Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
File: CNC8jFiQLIynu4aewuKDAvpFFek.cer (raw, json)
Hash identifier: y9kSIPU7hya6x4iEJMGtX8V9WMDSW/BH4YmyEdsA2rM=
Subject key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A01DDF3782EE5AC4FDC36BCCBFCC0F6B1C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 20 Aug 2026 06:32:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 134.96.0.0/16
IP: 192.109.115.0 -- 192.109.116.255
IP: 193.17.22.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:df:37:82:ee:5a:c4:fd:c3:6b:cc:bf:cc:0f:6b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 20 06:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2a:e6:15:70:d4:af:e1:1d:e1:e6:a3:da:cf:
10:95:e5:ca:f3:d2:f0:4c:d9:58:1c:43:92:30:d5:
9d:d7:52:6d:77:31:2d:ff:5d:87:bf:4a:8c:59:d3:
0f:33:b3:fe:61:a4:67:b9:1b:1e:92:d9:03:2f:73:
5b:80:63:8f:b7:51:ba:0b:d4:b2:73:92:04:c1:17:
48:51:3c:5a:0f:e9:5c:8e:5f:0e:ba:56:7a:70:53:
1c:03:3e:ee:a3:3a:f7:99:80:ae:7c:a2:cf:f7:ce:
21:0a:94:a8:8e:e3:97:46:01:71:47:09:c2:2b:54:
d3:ba:aa:81:59:08:dd:d2:a6:ee:83:4f:f0:07:d3:
5a:10:04:58:bb:ac:99:60:a6:d6:88:76:39:88:2c:
a5:72:1d:8c:81:5b:19:4f:79:db:18:38:82:0d:ca:
84:82:8d:20:20:08:76:48:2d:2b:f1:6f:7d:5f:65:
31:52:b8:56:23:16:67:f7:5e:6e:3f:ca:12:d8:20:
4f:31:54:cb:38:2b:a6:0b:e7:0e:25:f8:9b:07:c2:
0c:20:ff:9d:36:ce:41:fe:58:67:28:4e:03:61:b3:
d3:58:49:e7:ad:c4:fb:ed:68:65:fd:fb:5b:ae:be:
7b:c9:c6:2c:7e:d2:f3:c7:28:fb:73:0b:8f:3f:92:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.96.0.0/16
192.109.115.0-192.109.116.255
193.17.22.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:5e:c4:a7:59:94:ed:7b:a7:ab:fd:78:28:bf:c8:b6:cb:8e:
14:5e:4c:c8:14:aa:77:02:1f:28:76:91:65:dd:b6:6a:9b:21:
b6:3b:42:c5:c0:35:d6:9c:0e:9f:31:29:f7:d3:ef:a1:69:f5:
90:ba:66:43:48:3c:d1:a9:64:22:22:b0:4d:c6:6d:57:a2:3a:
40:39:ab:5a:ed:d6:f0:70:cc:27:46:a3:52:4e:f3:3f:8c:3e:
00:cf:82:ac:a5:1b:cc:ee:be:3a:aa:8e:9c:e1:6e:ee:a8:02:
72:89:de:b5:84:1d:75:8f:63:9a:fd:a1:3b:7d:33:cc:fb:21:
95:ae:f1:19:65:5a:1d:18:e5:6c:d1:61:0a:a1:dc:a2:e6:f6:
f3:2e:a4:61:55:7d:43:3f:61:cf:e2:56:87:fe:56:88:1f:a2:
a5:b9:09:52:19:67:f1:fd:88:23:23:84:29:99:d4:6a:75:17:
cc:d1:cb:3d:4f:df:d1:e9:15:bb:ef:a0:b5:ed:dc:0f:af:30:
31:7e:f8:c5:0b:3c:18:7e:37:7a:85:e9:2c:59:7d:48:24:7b:
42:9a:90:86:47:f9:c8:58:d4:52:eb:65:d3:2f:0c:d3:d4:92:
9e:2a:56:7c:c3:85:b6:ac:15:22:fd:6b:ad:ae:ee:35:34:ce:
f3:5e:40:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:36:44 2026 by rpki-client