Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer
File: 8nlONzkr4v_oF5XX0WHwMwVqBs8.cer (raw, json)
Hash identifier: 9A2RPUIjCkqUDqlcZOmRsKweb/+q1BLDA2ysK74hPsI=
Subject key identifier: F2:79:4E:37:39:2B:E2:FF:E8:17:95:D7:D1:61:F0:33:05:6A:06:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F476564A1D998734C0AF6729B7C1DEB53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Jul 2026 15:00:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215230
IP: 2a07:a180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:65:64:a1:d9:98:73:4c:0a:f6:72:9b:7c:1d:eb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 9 15:00:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2794e37392be2ffe81795d7d161f033056a06cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:1f:9e:cc:e0:ef:eb:17:63:64:f7:01:3f:
56:91:93:bd:59:e0:42:ed:20:e5:78:91:a1:b6:4e:
72:bb:43:b4:6e:fd:55:eb:f2:76:0f:65:cf:a4:38:
81:3f:29:f0:9e:60:ad:ad:bb:a0:9d:66:a2:09:a4:
6b:7e:8b:de:3c:fd:c8:83:d5:19:db:2a:c1:f3:aa:
82:2e:4e:70:62:fe:92:df:d6:c9:54:2c:72:2e:83:
73:f5:b2:68:a6:4a:c6:96:3b:a2:8d:e7:4a:ee:f6:
19:86:e4:f6:a5:4b:67:93:3a:c5:ea:46:56:9d:dc:
09:af:1a:a1:77:63:c6:3e:0c:6a:f6:b2:49:b3:9b:
67:b5:c6:14:0b:cf:69:27:91:07:fc:e5:97:75:2b:
29:dc:9b:5c:75:45:26:4a:81:2a:30:3c:52:50:80:
b8:a6:9b:c8:ae:7e:7f:68:f6:06:35:8c:02:04:c1:
1e:00:09:d7:b6:5a:70:1f:49:48:ef:7f:f2:b8:e2:
86:39:7c:59:c7:25:81:77:d9:0b:e1:b7:35:92:de:
06:d0:2d:77:56:2c:1a:83:c0:b3:e5:81:31:b2:aa:
aa:b9:29:84:92:36:0a:e4:0d:e3:1f:93:b0:92:b9:
4d:02:6b:9d:d1:ef:47:8f:9b:71:8d:0e:e8:a8:d1:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:4E:37:39:2B:E2:FF:E8:17:95:D7:D1:61:F0:33:05:6A:06:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:a180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215230
Signature Algorithm: sha256WithRSAEncryption
8b:48:37:14:95:db:84:0d:f6:d9:8e:99:75:89:df:68:29:57:
8c:fa:82:bf:76:4c:e2:e8:cd:6b:87:ee:1f:a1:2f:28:1e:7b:
99:4b:f5:11:c2:ea:0f:16:cd:6a:04:b0:67:03:db:5e:10:4b:
42:33:4b:fe:7e:f7:a4:b4:51:54:c9:00:cf:6d:a8:7e:19:5a:
19:b1:9a:9f:37:40:36:63:0f:98:a9:92:87:df:59:b3:0e:24:
a7:dd:14:a8:ba:b4:f2:34:d3:be:15:47:54:b0:bf:14:99:5f:
98:02:51:2d:c2:54:3c:7d:03:f7:c9:33:50:a0:ee:b1:d3:ca:
5b:71:b2:ab:44:8f:d4:7d:be:71:c5:e8:28:dd:8c:19:b6:d3:
57:83:b1:5a:fc:80:7d:a1:70:23:3a:eb:89:23:32:ab:92:3f:
7f:a4:3b:8b:9f:aa:13:d4:15:e1:d8:51:d2:20:6c:c9:7a:b4:
01:fa:10:4f:a4:6b:52:3b:21:09:c2:f2:64:9a:b7:b5:6b:a2:
ae:25:fa:11:dc:90:4b:31:73:8a:ff:37:ca:ed:e5:5c:8f:e9:
0d:ab:dc:b0:d1:3a:68:b9:90:20:35:d5:1c:fc:dc:9c:2d:c1:
e6:3b:2d:3b:bf:2c:b5:8c:22:90:e2:54:8f:e0:09:c2:ab:18:
59:0e:21:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:30:36 2026 by rpki-client