Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer
File: v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer (raw, json)
Hash identifier: 70iHt2asI7c7rPSJlVWzS2IlY9ulSG0lyGKGqrJxJ6o=
Subject key identifier: BF:C1:E6:D5:9E:8E:0F:12:FC:33:61:B1:71:30:AD:F5:3C:E2:68:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C90154937101D29F0D765B9D430525949
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Feb 2026 14:37:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202152
IP: 185.131.16.0/22
IP: 2a06:3280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:15:49:37:10:1d:29:f0:d7:65:b9:d4:30:52:59:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 14:37:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfc1e6d59e8e0f12fc3361b17130adf53ce26872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:1d:90:31:97:7d:34:1b:9d:5a:02:cb:07:
d0:aa:00:df:ad:e0:35:87:da:81:5b:00:e5:07:db:
92:73:0f:b2:8d:92:d9:12:9f:48:d0:4f:41:0f:4e:
6d:ea:73:05:ef:64:83:a1:22:6f:7e:9e:d1:d6:ac:
9a:e1:27:a1:18:91:09:de:5a:28:f6:94:fd:a4:69:
23:a8:43:41:08:08:44:93:e0:f7:69:6d:c7:f7:bd:
cf:17:62:dd:0b:aa:0f:e0:50:b9:e4:63:62:ca:89:
3d:d3:ea:3c:d4:4e:b8:00:ea:0d:46:54:32:71:9d:
f2:6d:d0:fd:0c:1e:a2:a4:ac:23:82:26:b9:e4:a1:
46:4a:aa:d1:15:58:68:2c:ba:0d:21:e7:02:23:c3:
84:43:8d:b4:25:d0:c8:38:0a:5c:68:a6:fe:f2:e9:
92:1d:ca:47:1b:f2:fd:a4:6e:14:ff:36:f4:60:19:
42:c4:85:8d:29:df:84:99:b6:6e:da:53:fd:b2:48:
15:89:a5:45:90:fa:41:6e:3b:66:bb:c6:39:5b:0a:
2b:a7:f1:97:a4:b8:21:e9:75:ca:ea:ba:63:6e:6f:
8e:95:f2:9b:63:ff:e1:5e:84:cc:6a:ce:06:2e:2f:
ae:9a:21:f3:ca:92:7f:79:af:5b:a8:12:ed:a3:98:
8c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C1:E6:D5:9E:8E:0F:12:FC:33:61:B1:71:30:AD:F5:3C:E2:68:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.16.0/22
IPv6:
2a06:3280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202152
Signature Algorithm: sha256WithRSAEncryption
a0:12:7e:85:a1:7b:d6:da:eb:1a:ad:bd:e8:09:cc:7c:06:03:
6f:19:f8:f4:0f:ce:c9:53:82:59:98:a9:d0:e3:34:7a:65:19:
b5:a8:44:02:09:d3:df:bd:1a:76:88:4b:0c:04:1c:20:d7:40:
51:f5:23:77:a7:55:88:5d:01:61:06:9d:7b:8e:b9:57:bb:38:
1d:09:b7:50:93:48:69:f9:22:1f:88:ba:24:1f:86:36:a2:63:
4d:c8:59:89:4f:66:8d:d4:78:0e:9e:a1:ee:c3:f3:4e:2a:65:
b1:64:95:74:e2:42:08:71:ea:7b:d7:42:d5:a4:b2:1a:0c:0b:
59:2e:48:ff:b7:04:c3:6c:35:6e:b4:24:d8:57:9a:4d:70:c0:
b0:8f:f4:c5:b0:05:29:2e:a8:36:25:4f:a5:7d:0e:67:a8:40:
2c:55:52:dc:74:ef:94:7f:27:38:4c:72:a4:fe:a2:b6:c3:2e:
10:fc:fc:7e:33:f1:05:f7:5f:86:7a:21:06:68:c3:0c:0d:44:
81:db:c5:af:7c:3f:4e:6d:16:d6:ef:65:a2:d3:53:c0:1b:03:
a4:e5:80:47:e0:ed:29:92:30:5c:6d:8b:02:d7:2a:41:be:7a:
cb:1a:14:d1:34:22:cf:06:99:cc:09:48:15:f8:8a:fc:84:7b:
1d:41:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:26 2026 by rpki-client