQsFAAOCAQEAkQk9YKt039Cf
kaJ/yPgt8rqvQSz/rflJmtEY+larZao+Ek6spM62D0imkQRrzKAOrMquqE5hGksE
YkYvmDFm4++utpRioffiT5z8TPGP0v6Q0nZod3xPp8o6a7qPasa2Y+wz70V37G1V
E2rMUX+i7d6MyFytbxqHagTdK+RyA54QeDE34kQOohEur0lsiq9bJd6MpDzlUvoG
G+dzh1fQKUUeHVXkTddFKn+yTSdgIQ+XSMiFQtBoQZtQgnuPSMfOg2BJeuOw7G2j
LPna8iUj+M/fHzVXO/iKc35Xkc5+NxYBN9Z5R9dle1wUkFw4WvDzKVeRH/US64Lm
QHIR9RQBOw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:12 2026 by rpki-client