Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C8GL1hWeK7Ynx1zW76Ue657koRw.cer
File: C8GL1hWeK7Ynx1zW76Ue657koRw.cer (raw, json)
Hash identifier: WawOqEsbCePZKSfGscaceTsHastGgjv71sR3TXVeLp0=
Subject key identifier: 0B:C1:8B:D6:15:9E:2B:B6:27:C7:5C:D6:EF:A5:1E:EB:9E:E4:A1:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DAA61E3A61C5E854E9624FA2D92735006
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/C8GL1hWeK7Ynx1zW76Ue657koRw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Apr 2026 10:13:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198887
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:61:e3:a6:1c:5e:85:4e:96:24:fa:2d:92:73:50:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 20 10:13:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bc18bd6159e2bb627c75cd6efa51eeb9ee4a11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:26:58:d0:d9:b8:a5:15:ea:d6:78:ee:0d:
ba:da:97:b4:5e:6f:60:44:c7:cc:21:50:18:36:47:
28:9b:f7:4f:b7:a7:b4:e2:44:ac:80:b3:aa:21:87:
16:d9:e4:2e:88:ad:08:cc:56:b5:80:0f:5a:fb:44:
3f:7c:89:ef:f8:91:ba:8a:b2:7f:2d:da:59:dd:cb:
d8:02:5c:c4:60:01:58:ef:c2:b9:04:a2:0a:a9:70:
87:99:f8:1a:16:c9:ba:57:e4:53:e9:4f:4f:62:3d:
09:3f:12:e4:44:e7:82:98:3b:4d:63:1d:da:8b:9f:
17:e6:ca:d6:c3:c4:13:23:89:b6:dd:52:24:a5:fd:
b7:f4:02:77:5b:9e:36:7b:7b:9e:29:70:38:57:02:
55:ce:57:f6:23:76:92:56:3b:0f:eb:17:7e:7e:d5:
6b:a0:00:60:f6:cd:6a:92:98:5d:a9:ed:c3:4c:a3:
65:76:07:21:9a:c1:5c:7a:d0:fb:cb:85:b7:cb:94:
87:d2:80:3f:e0:f3:d3:1d:bf:4f:10:54:27:79:b9:
ca:a3:92:52:7f:f8:b0:9a:a3:7a:5b:d2:2a:ca:f8:
6c:29:43:8d:4c:34:d4:f9:97:f3:83:79:aa:72:20:
4c:38:86:4b:95:58:91:ee:1d:17:6e:91:88:67:f1:
32:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C1:8B:D6:15:9E:2B:B6:27:C7:5C:D6:EF:A5:1E:EB:9E:E4:A1:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/C8GL1hWeK7Ynx1zW76Ue657koRw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198887
Signature Algorithm: sha256WithRSAEncryption
3e:72:b7:c6:ed:ff:15:9d:85:01:c2:af:4e:69:86:77:dc:11:
51:5e:48:97:9d:18:07:4e:76:07:97:95:c8:40:f5:a6:86:18:
62:ff:01:ed:bd:9d:09:68:af:84:56:ab:0e:fb:92:ce:22:83:
be:46:61:5a:95:07:b6:56:5a:4e:8e:0c:91:20:e4:c0:4f:e9:
e9:98:ab:12:d3:6b:ba:6a:65:bb:58:df:ff:c4:a8:bb:c0:c4:
33:ed:c8:20:08:1e:3e:69:55:53:f3:c5:d1:cd:fa:45:a0:c6:
2a:61:54:76:39:18:19:87:77:5c:21:cc:10:db:2c:4e:35:19:
d9:25:40:d2:79:e0:1d:74:37:b1:5b:4d:aa:3b:b5:6a:3d:e7:
09:a1:c0:5d:a4:3e:3d:24:c6:1f:a0:2d:1d:fd:34:07:d4:89:
31:1c:7a:4a:3d:1d:07:de:b0:cd:12:dd:ce:9e:7f:21:84:dd:
02:70:c1:7e:62:73:35:2c:14:d5:2f:19:48:24:94:64:4f:6e:
5e:00:d8:26:e4:73:e2:37:41:8e:6e:25:d9:1a:45:61:73:60:
bd:69:13:2d:5d:b3:35:f7:82:60:28:b0:cf:70:da:6a:52:35:
84:83:9f:da:c6:6d:80:db:22:27:a1:ff:ad:23:47:00:59:ab:
59:f3:62:bf
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZ2qYeOmHF6FTpYk+i2Sc1AGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDIwMTAxMzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmMxOGJkNjE1OWUyYmI2MjdjNzVjZDZlZmE1MWVlYjllZTRhMTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv90mWNDZuKUV6tZ47g262pe0Xm9g
RMfMIVAYNkcom/dPt6e04kSsgLOqIYcW2eQuiK0IzFa1gA9a+0Q/fInv+JG6irJ/
LdpZ3cvYAlzEYAFY78K5BKIKqXCHmfgaFsm6V+RT6U9PYj0JPxLkROeCmDtNYx3a
i58X5srWw8QTI4m23VIkpf239AJ3W542e3ueKXA4VwJVzlf2I3aSVjsP6xd+ftVr
oABg9s1qkphdqe3DTKNldgchmsFcetD7y4W3y5SH0oA/4PPTHb9PEFQnebnKo5JS
f/iwmqN6W9IqyvhsKUONTDTU+Zfzg3mqciBMOIZLlViR7h0XbpGIZ/EyGwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFAvBi9YVniu2J8dc1u+lHuue5KEcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhL2RhNGZh
Zi1mMDRkLTQ3OGMtYjczZS04NDRlNGU2OGEyNzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvZGE0ZmFm
LWYwNGQtNDc4Yy1iNzNlLTg0NGU0ZTY4YTI3NC8xL0M4R0wxaFdlSzdZbngxelc3
NlVlNjU3a29Sdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMI5zANBgkqhkiG9w0BAQsFAAOCAQEAPnK3xu3/FZ2F
AcKvTmmGd9wRUV5Il50YB052B5eVyED1poYYYv8B7b2dCWivhFarDvuSziKDvkZh
WpUHtlZaTo4MkSDkwE/p6ZirEtNrumplu1jf/8Sou8DEM+3IIAgePmlVU/PF0c36
RaDGKmFUdjkYGYd3XCHMENssTjUZ2SVA0nngHXQ3sVtNqju1aj3nCaHAXaQ+PSTG
H6AtHf00B9SJMRx6Sj0dB96wzRLdzp5/IYTdAnDBfmJzNSwU1S8ZSCSUZE9uXgDY
JuRz4jdBjm4l2RpFYXNgvWkTLV2zNfeCYCiwz3DaalI1hIOf2sZtgNsiJ6H/rSNH
AFmrWfNivw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:07:47 2026 by rpki-client