Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer (raw, json)
Hash identifier: OtkGzPiVnfAFGTdDKvHZb5RMPQGDgeRw9Uh9j72AOek=
Subject key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5B830D3B3909A2B716F6776E10FA57
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:19:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 78.41.63.0/24
IP: 2a14:bc80::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:83:0d:3b:39:09:a2:b7:16:f6:77:6e:10:fa:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f8:41:43:a5:7a:14:d0:73:bc:5d:78:ae:49:
93:d4:c1:41:0b:a1:bb:6b:99:b9:b5:e9:6e:23:5a:
07:23:fa:5f:e5:68:72:30:2a:14:ce:4d:47:75:5b:
24:06:44:7f:58:8b:6e:84:f1:5d:ba:c8:94:ab:c6:
ac:fb:62:8c:10:c3:d4:1d:4e:d8:06:ef:27:21:15:
b0:ab:5d:b6:42:17:ba:51:87:67:9a:79:0f:b6:4a:
23:a8:e9:ef:0a:65:36:e0:72:fe:87:98:3c:c1:84:
19:b4:0f:41:4c:64:d3:dd:90:44:ef:82:00:45:d1:
7f:f2:b2:b7:9a:9b:60:00:31:ce:8c:a2:0f:79:da:
89:e1:b7:9f:d2:79:9b:15:d2:43:14:e4:05:5a:fd:
08:62:b8:c4:1b:29:d0:e8:e1:86:17:16:e3:92:55:
1a:95:a7:54:0c:b0:e9:e1:6d:6c:d7:79:a1:c3:7a:
38:9c:dc:96:00:63:34:0c:e2:63:73:9a:ae:ce:e6:
8b:13:e2:be:17:3f:1c:f3:3d:a0:4d:71:f0:c8:08:
f0:ba:20:10:85:a0:f8:57:0a:b4:38:3c:53:07:81:
44:09:c7:22:1d:a5:73:45:ff:54:15:a8:64:fa:e2:
ea:dc:8e:c1:7d:c7:dd:bc:0a:0f:83:f3:5a:4d:c3:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.63.0/24
IPv6:
2a14:bc80::/30
Signature Algorithm: sha256WithRSAEncryption
43:80:ee:54:4a:25:c7:f3:49:86:b4:c0:85:79:2e:97:0d:f1:
e2:51:5e:1e:92:1e:77:87:72:c3:c7:99:66:f4:a4:7b:ed:fa:
a6:7a:ad:74:a4:f8:75:95:ab:ed:12:36:7b:84:41:88:76:b9:
d4:9b:da:b0:60:ca:e4:1b:77:00:df:1d:7a:90:a3:17:bf:bf:
54:97:53:b1:76:36:67:f5:1e:ab:33:49:99:38:c6:41:ec:8b:
da:bb:76:69:a4:7c:dd:75:b2:ae:71:e5:f1:08:f1:79:cf:c2:
b6:dd:2f:ca:6f:f9:4f:15:b6:bf:b9:20:0c:67:07:14:ad:dd:
84:9b:44:5c:06:75:cb:b6:12:b1:26:27:0e:42:56:84:28:23:
5e:ee:2b:e6:e2:dc:28:85:df:96:3f:69:da:b0:a1:50:d7:5c:
cc:84:15:93:7d:c0:6c:ea:a5:4d:3d:5f:24:0b:92:bd:bc:ef:
d0:40:c1:ae:13:f4:22:be:8e:3e:82:0b:46:6a:c2:64:d6:d0:
d1:94:e6:be:a8:64:e4:9f:cb:ae:92:cf:3f:5a:6d:26:46:e5:
cd:af:71:b3:a6:e4:a8:da:a1:85:3a:c1:14:5c:1f:48:8e:ea:
28:91:86:d4:32:d6:7d:41:3c:19:a3:b0:ab:ab:75:ca:41:fd:
ea:5f:c8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:45:12 2026 by rpki-client