Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gnff8FJ6VIBMlJwPjutSh2LhECY.cer
File: gnff8FJ6VIBMlJwPjutSh2LhECY.cer (raw, json)
Hash identifier: ChFMbsugLIRjwffwU6RuXaQjF9UYYVGjzvi3MFd2uaU=
Subject key identifier: 82:77:DF:F0:52:7A:54:80:4C:94:9C:0F:8E:EB:52:87:62:E1:10:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB74302515B72235D770A0E42CFF2F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.246.120.0/22
IP: 2a0d:8280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:74:30:25:15:b7:22:35:d7:70:a0:e4:2c:ff:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8277dff0527a54804c949c0f8eeb528762e11026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:92:9f:38:38:b3:71:9b:65:46:07:c6:06:
9a:74:d6:42:3c:d5:a7:55:57:31:97:39:2a:de:03:
74:8a:23:23:d3:b5:09:5e:37:ff:69:9c:fa:75:79:
99:4f:d6:73:b7:f6:ee:96:0b:32:82:96:cf:11:8f:
44:2b:cd:e9:b5:18:03:85:4f:78:38:54:66:d6:d4:
a4:3d:f6:da:f0:f7:2e:a7:fc:cd:d5:71:1c:cd:b8:
64:52:af:74:f2:dc:de:4d:ae:6d:89:9f:e7:1d:21:
bb:ac:82:a3:79:39:64:13:98:eb:8f:af:45:7a:a6:
71:24:38:c3:42:41:24:83:35:d7:4d:27:f9:91:81:
8c:99:d6:19:e2:8c:68:25:6e:bc:85:70:c2:89:8e:
ed:0e:af:98:b3:d6:29:ed:2c:c1:70:c4:1a:f7:1d:
4f:43:2d:4d:f0:49:ef:48:6c:9c:8e:51:21:cb:6a:
dd:c4:e5:43:41:f8:b5:0d:75:50:fd:4a:68:50:cd:
fe:09:ae:92:0a:2f:ff:7c:26:0e:1c:ec:ff:05:f4:
f9:08:72:17:e1:28:74:ef:7c:76:b9:c3:c9:57:c9:
35:88:50:81:7f:2b:18:66:a8:b3:c3:6d:2f:e2:0a:
c5:8b:3f:16:00:2f:3e:0c:b9:44:f5:ec:b3:b2:77:
e1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:77:DF:F0:52:7A:54:80:4C:94:9C:0F:8E:EB:52:87:62:E1:10:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/gnff8FJ6VIBMlJwPjutSh2LhECY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.120.0/22
IPv6:
2a0d:8280::/29
Signature Algorithm: sha256WithRSAEncryption
13:0f:2f:68:65:ed:c1:fb:a0:1b:54:45:d3:f9:ec:72:d2:d4:
d1:8e:1b:0b:d6:3b:e3:d8:aa:93:17:3b:e6:22:aa:d1:b1:e7:
90:ad:e8:32:db:af:e5:cf:00:20:a3:8e:4a:3c:98:58:51:36:
c5:cd:ff:9d:6e:6b:02:36:92:e2:2a:59:b5:c1:c5:c0:e2:f5:
da:a2:be:65:2a:7a:cc:e6:ae:df:34:e2:f3:64:73:97:91:c3:
63:83:c9:18:c2:87:41:7f:e7:0a:a8:90:bd:e9:4f:33:b9:e6:
6b:ad:1a:5b:43:ca:c2:1d:f1:5e:f0:58:fb:14:48:11:f6:0f:
d0:a5:9f:ce:0a:5d:9a:6f:fa:41:78:eb:de:f3:30:b1:a0:e8:
39:a7:9f:a5:e1:21:9b:00:36:b8:51:9d:1d:19:76:3a:92:90:
09:df:a8:61:76:e4:9e:c8:29:b7:be:10:de:ca:b5:cf:cb:82:
d4:63:75:70:21:f4:f5:c5:6a:7f:9f:78:3e:d8:56:a9:5f:65:
7b:6f:3e:a2:3e:59:7c:73:2b:c1:de:4e:d7:d9:77:47:d2:b0:
91:dc:82:15:b6:aa:84:bf:a1:c3:e4:aa:fb:f8:a8:ee:3a:b3:
ed:77:20:b6:6d:8e:08:c8:77:c3:e9:37:b0:3d:30:b3:2f:22:
07:25:0d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:05:11 2026 by rpki-client