Certificate
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
File: C8623AA6C30FA8E058243708F5672D7960E52389.cer (raw, json)
Hash identifier: xh+MW2FduGLhuo30+/bFrTnjBprE+rX9TK+QGtrFq9E=
Subject key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 43733E05346188390B218BCE92F2A5097AECFA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Manifest: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
caRepository: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/
Notify URL: https://rov-measurements.nlnetlabs.net/rrdp/notification.xml
Certificate not before: Sat 04 Jul 2026 19:49:28 +0000
Certificate not after: Sat 03 Jul 2027 19:54:28 +0000
Subordinate resources: IP: 2a04:b905::/32
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:73:3e:05:34:61:88:39:0b:21:8b:ce:92:f2:a5:09:7a:ec:fa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 4 19:49:28 2026 GMT
Not After : Jul 3 19:54:28 2027 GMT
Subject: CN=C8623AA6C30FA8E058243708F5672D7960E52389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:74:f5:21:88:8c:11:78:29:03:54:fe:81:
d4:69:60:51:c5:ed:67:d5:31:b3:fa:dc:72:24:6e:
8d:4e:cf:f5:18:ab:d8:ee:0f:f2:93:cb:45:6c:3f:
81:9c:fb:71:6e:0b:71:34:2e:c3:f3:9c:af:6d:00:
bf:36:5b:f2:d3:6f:29:fc:e3:eb:c4:a3:72:62:33:
de:ce:94:a9:92:10:f3:27:7c:9b:c8:04:ed:f7:d9:
bb:3d:79:c7:ae:52:dc:0b:b2:99:81:20:06:51:ec:
4d:4a:42:e7:5e:c7:84:6e:19:90:04:43:f9:47:8f:
cf:f4:68:38:9f:d4:15:58:66:57:f3:cc:9d:ac:01:
93:5f:61:e4:b3:6e:a6:47:07:ac:e5:1e:af:d6:30:
c4:d6:03:12:ec:25:17:16:c3:8f:2b:d5:7b:e9:d6:
63:f0:8e:78:7a:29:bc:3b:99:0e:f8:1e:86:7d:4a:
cb:a9:48:08:80:d4:32:3e:bc:38:88:14:eb:b8:4a:
22:1f:2f:c5:6f:c3:de:d1:32:bb:9f:8b:56:61:e6:
85:68:23:10:33:03:bd:5a:47:83:ef:f9:10:c4:98:
83:63:3a:d2:72:a9:af:54:58:05:d9:f4:71:53:e1:
54:79:08:e1:64:8a:f3:71:77:5a:a8:8e:39:3c:ca:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
CA Repository - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/
RPKI Manifest - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
RPKI Notify - URI:https://rov-measurements.nlnetlabs.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b905::/32
Signature Algorithm: sha256WithRSAEncryption
4e:d9:e6:5a:b1:84:4c:02:46:08:ed:33:7f:e2:15:13:c6:45:
e5:e7:9d:22:f6:0b:73:54:40:ef:73:8a:21:5b:0a:7d:78:6a:
bf:c8:6b:5e:97:f0:46:fd:2c:2f:ef:e5:42:8b:86:0b:f6:fe:
46:a9:a5:af:03:ab:cd:54:32:02:27:90:d4:77:51:3f:d1:f7:
fd:c5:32:c4:01:20:ea:3d:ff:28:4a:88:41:4f:42:db:2f:fd:
2a:1e:51:f3:72:48:0a:2a:f9:2e:c6:fc:65:0a:dd:14:c5:38:
07:07:d3:50:18:3a:ba:91:aa:6f:12:e5:05:2e:a8:d0:e7:51:
ac:f8:3f:06:53:44:06:2c:05:8d:31:64:c1:22:b1:6d:93:72:
5a:b9:83:36:a6:89:cb:3e:5e:f4:d2:e4:19:d8:6c:ef:d1:8f:
90:7c:cb:73:45:9a:b3:35:dd:72:12:89:96:20:6f:d7:94:d7:
bc:ad:31:ef:62:46:18:b4:09:40:60:22:b5:3c:bf:b2:d8:b7:
92:5f:86:73:4b:32:e6:92:a8:1b:d9:b6:bb:71:86:7e:c8:1b:
10:ee:19:3b:24:37:32:0d:38:7f:31:0a:76:c6:e3:f8:f9:bc:
f4:4e:03:e8:68:61:e3:cc:57:99:be:ac:f3:ad:c6:dd:2d:cd:
8e:d4:22:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:42 2026 by rpki-client