Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
File: 8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer (raw, json)
Hash identifier: uBwHLBt9WCWksIupHZs5fDVFYPw4MN0JWt5f4xmIuMU=
Subject key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CC111E62451F2DD5855F4B2E8C3D10B88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 06 Mar 2026 02:55:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200506
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c1:11:e6:24:51:f2:dd:58:55:f4:b2:e8:c3:d1:0b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 6 02:55:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f30e445195b64d799b822e99947792e0cab32b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:a0:23:05:95:b2:a5:61:ae:82:95:a8:e9:
21:20:9c:45:cd:62:33:20:02:bf:9b:ba:84:48:ce:
f8:11:b9:fc:da:8c:04:33:54:e1:c1:42:02:ee:1d:
e8:db:28:ea:29:f9:92:f2:f4:38:c3:b4:82:39:d7:
03:b7:20:b6:68:93:3d:c3:ac:50:29:0a:0c:ff:2c:
77:d5:a1:16:8f:d4:fc:14:5b:72:66:23:93:50:00:
d1:c8:7a:d8:ef:8f:a2:7a:20:22:53:c0:20:24:26:
dc:d5:94:f3:2e:75:fd:7c:7e:09:f9:d2:15:7d:ec:
69:12:99:6b:bf:65:da:fd:69:de:03:1a:c8:3f:4b:
81:9e:64:ec:b8:bf:7f:e5:db:6b:e1:e5:72:af:08:
a5:7e:55:47:b9:11:82:cd:0c:40:45:63:92:35:e9:
f7:34:6c:db:38:6e:64:69:54:03:2f:07:1a:85:7b:
2d:69:a1:fb:36:a8:e5:59:d6:59:45:f2:6b:23:7f:
ee:db:79:b3:75:2d:0f:0e:db:c9:cc:e2:54:9a:32:
a5:47:de:12:b4:56:50:22:b0:90:8e:04:8c:36:db:
9a:07:99:34:3b:e4:ed:91:06:3c:92:dd:4e:dd:58:
ea:f4:49:11:8d:65:89:9b:e1:01:86:16:23:4e:a9:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200506
Signature Algorithm: sha256WithRSAEncryption
31:8a:1e:d0:2c:91:08:6f:b1:a5:b5:d0:51:e8:75:16:c7:16:
c2:14:cb:55:14:af:5f:d4:9f:be:46:45:ff:c4:dd:a3:eb:6d:
44:d2:26:c1:cf:d8:77:11:99:f2:65:6a:40:eb:b6:1b:3b:0d:
d6:88:8e:4c:f5:19:25:73:a9:a0:dc:e5:69:41:5b:40:04:35:
fa:32:cd:cd:83:a3:70:2c:4c:2f:14:fb:c6:b1:bc:d1:c0:72:
c1:08:3e:4b:ab:0d:31:4c:5b:40:43:1a:09:e9:82:a5:c4:32:
45:66:ea:fe:e7:17:ec:e4:7b:4c:a7:fa:40:65:a9:45:d1:8e:
b3:3d:92:4b:71:51:41:2a:0f:35:47:f6:a3:99:ac:33:a1:0a:
a5:88:af:f2:ac:20:e9:3c:7a:6e:00:7d:d1:82:5f:e9:7c:a1:
8b:2a:52:92:26:88:60:7a:ae:26:68:43:20:3a:4a:b6:09:06:
af:5f:b0:32:f2:33:18:84:dc:fb:9b:93:d1:72:02:71:92:d3:
be:4f:97:b4:6c:b8:6c:4b:54:46:e0:cf:55:bc:f4:d7:20:f4:
44:1e:1d:c6:22:ca:17:b7:d8:f5:31:9a:24:6f:13:47:a5:d5:
0f:c5:63:c0:64:ac:f7:c5:26:c5:9a:c2:d7:f6:b5:6e:63:88:
28:57:a5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:18:27 2026 by rpki-client