Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
File: 8457gT6aM4MKE7jBiDhMLcTHXJc.cer (raw, json)
Hash identifier: ckO0L9oaaHG76jJkYOp0lFWfR5MBigNc3iOvZN62PYU=
Subject key identifier: F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB6547A4F0BF07E470DAAE950E6DCA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200944
IP: 91.199.36.0/24
IP: 185.90.116.0/22
IP: 2a03:86e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 07:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:65:47:a4:f0:bf:07:e4:70:da:ae:95:0e:6d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:df:c6:de:7c:d2:e6:fe:93:dc:90:53:39:
f3:1f:10:35:d6:dd:0c:87:17:78:e2:6d:d8:b8:6c:
09:fb:e0:45:e0:4f:34:95:c2:aa:5c:4c:2c:87:5d:
a8:5e:97:67:76:7c:e1:26:22:41:d7:4c:2b:61:10:
0e:22:54:13:fe:f4:4d:52:69:da:50:49:a5:4a:fb:
13:6c:30:bd:d9:d8:cd:3e:c4:a0:39:2c:85:cf:ff:
aa:bc:f7:9c:0d:2a:ec:13:59:9b:2b:9d:35:fe:e3:
cf:6e:c9:ae:ae:86:13:b5:4b:68:ea:68:12:a0:bb:
1d:2f:bb:5f:c7:50:41:0c:2c:f4:92:58:0e:8e:bd:
75:35:5f:a2:d8:bf:bc:cf:00:72:ce:45:8e:c5:d0:
be:19:ed:5e:b2:8e:d8:59:8e:0c:33:1d:3b:c6:ea:
94:9c:4a:6c:39:43:43:4c:1a:20:eb:32:46:b0:4d:
48:ed:a1:c0:55:f1:bf:7f:a3:6a:03:68:a8:a2:91:
5b:46:8c:7a:80:ce:3c:43:f1:6c:72:ed:e0:dd:25:
f6:7a:ac:cb:2b:11:fd:00:f0:79:df:5e:af:41:a6:
4e:12:b5:8e:41:3a:8e:34:9a:06:ad:01:51:3a:96:
e1:e8:8d:fa:b5:aa:a1:f7:5c:e1:9f:52:b7:cb:e2:
d4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.36.0/24
185.90.116.0/22
IPv6:
2a03:86e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200944
Signature Algorithm: sha256WithRSAEncryption
04:fe:8b:f4:ab:74:0f:ee:50:82:18:59:86:03:49:1b:fc:8a:
d2:f0:3b:0c:aa:f3:7c:14:f7:30:f4:c8:f4:95:15:85:2d:99:
64:8e:b6:c8:d3:0c:cd:54:2a:f6:0d:45:e4:ed:84:e0:bb:25:
b3:53:f5:58:fa:83:26:bb:68:ab:ee:6b:01:f5:4f:69:34:bf:
bb:e2:ab:cc:72:18:e1:38:29:79:f9:df:57:9c:1f:a7:7b:b1:
99:07:1f:3d:8f:88:f2:0a:6d:3d:2b:ff:c3:97:c7:d7:12:6c:
cf:1f:92:cd:65:b4:8e:2c:41:6c:25:c3:6e:b2:8c:fc:0a:53:
8f:7a:aa:32:a1:66:12:33:22:67:ee:3e:8e:72:6c:fa:01:af:
fb:dc:be:52:8b:a5:da:a9:7d:1b:94:9f:43:b8:b8:af:89:4e:
f3:3c:7b:3d:23:e5:34:2f:8c:d7:5a:d5:14:73:a8:3a:23:10:
f7:6f:74:56:21:c2:bc:fd:5b:77:d3:67:70:43:17:9f:1c:de:
bc:c1:d3:0e:ef:35:57:22:55:2a:87:d8:3f:77:43:07:da:c7:
be:ff:4f:5e:8b:ab:a7:1e:a3:86:d1:e8:78:05:0a:28:88:c2:
99:36:e6:93:51:92:ed:0e:38:d2:bd:2e:23:38:04:3c:1e:37:
cc:72:cd:a6
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZ8Y+2VHpPC/B+Rw2q6VDm3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzhlN2I4MTNlOWEzMzgzMGExM2I4YzE4ODM4NGMyZGM0Yzc1Yzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy53fxt580ub+k9yQUznzHxA11t0M
hxd44m3YuGwJ++BF4E80lcKqXEwsh12oXpdndnzhJiJB10wrYRAOIlQT/vRNUmna
UEmlSvsTbDC92djNPsSgOSyFz/+qvPecDSrsE1mbK501/uPPbsmuroYTtUto6mgS
oLsdL7tfx1BBDCz0klgOjr11NV+i2L+8zwByzkWOxdC+Ge1eso7YWY4MMx07xuqU
nEpsOUNDTBog6zJGsE1I7aHAVfG/f6NqA2ioopFbRox6gM48Q/Fscu3g3SX2eqzL
KxH9APB5316vQaZOErWOQTqONJoGrQFROpbh6I36taqh91zhn1K3y+LUqQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFPOOe4E+mjODChO4wYg4TC3Ex1yXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzY0ZGY4
ZS00YjA0LTQyMjMtODQ2Ny05OTM5ZGYxZDBkMDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvNjRkZjhl
LTRiMDQtNDIyMy04NDY3LTk5MzlkZjFkMGQwOS8xLzg0NTdnVDZhTTRNS0U3akJp
RGhNTGNUSFhKYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAW8ckAwQCuVp0MA0EAgACMAcDBQAqA4bgMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMQ8DANBgkqhkiG9w0BAQsFAAOCAQEABP6L
9Kt0D+5QghhZhgNJG/yK0vA7DKrzfBT3MPTI9JUVhS2ZZI62yNMMzVQq9g1F5O2E
4Lsls1P1WPqDJrtoq+5rAfVPaTS/u+KrzHIY4TgpefnfV5wfp3uxmQcfPY+I8gpt
PSv/w5fH1xJszx+SzWW0jixBbCXDbrKM/ApTj3qqMqFmEjMiZ+4+jnJs+gGv+9y+
Uoul2ql9G5SfQ7i4r4lO8zx7PSPlNC+M11rVFHOoOiMQ9290ViHCvP1bd9NncEMX
nxzevMHTDu81VyJVKofYP3dDB9rHvv9PXourpx6jhtHoeAUKKIjCmTbmk1GS7Q44
0r0uIzgEPB43zHLNpg==
-----END CERTIFICATE-----
Generated at Tue Jul 7 10:40:39 2026 by rpki-client