Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
File: X-U8C_w8j7VrgRkTFxREQ-DinSU.cer (raw, json)
Hash identifier: QzD9ZAfhh1UXMgua+V6GP7MoRz3MKvEhsDf5rOg/k4M=
Subject key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CD7CB6040283B980DED15BB03AF4D401F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Mar 2026 12:49:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 87.232.80.0/20
IP: 89.126.224.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:cb:60:40:28:3b:98:0d:ed:15:bb:03:af:4d:40:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 10 12:49:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:3e:ed:66:6a:e8:90:20:6e:65:c0:57:49:
5e:8f:12:ba:ff:25:05:8c:11:31:a5:bf:a6:ad:66:
23:0e:5c:19:e2:75:41:d1:b0:3d:0d:2b:8c:56:28:
6f:63:13:40:ff:bb:e5:32:2e:d8:8c:5e:a1:ef:83:
25:6c:e1:13:00:9f:38:8c:a8:73:bc:96:13:11:65:
1b:4b:02:28:bf:2e:6e:5e:b4:1e:60:13:54:f4:53:
e0:da:60:df:09:d9:9f:6f:0c:6c:4f:b4:ac:15:e7:
2c:1e:2a:0e:70:7e:41:e2:98:94:00:d1:d5:bf:5d:
1a:e7:fa:11:e4:2e:48:6e:12:22:51:f6:78:a6:99:
14:67:88:ac:06:eb:50:98:b1:34:7a:4e:fb:42:5a:
19:40:cd:54:eb:2a:da:90:b2:cf:4f:d4:f6:17:21:
d9:21:c0:09:0b:e4:01:cb:b3:47:e3:90:6f:e6:29:
55:d3:5d:07:f2:ea:bb:cc:dd:20:e1:d2:f6:4a:9c:
f1:03:5f:4e:19:5d:86:4d:78:e7:df:a6:12:cb:39:
8c:66:13:d4:53:4b:f2:df:10:35:f9:23:c4:2f:ba:
53:89:50:21:c4:08:95:8b:d6:c5:34:d8:51:a6:f9:
fa:8b:2c:98:47:ea:cb:7e:7e:b8:4d:18:8b:17:82:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.80.0/20
89.126.224.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:6e:f5:f8:7a:2e:9a:b7:83:82:60:3b:0a:e2:fd:28:ae:f2:
94:c5:e0:76:18:1d:b9:76:07:35:3a:f7:58:76:a5:7b:a7:25:
13:b2:cc:f0:be:34:77:b6:b3:0b:f0:6a:87:33:32:60:b3:f8:
4e:1f:a7:0e:dc:ac:d0:09:94:39:8d:4e:23:82:b9:0c:83:9f:
e6:d6:50:1f:aa:c3:7d:ea:e9:21:79:a5:81:08:20:57:5e:bf:
1d:e9:2e:b8:fe:c0:24:27:a1:2d:ac:f3:f5:8c:00:24:a6:ac:
d7:21:74:12:21:03:00:8b:af:aa:e9:fc:65:30:b6:bf:97:24:
3f:a1:5f:28:e2:64:fe:05:39:5b:3d:6b:cb:bf:25:1c:0f:ca:
0d:42:38:6e:b0:fa:65:6a:8a:f1:76:ae:f1:11:de:21:35:dd:
5a:39:7d:99:ee:a2:1e:30:fe:c0:18:5f:5c:81:b5:4a:a0:19:
19:0e:f5:e6:00:6a:56:06:2b:f2:2b:fb:c9:12:9d:9e:9f:e9:
b5:85:8b:9c:9c:e4:27:ea:96:f8:0a:62:4a:97:d4:3d:2d:48:
60:04:79:15:eb:54:57:d4:9c:ee:ca:fb:37:86:10:82:16:f9:
fc:76:24:23:d7:52:f5:d6:cc:9f:5b:90:5a:15:35:c9:36:6e:
a7:2b:d8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:35:30 2026 by rpki-client