Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
File: 8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer (raw, json)
Hash identifier: PSigkF6xx7+LApEDHdffXYnOV2KnJSPJEYWXEU0Xnrk=
Subject key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D6D3BC303361F1614CD925CD4D916DDA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 Apr 2026 13:15:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200506
IP: 189.13.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:3b:c3:03:36:1f:16:14:cd:92:5c:d4:d9:16:dd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 13:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f30e445195b64d799b822e99947792e0cab32b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:a0:23:05:95:b2:a5:61:ae:82:95:a8:e9:
21:20:9c:45:cd:62:33:20:02:bf:9b:ba:84:48:ce:
f8:11:b9:fc:da:8c:04:33:54:e1:c1:42:02:ee:1d:
e8:db:28:ea:29:f9:92:f2:f4:38:c3:b4:82:39:d7:
03:b7:20:b6:68:93:3d:c3:ac:50:29:0a:0c:ff:2c:
77:d5:a1:16:8f:d4:fc:14:5b:72:66:23:93:50:00:
d1:c8:7a:d8:ef:8f:a2:7a:20:22:53:c0:20:24:26:
dc:d5:94:f3:2e:75:fd:7c:7e:09:f9:d2:15:7d:ec:
69:12:99:6b:bf:65:da:fd:69:de:03:1a:c8:3f:4b:
81:9e:64:ec:b8:bf:7f:e5:db:6b:e1:e5:72:af:08:
a5:7e:55:47:b9:11:82:cd:0c:40:45:63:92:35:e9:
f7:34:6c:db:38:6e:64:69:54:03:2f:07:1a:85:7b:
2d:69:a1:fb:36:a8:e5:59:d6:59:45:f2:6b:23:7f:
ee:db:79:b3:75:2d:0f:0e:db:c9:cc:e2:54:9a:32:
a5:47:de:12:b4:56:50:22:b0:90:8e:04:8c:36:db:
9a:07:99:34:3b:e4:ed:91:06:3c:92:dd:4e:dd:58:
ea:f4:49:11:8d:65:89:9b:e1:01:86:16:23:4e:a9:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.0.0/16
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200506
Signature Algorithm: sha256WithRSAEncryption
38:44:76:79:65:7c:58:2e:73:dc:63:d4:fe:cd:bc:ec:48:a4:
a3:3d:e7:70:7f:27:af:5d:68:5d:be:e5:17:65:eb:29:0e:6d:
75:08:05:f2:99:ca:5a:18:dc:72:74:10:a5:e0:bf:64:33:72:
0d:18:4f:c5:92:a3:08:ca:fd:19:ea:9f:56:13:d0:86:76:1d:
7e:de:df:80:3e:2f:7e:60:ee:ce:e5:3e:2e:a4:ec:e5:72:2e:
46:3c:d4:f3:fe:1b:ae:b1:e5:b7:f1:06:57:66:d3:0e:2e:bd:
26:26:70:cb:a0:49:ce:19:7c:c7:0b:be:1f:1f:2f:cf:10:31:
49:95:da:8b:22:93:cb:a2:d1:a9:63:92:fa:41:ef:a7:5b:5d:
5a:45:be:31:58:13:22:2f:7e:82:0d:ce:0c:69:ee:db:c4:fe:
10:bb:68:a7:f5:64:77:0a:5e:6c:61:41:ee:67:ad:8a:a4:2f:
b0:d8:5c:4e:52:bc:bd:c1:e8:9a:86:9c:ac:7a:ea:b3:8f:f7:
a4:cb:f5:cc:3b:3c:bd:44:f7:69:e2:4f:a6:6a:cd:0e:ff:0b:
ac:ec:8d:3f:93:89:b8:a6:36:49:f7:74:fa:09:12:f7:5e:1d:
91:17:02:94:59:45:c6:aa:c2:ab:13:28:dd:67:42:20:49:ff:
09:2a:fb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:48:30 2026 by rpki-client