Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/snY8hmf5hp4CdC1OBMDUsQZqo9M.cer
File: snY8hmf5hp4CdC1OBMDUsQZqo9M.cer (raw, json)
Hash identifier: VKYFJ+faCmxjwB42dlF7f7hqrNnt+MSq7R5eaHffWKY=
Subject key identifier: B2:76:3C:86:67:F9:86:9E:02:74:2D:4E:04:C0:D4:B1:06:6A:A3:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE3AB38112971D95823A6B235FEA50
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/snY8hmf5hp4CdC1OBMDUsQZqo9M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 85.209.43.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:3a:b3:81:12:97:1d:95:82:3a:6b:23:5f:ea:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2763c8667f9869e02742d4e04c0d4b1066aa3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:2b:d5:31:3f:21:22:ea:00:fa:38:c0:39:
69:bc:61:8e:1d:84:e3:62:1f:06:9c:98:75:42:4d:
d5:bb:05:9e:66:a9:e5:8e:d4:17:54:d1:b5:e6:9e:
9a:eb:14:cc:e9:cf:34:95:37:0e:49:bf:0b:23:0c:
f0:28:aa:e1:fe:bd:9a:2c:aa:d8:0b:3c:b0:c8:dd:
58:a5:5f:14:f3:d7:83:8f:9b:79:ae:69:c9:32:bc:
8c:74:2e:bc:34:f8:18:72:61:80:40:2d:e3:3f:73:
5b:00:38:c5:44:50:e5:9a:f2:0b:82:31:6f:11:3d:
c3:35:1f:24:33:6a:de:0c:20:f3:2b:43:0a:20:26:
a1:ef:0f:c4:9d:de:0e:de:49:d3:d0:96:b3:dd:20:
c8:9e:5d:27:38:bf:17:de:28:0f:48:bb:aa:a9:02:
04:94:f0:01:46:19:91:04:90:00:fe:c1:8d:4c:75:
d2:b9:f7:42:7c:83:b8:d0:7e:77:04:b0:bf:4e:53:
d6:d0:6c:72:f2:97:77:4c:53:7d:d1:5f:2e:fa:7c:
3b:e5:e7:cc:bb:59:5c:68:2e:cf:ec:1b:0c:58:58:
c5:74:64:f3:99:7d:9e:78:4d:da:27:af:19:d0:6e:
93:7d:45:56:a4:a6:da:a6:02:33:77:a4:47:a3:4f:
81:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:3C:86:67:F9:86:9E:02:74:2D:4E:04:C0:D4:B1:06:6A:A3:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/snY8hmf5hp4CdC1OBMDUsQZqo9M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.43.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f2:cc:ae:8a:72:56:4c:11:31:78:01:f0:67:5f:43:02:6f:
99:e4:02:8d:1a:02:eb:f6:87:2c:51:f1:89:0d:04:10:67:e4:
77:6c:75:29:98:d0:c1:77:3c:72:58:f4:a1:00:3f:23:a6:54:
ac:13:af:ce:d7:65:78:39:4d:43:8c:05:88:74:e4:d0:5e:68:
80:83:54:15:c8:c5:83:a5:6b:6a:c3:88:eb:06:88:ed:c0:8d:
58:62:36:2f:e4:63:c1:44:de:b8:03:05:99:49:50:4b:58:9e:
04:8c:6d:6e:19:1a:33:a0:a9:6b:db:57:b7:1b:f1:bc:4f:54:
c4:49:a7:fc:ab:23:d3:5c:43:b2:04:e0:f6:cc:70:07:97:27:
19:81:61:19:90:d8:8a:f7:43:e0:e0:87:04:6c:e5:08:3e:23:
32:44:3e:25:20:dc:15:27:01:ad:20:ca:35:17:89:b3:f6:86:
0c:ec:81:d8:53:9e:cf:f4:2f:d4:e0:83:d0:a9:f7:f8:b1:0b:
7c:30:0f:cc:f5:9e:ed:44:d6:f3:e1:c2:ce:40:be:93:27:56:
cf:37:f8:bb:9e:e4:7c:d7:96:b1:79:e4:85:fd:d1:bd:9f:b0:
9a:f4:91:d4:88:23:24:ad:f3:ef:00:b5:e3:5d:7e:9d:75:ed:
c2:3c:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:57:33 2026 by rpki-client