Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
File: 8q280-RMK5z2PCX2WU9kMoSlmA4.cer (raw, json)
Hash identifier: 65m6TngHIbvGbYBmLO/NSue3nkrnkm+IrAdJG4JLHX0=
Subject key identifier: F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DC594975D7939E56A086CF011CC2B0532
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
caRepository: rsync://krill.byhill.de/repo/byhill-ca/0/
Notify URL: https://krill.byhill.de/rrdp/notification.xml
Certificate not before: Sat 25 Apr 2026 16:59:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215110
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c5:94:97:5d:79:39:e5:6a:08:6c:f0:11:cc:2b:05:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 25 16:59:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:17:d5:b3:81:0e:2d:ca:ba:82:6a:87:27:
56:cf:f2:b9:86:7a:90:da:a3:8f:6f:33:be:54:b4:
1e:c5:48:2b:de:f8:55:f0:88:ee:3f:32:32:02:46:
9c:ab:ee:6f:41:25:81:a2:40:f7:5d:25:a8:f5:c3:
bf:4a:db:90:a4:97:79:a7:83:e7:89:75:98:7a:23:
54:dc:11:61:92:53:0c:55:e3:b4:66:05:7d:ee:aa:
d6:62:d6:d0:e4:9e:1c:f6:0d:06:85:5b:e3:fd:03:
57:11:cc:08:b5:2a:0b:0f:28:e3:62:e1:53:3e:d8:
37:88:5f:87:1b:26:1e:e1:ba:92:c9:6b:02:fc:c3:
93:d3:2d:db:26:03:85:c9:21:76:8e:87:38:a5:07:
22:95:35:5c:83:04:db:c3:0e:03:86:aa:5c:f7:ff:
1b:1d:e4:78:59:46:1f:81:d1:79:6f:58:34:d6:91:
83:8d:6b:6a:14:fa:13:02:b8:e7:84:15:33:64:3e:
2c:41:18:e6:ea:13:fa:0b:2a:3f:ab:c9:4a:1c:7e:
60:35:36:16:18:c7:c0:99:d9:a0:4d:54:7f:71:25:
e5:d5:ed:59:47:0e:3e:fc:ad:7e:c9:3d:3d:62:12:
95:08:4f:cc:8e:f2:c5:c3:bc:2e:7f:c8:5a:fd:13:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://krill.byhill.de/repo/byhill-ca/0/
RPKI Manifest - URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
RPKI Notify - URI:https://krill.byhill.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215110
Signature Algorithm: sha256WithRSAEncryption
a7:53:ad:24:ba:2e:79:8d:5f:c0:49:69:2f:28:ac:35:12:c5:
ae:ae:25:5f:de:9b:d9:4a:50:51:78:53:bf:dd:92:98:63:df:
6f:66:82:65:be:4c:4a:57:15:7a:82:19:9b:83:4a:24:52:59:
fd:ba:28:66:d5:bc:51:6e:a5:f7:06:09:4a:9b:dd:eb:0e:8e:
c8:63:69:42:5b:4e:6d:67:7e:96:e4:d8:e6:76:6a:9b:45:43:
ee:0d:4d:ff:c2:9a:a3:78:80:7f:6a:63:ab:8c:9f:1f:31:e1:
5b:4b:f2:e5:8d:85:cf:44:1d:ec:57:36:88:ad:7a:ff:39:57:
ca:86:d9:14:a4:5c:23:1e:70:fc:84:b2:f2:fe:b6:78:7b:2c:
fb:db:73:d3:70:5b:ef:3c:37:2b:4f:7c:83:cb:1d:94:60:ca:
a9:60:c0:7b:be:10:ee:b3:33:80:50:0b:ed:90:bb:d9:80:3b:
34:c4:e8:50:74:e4:5e:1a:f9:fa:97:45:9f:80:a6:92:eb:07:
00:65:83:1e:a5:d2:0e:35:09:bc:35:8d:b9:f7:0e:96:09:92:
64:2f:67:80:ec:23:8e:7a:aa:11:61:8c:26:59:b4:c7:c1:a8:
7b:1e:3c:04:75:5d:56:ca:dc:d3:77:60:2d:04:75:7d:8a:66:
7c:a0:37:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:39:24 2026 by rpki-client