Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8goizGQvBET4Cxdi4h3TKtlqZEM.cer
File: 8goizGQvBET4Cxdi4h3TKtlqZEM.cer (raw, json)
Hash identifier: FEE/+QIiofDrgjGVfPDs1LW4tmtTldqjQdy5nNXyWgU=
Subject key identifier: F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C51DA1C08165A8299B6BD73348F937B2F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Feb 2026 12:36:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:67c:29a8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:da:1c:08:16:5a:82:99:b6:bd:73:34:8f:93:7b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 12 12:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f20a22cc642f0444f80b1762e21dd32ad96a6443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:50:1f:38:4a:20:1e:9f:be:50:ad:18:e0:
ac:af:9d:db:e4:39:aa:ec:73:c4:4b:a6:17:2a:bc:
45:e5:cf:ae:e5:5a:77:46:44:f4:b4:05:74:fd:f1:
f6:0f:ee:d0:5b:de:c7:a0:5a:5c:fc:45:d3:79:86:
58:ef:01:07:97:00:e5:6a:0f:84:59:c0:b4:e9:2a:
ed:ad:7d:b5:c0:94:4d:90:92:54:fc:0b:3c:d6:3f:
54:14:61:44:13:e2:cc:47:7f:bb:b9:55:48:51:45:
88:5b:f9:84:5f:75:86:cc:23:43:0f:11:f5:05:a5:
98:61:2c:9a:e2:0b:ed:2e:09:3b:38:cd:b0:a0:77:
0f:cd:3c:17:38:0d:4b:ca:79:f6:b5:5e:89:5e:86:
b2:b1:4f:8e:e5:79:33:c7:40:24:e4:c8:fb:a6:ab:
42:c2:71:c6:9d:6d:d4:92:86:21:f2:cf:d3:df:2e:
32:74:5b:b1:04:44:d9:05:48:55:a3:d5:c0:42:83:
ac:9d:53:89:70:eb:0e:46:ae:d8:4d:f3:2c:43:6d:
bc:d2:84:91:3b:5e:c4:de:29:5e:ed:0f:41:f2:69:
c3:6d:40:84:bd:0f:18:8b:4a:e3:9d:6d:bf:18:8a:
46:de:ed:bd:57:17:99:1c:75:b8:b7:bf:48:8e:b9:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0A:22:CC:64:2F:04:44:F8:0B:17:62:E2:1D:D3:2A:D9:6A:64:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/79c702-62c0-43c5-998b-d544e7f13220/1/8goizGQvBET4Cxdi4h3TKtlqZEM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:29a8::/48
Signature Algorithm: sha256WithRSAEncryption
0d:a5:a4:49:2d:13:2c:a6:5f:ac:4c:30:a8:57:83:d4:8f:c9:
15:14:31:4c:95:98:ff:33:8d:fd:2a:45:c4:bf:f7:b9:da:46:
88:24:61:c3:4e:be:b5:b9:36:58:71:a6:7a:6c:b6:2d:d3:ee:
cb:ab:0b:d3:a0:76:30:8c:58:4d:19:50:00:9b:5c:e3:42:88:
33:73:59:7f:bb:8b:24:6b:76:bf:8d:e5:ad:c4:31:38:56:bb:
76:5c:96:12:dc:7f:39:b4:7d:65:ea:b7:49:b5:7c:7b:28:5a:
0e:3d:70:55:e6:f0:cd:ba:26:33:94:89:b0:c5:c0:dd:c6:fe:
3f:e5:ca:ee:cf:aa:77:9d:f6:6a:28:3d:71:57:08:f7:a6:a2:
80:34:d8:89:6e:cb:4d:49:a4:05:ba:a0:6c:57:fa:49:71:b6:
e1:48:66:3c:75:c8:fe:c1:9a:0f:19:e5:e0:9c:9c:bc:4d:e8:
96:9a:7d:20:8f:13:09:2e:9b:7a:08:87:95:42:dd:30:4b:63:
ad:dd:ab:1b:aa:f4:50:17:ec:ba:ab:f5:85:87:f8:88:61:20:
3c:4b:9a:58:05:bc:4d:3d:a9:79:86:53:32:81:17:1e:c1:64:
f4:99:3c:19:7c:07:9d:5b:1e:c9:c5:d8:b7:6e:40:df:46:c5:
bb:90:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:26:17 2026 by rpki-client