Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/r8l037JMymsg8zUCe681KCOmrYk.cer
File: r8l037JMymsg8zUCe681KCOmrYk.cer (raw, json)
Hash identifier: HBs+K813dZX1PuiaNRGXa0yogBrETN1Jpoeeteg5bu0=
Subject key identifier: AF:C9:74:DF:B2:4C:CA:6B:20:F3:35:02:7B:AF:35:28:23:A6:AD:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F173D80CC690EC1AAE6C3CDC30D602522
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/r8l037JMymsg8zUCe681KCOmrYk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 06:35:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 143.53.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:3d:80:cc:69:0e:c1:aa:e6:c3:cd:c3:0d:60:25:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 06:35:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afc974dfb24cca6b20f335027baf352823a6ad89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:a8:99:96:48:20:ac:b9:6f:12:ae:9d:00:
79:6e:52:1c:6f:3d:a0:ba:52:49:e4:4e:7c:ff:33:
e2:71:e0:3c:85:13:39:42:11:b3:8b:ca:96:97:bf:
0d:e8:33:21:99:bf:43:08:9e:4f:06:9a:ed:4b:43:
0e:0a:18:40:e4:92:22:32:55:ce:a0:8e:79:c8:0b:
4b:2e:b2:f9:5e:30:73:23:e7:f3:f8:a5:c9:9f:34:
09:60:4e:e7:7a:3c:12:b3:24:06:c4:ce:b4:fe:90:
2c:4e:9f:d6:ef:0f:dc:51:57:6d:83:43:cb:6d:51:
cd:11:56:11:a6:82:67:d9:82:a7:a6:56:fb:a7:95:
a9:ca:ff:e3:ba:c7:d2:db:10:9b:b0:fd:01:a5:19:
1a:0d:0f:25:0b:4a:d2:88:4e:dd:0f:2e:55:bc:0c:
92:08:c7:31:ee:54:0f:05:6a:fb:ef:09:4e:8c:3e:
b5:56:22:ab:51:8f:19:ce:62:e5:8b:80:e7:76:b8:
cc:50:b4:b4:a0:5c:5e:38:fa:76:67:55:77:b9:fe:
93:ad:63:bb:b6:1b:51:14:b6:cd:36:73:ac:f0:f4:
30:df:de:4d:88:f9:6c:89:79:11:6c:d2:61:7f:f4:
ec:b0:f0:21:79:c7:71:4d:74:9c:52:c3:e1:da:fe:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C9:74:DF:B2:4C:CA:6B:20:F3:35:02:7B:AF:35:28:23:A6:AD:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/r8l037JMymsg8zUCe681KCOmrYk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:00:b6:cd:84:89:a9:5c:3a:e5:99:17:b7:0a:2a:c0:61:6b:
04:31:15:61:e6:75:42:a0:51:93:50:12:76:bd:25:1b:45:7b:
fc:1e:72:be:80:74:0c:ff:0c:53:7f:b9:fb:c2:42:0d:81:c5:
d8:1d:41:a1:90:04:a9:a2:39:cc:37:63:7b:51:b5:24:b9:ea:
2e:e4:4f:32:a8:77:46:15:b5:61:a9:4f:1d:63:a8:25:a1:46:
13:68:6d:31:b5:12:2f:a2:59:82:2a:65:6f:de:53:aa:01:81:
a8:bd:a8:cf:aa:94:35:69:48:7b:85:6a:45:ac:b3:80:75:a0:
de:f9:5d:b0:b2:cf:40:c0:4e:d8:15:11:2b:49:35:1d:46:9a:
d5:58:80:e3:46:8e:5d:6c:f8:39:02:6e:1e:64:6c:92:9e:21:
22:b2:37:dd:a0:4d:14:77:27:42:67:1f:29:cd:4f:f3:5a:cf:
90:f4:9b:65:80:9e:f5:3a:92:a6:8e:b8:2a:3c:d8:f5:dd:d8:
b4:c0:57:16:b6:61:6d:6a:ac:7a:05:ac:51:63:0f:4b:51:02:
7b:89:d9:24:5a:f3:2f:4c:75:49:94:f4:f4:8f:d7:f0:67:13:
c0:e8:6c:e7:18:82:77:d4:5b:4d:d6:c5:5b:1a:de:06:17:18:
e7:76:f0:5c
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZ8XPYDMaQ7BqubDzcMNYCUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMDYzNTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmM5NzRkZmIyNGNjYTZiMjBmMzM1MDI3YmFmMzUyODIzYTZhZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtSomZZIIKy5bxKunQB5blIcbz2g
ulJJ5E58/zPiceA8hRM5QhGzi8qWl78N6DMhmb9DCJ5PBprtS0MOChhA5JIiMlXO
oI55yAtLLrL5XjBzI+fz+KXJnzQJYE7nejwSsyQGxM60/pAsTp/W7w/cUVdtg0PL
bVHNEVYRpoJn2YKnplb7p5Wpyv/jusfS2xCbsP0BpRkaDQ8lC0rSiE7dDy5VvAyS
CMcx7lQPBWr77wlOjD61ViKrUY8ZzmLli4DndrjMULS0oFxeOPp2Z1V3uf6TrWO7
thtRFLbNNnOs8PQw395NiPlsiXkRbNJhf/TssPAhecdxTXScUsPh2v6/JwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFK/JdN+yTMprIPM1AnuvNSgjpq2JMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzA1MTJj
ZC0yM2QxLTRlYzgtYmMyYS1jNWI0ZDU3ODk1MDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvMDUxMmNk
LTIzZDEtNGVjOC1iYzJhLWM1YjRkNTc4OTUwMS8xL3I4bDAzN0pNeW1zZzh6VUNl
NjgxS0NPbXJZay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAjzUwDQYJKoZIhvcNAQELBQADggEBAA0Ats2E
ialcOuWZF7cKKsBhawQxFWHmdUKgUZNQEna9JRtFe/wecr6AdAz/DFN/ufvCQg2B
xdgdQaGQBKmiOcw3Y3tRtSS56i7kTzKod0YVtWGpTx1jqCWhRhNobTG1Ei+iWYIq
ZW/eU6oBgai9qM+qlDVpSHuFakWss4B1oN75XbCyz0DATtgVEStJNR1GmtVYgONG
jl1s+DkCbh5kbJKeISKyN92gTRR3J0JnHynNT/Naz5D0m2WAnvU6kqaOuCo82PXd
2LTAVxa2YW1qrHoFrFFjD0tRAnuJ2SRa8y9MdUmU9PSP1/BnE8DobOcYgnfUW03W
xVsa3gYXGOd28Fw=
-----END CERTIFICATE-----
Generated at Sun Nov 15 19:08:47 2026 by rpki-client