Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cM8vAv8fpzt72x-_g6u77C07HL0.cer
File: cM8vAv8fpzt72x-_g6u77C07HL0.cer (raw, json)
Hash identifier: rpQQkkVLfoU1Ne/nOQdnXm7NEqXcvGCbGijjp7V3aeI=
Subject key identifier: 70:CF:2F:02:FF:1F:A7:3B:7B:DB:1F:BF:83:AB:BB:EC:2D:3B:1C:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ECC440638D779E6E7B3E9FB91BC925
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215714
IP: 2a11:4f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:c4:40:63:8d:77:9e:6e:7b:3e:9f:b9:1b:c9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70cf2f02ff1fa73b7bdb1fbf83abbbec2d3b1cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:95:39:f1:88:54:1e:fd:87:8a:c1:8f:ec:
73:17:82:18:9f:b7:98:e7:5c:9d:fd:80:c2:94:2a:
1e:39:db:66:46:a8:8d:b2:eb:ac:89:1c:b5:30:0c:
c9:ee:cf:39:d1:8b:42:5e:0a:41:e6:79:db:a5:0c:
df:57:99:a5:b4:73:19:5c:54:72:8b:d1:54:60:ff:
65:65:c8:5d:48:4c:ba:d7:c4:e3:c6:8c:01:f0:eb:
43:45:bf:5a:7e:83:e3:9a:70:0c:ed:1e:18:3e:e3:
dc:12:62:35:5b:30:50:a1:27:94:5b:8b:90:39:8d:
bf:32:b7:98:25:14:62:c1:11:ab:6d:3f:4f:b3:3b:
95:66:c5:ea:a6:a7:4a:00:ba:4a:10:56:47:e1:0a:
88:a0:78:53:6b:86:e7:c9:bf:1b:3a:3a:c6:e9:6c:
21:ee:1c:c9:c5:bc:74:2c:07:7c:27:c8:b4:87:94:
e7:f1:23:c1:b4:3f:79:2b:3d:06:aa:c4:3c:e3:2a:
1c:6e:65:76:ea:40:e5:ff:48:eb:e1:f4:30:3a:a7:
28:a3:00:15:fb:fc:fe:8a:3f:ff:fb:4d:13:02:a0:
e5:06:31:64:fe:b4:b2:fc:72:74:01:7c:eb:74:ca:
37:53:68:00:ce:f1:9b:c5:d6:2c:ec:fa:23:52:7e:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CF:2F:02:FF:1F:A7:3B:7B:DB:1F:BF:83:AB:BB:EC:2D:3B:1C:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215714
Signature Algorithm: sha256WithRSAEncryption
1e:0a:35:f2:0a:95:11:2d:b0:71:dd:c4:23:65:13:a7:c6:22:
c2:d5:31:01:84:35:30:5a:08:21:d6:8b:8e:34:29:dc:18:fe:
7a:18:0d:bd:dd:f1:1d:68:67:c5:13:da:dd:57:3d:4a:cc:e6:
9d:fc:40:9a:ce:b5:a6:25:91:9a:49:07:ea:22:6a:bd:69:15:
04:26:55:02:cb:ab:82:97:97:be:e4:f1:f3:34:4b:f0:94:b3:
5d:aa:57:9e:96:2a:f7:dd:37:77:7b:21:23:ae:d9:22:40:25:
48:76:1d:df:52:33:76:6a:cf:28:58:2e:ce:16:8c:0f:33:8f:
09:7e:4b:a6:4d:d1:7c:b9:be:8f:35:4b:09:20:fc:1a:f2:44:
24:e3:17:eb:88:c9:85:3e:bd:ea:a4:b5:8b:c8:b2:00:f0:56:
b5:e8:b4:6c:3a:95:6b:29:2c:dc:5e:e5:ed:3d:5d:44:91:a7:
1b:6f:9b:24:70:30:9a:6e:76:fe:4e:9d:38:ca:57:f6:a9:54:
d3:d3:9a:4c:39:66:fd:f4:f7:a1:5e:cb:4e:ce:87:f4:ea:22:
93:3f:82:94:8c:f2:8a:09:91:3c:03:d9:d6:18:eb:7a:9d:c7:
ab:cb:d2:fe:15:17:94:9f:58:d7:3c:e0:8c:95:62:78:c8:30:
e1:da:cc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:52:00 2026 by rpki-client