Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8MRc9qe7S199ocIiINBI2mFos-o.cer
File: 8MRc9qe7S199ocIiINBI2mFos-o.cer (raw, json)
Hash identifier: /IF23alxIhDfNQpRI7pe1zYcIlsiHl5Dqm+5Qje5C5c=
Subject key identifier: F0:C4:5C:F6:A7:BB:4B:5F:7D:A1:C2:22:20:D0:48:DA:61:68:B3:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A07FE50F628D1148D7FEF51E71AA9A867B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 08 Sep 2026 07:21:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 109.68.218.0/24
IP: 185.49.68.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:e5:0f:62:8d:11:48:d7:fe:f5:1e:71:aa:9a:86:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 8 07:21:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0c45cf6a7bb4b5f7da1c22220d048da6168b3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5c:53:0b:5f:3a:ba:5d:94:78:db:83:d0:69:
b2:12:da:d6:5a:76:2f:11:9b:25:8d:da:02:03:cd:
37:97:13:0a:4e:3d:cb:11:3b:ef:dd:f7:14:5f:70:
e4:25:fe:07:96:0b:69:0a:78:3e:76:df:9a:04:5f:
e3:45:63:58:6a:65:49:5f:0e:e5:e3:de:a8:69:93:
01:c1:4e:3f:9f:b7:da:ad:11:63:53:8e:81:c0:27:
83:b6:b4:d3:97:3b:f7:b4:84:ba:e3:89:a2:e5:28:
ba:16:d5:66:6d:86:3a:91:1f:6c:b6:0e:8e:7d:d9:
0f:b6:de:0c:6f:21:13:77:77:15:d9:fc:17:a0:bf:
77:ce:46:e3:20:33:05:91:66:e0:42:d7:4e:fb:bc:
4e:b7:5e:6d:4e:10:7e:3d:04:21:ef:29:a7:df:3f:
d8:8d:54:96:35:ff:8d:0e:cc:b9:e9:5c:df:b9:2d:
26:17:2d:42:d6:41:f4:7e:fa:9a:01:82:f1:0d:b2:
66:40:94:87:0e:89:8a:65:1b:37:e5:10:14:61:a8:
0f:08:0e:e3:02:60:9c:39:b1:cc:ca:0c:a2:7c:f2:
06:f6:aa:f0:6a:16:24:48:3f:cc:ca:9f:90:8c:7c:
75:11:b2:94:ad:8d:81:ea:74:7e:91:8b:42:3f:a0:
e5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C4:5C:F6:A7:BB:4B:5F:7D:A1:C2:22:20:D0:48:DA:61:68:B3:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.218.0/24
185.49.68.0/22
Signature Algorithm: sha256WithRSAEncryption
19:ed:79:c8:01:4d:90:0d:a2:50:bf:06:d5:6a:18:69:31:00:
7b:cf:42:27:24:a9:23:9c:96:da:ea:ba:c4:2e:5b:ba:7f:81:
ec:55:36:25:8a:76:83:30:a7:d7:2a:bc:87:4e:37:57:27:0c:
da:81:08:39:11:dd:42:c7:98:8a:06:00:f7:bb:18:dd:51:a8:
c4:ff:66:92:17:81:c2:25:a3:ad:99:af:a1:46:31:8e:fa:f5:
60:0d:60:ae:a1:42:47:e0:68:08:f9:43:63:63:4b:f3:3c:50:
c2:87:d5:58:2f:70:b1:64:ef:25:2c:90:2f:82:0b:c0:9e:bb:
77:e1:8d:ac:5d:08:b2:fe:31:8f:82:93:eb:00:4e:3a:50:7c:
13:b1:1c:48:c5:ce:92:11:04:98:c0:6d:b1:b0:42:23:3d:27:
61:6b:b7:d6:fd:4d:70:1a:b0:c9:e6:59:78:3d:da:1a:74:78:
2d:dd:f5:1a:30:6e:00:37:a9:54:da:d3:38:56:c3:b2:47:7f:
ec:21:b1:23:a7:fe:2e:86:27:e0:12:ee:47:f0:d3:61:bd:9c:
37:b6:32:c7:ce:5d:a9:e4:18:62:2d:c8:1d:53:78:28:99:d6:
18:4a:6d:90:c2:39:a4:e4:14:ea:43:60:61:db:cb:81:1d:5b:
09:10:15:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:39 2026 by rpki-client