Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
File: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer (raw, json)
Hash identifier: ODhXGyuIaB/0N2DX4b7xxo8XQWJwXgpCE1tuyiCKZKI=
Subject key identifier: F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A019947CF5DB1505BD8D1433B1579A75F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 19 Aug 2026 10:32:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209554
AS: 218922
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:94:7c:f5:db:15:05:bd:8d:14:33:b1:57:9a:75:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 19 10:32:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2bffa2742563265037029a78f9317339053009c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:fa:f4:bb:06:8d:24:da:ef:d0:46:12:a7:
96:d2:b4:ea:0a:b2:d9:6d:32:c4:65:6b:f7:ab:7f:
58:dd:fe:bf:3c:fa:70:cc:c1:e7:e7:9f:c5:e0:ca:
15:69:e5:65:cf:02:65:cd:69:55:aa:cb:1b:79:67:
fd:c1:d1:79:99:9d:16:10:8d:dd:0d:6b:7e:05:14:
75:dc:07:24:72:4b:38:fe:b6:67:9f:ec:ad:6c:db:
39:59:ea:38:bd:1a:f4:ba:12:6c:6f:f5:ca:9c:7e:
72:61:22:a5:a0:af:29:30:7a:e9:d0:79:9f:35:e0:
35:b0:fb:18:5a:f7:f9:4a:d5:8f:89:56:81:8a:5f:
d3:3a:da:0a:84:c7:65:95:d4:d5:fd:4e:ee:08:fd:
45:c6:2f:8d:c9:82:d7:52:d1:40:13:50:42:6a:36:
d0:4e:cf:4c:a3:fa:3a:2d:5f:95:a9:0b:b3:c1:7f:
bd:c6:8f:e2:19:e2:56:15:89:23:1f:11:94:53:73:
84:32:18:7f:78:af:5f:52:bf:25:c4:7c:31:6a:c9:
66:f3:58:dd:07:b1:da:b9:85:77:d1:68:dd:1c:5a:
77:3e:ce:7f:ab:da:c9:b0:c0:a8:ce:4e:95:0d:b2:
c1:d6:2f:47:07:be:36:a2:da:4d:6e:3b:88:c7:2d:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209554
218922
Signature Algorithm: sha256WithRSAEncryption
51:03:1f:de:9c:d3:45:5b:5c:60:09:1c:84:2e:7b:a7:6a:68:
95:51:fa:d6:a4:3e:29:32:a0:e1:82:20:1e:16:88:2d:98:18:
8b:d7:02:29:69:87:b6:5e:47:61:c5:ac:3c:31:6c:8b:86:73:
b7:ef:0f:4a:f3:b0:ff:d2:fc:a2:32:6c:f5:14:20:83:98:26:
43:4e:ed:dd:3b:3d:04:ab:67:e9:58:ed:da:5e:b8:6f:9f:14:
5c:8d:89:d7:bc:18:d3:16:2a:81:95:80:3b:5a:6c:24:eb:41:
8b:04:aa:1c:27:42:3b:fe:b0:9d:1c:a4:30:03:7f:b7:a4:01:
44:a5:80:23:99:a5:78:51:f7:64:9b:82:27:b4:6d:8c:dc:81:
82:8c:98:6e:ba:5d:d8:6c:75:77:45:52:72:c4:69:f0:3c:cc:
71:f5:a4:df:5a:af:27:c0:17:ab:5e:99:5c:cd:e1:16:c3:ee:
f8:52:60:56:f5:d9:b7:52:20:af:cf:17:98:d6:4d:05:34:cd:
2d:5b:85:fe:e9:f4:77:09:17:7c:09:72:d6:6b:31:4e:4f:aa:
42:28:e4:d7:8b:48:3c:14:30:dc:12:1b:d2:00:1b:e3:af:34:
45:5f:67:99:21:ee:33:76:6e:25:f4:dd:bf:64:30:8e:10:27:
9a:f0:35:c9
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAaAZlHz12xUFvY0UM7FXmnX2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODE5MTAzMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmJmZmEyNzQyNTYzMjY1MDM3MDI5YTc4ZjkzMTczMzkwNTMwMDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKX69LsGjSTa79BGEqeW0rTqCrLZ
bTLEZWv3q39Y3f6/PPpwzMHn55/F4MoVaeVlzwJlzWlVqssbeWf9wdF5mZ0WEI3d
DWt+BRR13Ackcks4/rZnn+ytbNs5Weo4vRr0uhJsb/XKnH5yYSKloK8pMHrp0Hmf
NeA1sPsYWvf5StWPiVaBil/TOtoKhMdlldTV/U7uCP1Fxi+NyYLXUtFAE1BCajbQ
Ts9Mo/o6LV+VqQuzwX+9xo/iGeJWFYkjHxGUU3OEMhh/eK9fUr8lxHwxaslm81jd
B7HauYV30WjdHFp3Ps5/q9rJsMCozk6VDbLB1i9HB742otpNbjuIxy14BQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFPK/+idCVjJlA3App4+TFzOQUwCcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzk1Y2Nl
Yi0xOTI4LTQxNjYtOGM3Zi1kZTg2NmZiMDY2ZDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvOTVjY2Vi
LTE5MjgtNDE2Ni04YzdmLWRlODY2ZmIwNjZkNy8xLzhyXzZKMEpXTW1VRGNDbW5q
NU1YTTVCVEFKdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwMykgIDA1cqMA0GCSqGSIb3DQEBCwUAA4IBAQBRAx/e
nNNFW1xgCRyELnunamiVUfrWpD4pMqDhgiAeFogtmBiL1wIpaYe2Xkdhxaw8MWyL
hnO37w9K87D/0vyiMmz1FCCDmCZDTu3dOz0Eq2fpWO3aXrhvnxRcjYnXvBjTFiqB
lYA7Wmwk60GLBKocJ0I7/rCdHKQwA3+3pAFEpYAjmaV4Ufdkm4IntG2M3IGCjJhu
ul3YbHV3RVJyxGnwPMxx9aTfWq8nwBerXplczeEWw+74UmBW9dm3UiCvzxeY1k0F
NM0tW4X+6fR3CRd8CXLWazFOT6pCKOTXi0g8FDDcEhvSABvjrzRFX2eZIe4zdm4l
9N2/ZDCOECea8DXJ
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:05:59 2026 by rpki-client