Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
File: X-U8C_w8j7VrgRkTFxREQ-DinSU.cer (raw, json)
Hash identifier: mIuFXak3gUteaC4TxObsZ5Ibrsd9p/3Jf+B0sVU0QTs=
Subject key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FB78C702218C33050E03F9389758CE737
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 31 Jul 2026 09:41:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 87.232.80.0/20
IP: 89.126.224.0/21
IP: 130.78.184.0/21
IP: 205.234.120.0/21
IP: 2a03:cdc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:8c:70:22:18:c3:30:50:e0:3f:93:89:75:8c:e7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 31 09:41:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:3e:ed:66:6a:e8:90:20:6e:65:c0:57:49:
5e:8f:12:ba:ff:25:05:8c:11:31:a5:bf:a6:ad:66:
23:0e:5c:19:e2:75:41:d1:b0:3d:0d:2b:8c:56:28:
6f:63:13:40:ff:bb:e5:32:2e:d8:8c:5e:a1:ef:83:
25:6c:e1:13:00:9f:38:8c:a8:73:bc:96:13:11:65:
1b:4b:02:28:bf:2e:6e:5e:b4:1e:60:13:54:f4:53:
e0:da:60:df:09:d9:9f:6f:0c:6c:4f:b4:ac:15:e7:
2c:1e:2a:0e:70:7e:41:e2:98:94:00:d1:d5:bf:5d:
1a:e7:fa:11:e4:2e:48:6e:12:22:51:f6:78:a6:99:
14:67:88:ac:06:eb:50:98:b1:34:7a:4e:fb:42:5a:
19:40:cd:54:eb:2a:da:90:b2:cf:4f:d4:f6:17:21:
d9:21:c0:09:0b:e4:01:cb:b3:47:e3:90:6f:e6:29:
55:d3:5d:07:f2:ea:bb:cc:dd:20:e1:d2:f6:4a:9c:
f1:03:5f:4e:19:5d:86:4d:78:e7:df:a6:12:cb:39:
8c:66:13:d4:53:4b:f2:df:10:35:f9:23:c4:2f:ba:
53:89:50:21:c4:08:95:8b:d6:c5:34:d8:51:a6:f9:
fa:8b:2c:98:47:ea:cb:7e:7e:b8:4d:18:8b:17:82:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.80.0/20
89.126.224.0/21
130.78.184.0/21
205.234.120.0/21
IPv6:
2a03:cdc0::/29
Signature Algorithm: sha256WithRSAEncryption
73:93:42:3a:0c:23:33:13:a9:90:3e:02:72:7a:78:83:05:07:
f1:c1:eb:51:c5:14:6d:d1:42:0f:c0:80:ad:a7:50:89:51:35:
81:0b:4c:56:b4:c6:d7:2d:82:49:2c:27:34:d5:f7:cb:61:72:
77:72:8b:99:68:dc:96:a9:09:1a:71:cf:bb:82:52:7a:a9:cd:
1f:49:13:a1:2f:b2:66:6c:68:69:f1:5b:1f:98:14:a3:d5:4c:
0e:56:f2:2f:35:ff:98:bb:6b:49:4f:81:da:aa:cd:6d:c1:25:
94:7f:85:e0:00:c2:ad:03:1a:b5:c4:86:0a:5e:3e:6b:12:5c:
5a:02:0b:b7:59:af:3e:b3:49:73:e8:0e:f6:1b:31:5a:59:57:
60:6f:c8:19:32:44:12:ab:eb:9f:b2:df:14:82:09:bc:df:7d:
79:39:e4:9c:8a:ee:1f:51:19:4a:57:9d:25:50:62:b8:63:c1:
ba:2e:0b:23:05:57:3d:6b:b0:77:b7:2e:c3:39:15:6b:f3:94:
7e:e6:02:55:80:10:aa:fb:3a:e0:20:48:9a:ac:5d:e2:81:92:
25:1e:81:d9:1e:82:0a:f1:3e:f3:a3:24:da:cb:4c:01:f7:3a:
0c:08:98:80:a0:24:81:03:b2:dc:22:1a:97:72:01:c7:2f:b2:
09:09:14:36
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAZ+3jHAiGMMwUOA/k4l1jOc3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNzMxMDk0MTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmU1M2MwYmZjM2M4ZmI1NmI4MTE5MTMxNzE0NDQ0M2UwZTI5ZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqA+7WZq6JAgbmXAV0lejxK6/yUF
jBExpb+mrWYjDlwZ4nVB0bA9DSuMVihvYxNA/7vlMi7YjF6h74MlbOETAJ84jKhz
vJYTEWUbSwIovy5uXrQeYBNU9FPg2mDfCdmfbwxsT7SsFecsHioOcH5B4piUANHV
v10a5/oR5C5IbhIiUfZ4ppkUZ4isButQmLE0ek77QloZQM1U6yrakLLPT9T2FyHZ
IcAJC+QBy7NH45Bv5ilV010H8uq7zN0g4dL2SpzxA19OGV2GTXjn36YSyzmMZhPU
U0vy3xA1+SPEL7pTiVAhxAiVi9bFNNhRpvn6iyyYR+rLfn64TRiLF4LT+wIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFF/lPAv8PI+1a4EZExcUREPg4p0lMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkL2JjNjA4
OS0zZDkwLTQ1MjktYmI0Ny01Y2Y1NmVlNDM1YjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvYmM2MDg5
LTNkOTAtNDUyOS1iYjQ3LTVjZjU2ZWU0MzViMy8xL1gtVThDX3c4ajdWcmdSa1RG
eFJFUS1EaW5TVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQEV+hQAwQDWX7gAwQDgk64AwQDzep4MA0EAgAC
MAcDBQMqA83AMA0GCSqGSIb3DQEBCwUAA4IBAQBzk0I6DCMzE6mQPgJyeniDBQfx
wetRxRRt0UIPwICtp1CJUTWBC0xWtMbXLYJJLCc01ffLYXJ3couZaNyWqQkacc+7
glJ6qc0fSROhL7JmbGhp8VsfmBSj1UwOVvIvNf+Yu2tJT4Haqs1twSWUf4XgAMKt
Axq1xIYKXj5rElxaAgu3Wa8+s0lz6A72GzFaWVdgb8gZMkQSq+ufst8Uggm83315
OeSciu4fURlKV50lUGK4Y8G6LgsjBVc9a7B3ty7DORVr85R+5gJVgBCq+zrgIEia
rF3igZIlHoHZHoIK8T7zoyTay0wB9zoMCJiAoCSBA7LcIhqXcgHHL7IJCRQ2
-----END CERTIFICATE-----
Generated at Wed Aug 12 20:20:25 2026 by rpki-client