Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer
File: 8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer (raw, json)
Hash identifier: v/Vj6VUE40XHGLXv4DY0R0Z0HzuMHCKUfHTj21Y0t5M=
Subject key identifier: F2:BB:7E:B9:7C:81:30:F8:87:DB:E6:96:B5:79:66:2C:F9:AA:06:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79EBB91277BB357A2EEB0185896563AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:17:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202532
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:eb:b9:12:77:bb:35:7a:2e:eb:01:85:89:65:63:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2bb7eb97c8130f887dbe696b579662cf9aa06a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:de:eb:72:61:ae:d2:25:e3:ab:54:be:4f:
47:44:49:cb:a0:08:26:8a:30:ba:26:e4:2d:cd:bc:
62:62:4b:9f:6c:f7:7d:d3:16:9f:5b:e1:99:de:7a:
9a:c2:30:5b:32:46:30:2e:2b:f7:9a:1b:b3:ac:b0:
4d:d7:e9:e1:4e:70:35:32:aa:c5:ab:3c:e4:a8:e6:
a4:16:76:25:ce:da:64:2e:9e:56:f4:2e:d3:fa:d1:
f0:7b:c3:15:1e:fe:d4:ae:dd:f6:08:ae:c3:99:3b:
c7:7d:da:95:e9:7c:37:bd:62:c7:a6:91:b2:b5:b9:
1c:d1:30:80:96:1b:c7:88:6e:01:36:d6:4d:d5:81:
39:8e:78:a0:a0:5b:b9:44:28:e2:66:f1:ff:b6:ad:
4b:e3:36:52:13:90:4e:d0:ed:18:7e:84:b3:c0:a8:
57:23:e2:3e:b5:c7:42:76:1b:ae:da:5e:f9:c5:d1:
df:da:e0:6e:0f:81:88:30:6b:41:0c:76:e3:05:88:
a9:c1:29:73:26:d6:8b:e9:35:53:72:2b:6f:d3:42:
e5:ea:52:ef:d8:34:30:ba:2b:49:6d:96:0a:79:e4:
b5:e9:41:92:b8:17:56:57:93:a2:67:01:e7:f3:31:
79:d7:2c:9c:c9:f7:59:39:f6:49:b8:23:bb:ad:aa:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BB:7E:B9:7C:81:30:F8:87:DB:E6:96:B5:79:66:2C:F9:AA:06:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202532
Signature Algorithm: sha256WithRSAEncryption
16:f7:58:b8:ab:03:2c:ab:fc:44:64:3a:b4:0c:6a:33:16:05:
a3:f5:e6:8b:67:c7:01:f0:32:52:31:8a:8a:82:ff:7f:bd:35:
67:e5:75:35:b4:ea:0d:34:17:61:23:bd:90:56:60:66:4e:3b:
58:16:1d:af:a8:f6:be:4f:20:1e:df:c9:64:18:d0:97:6f:1d:
8a:4b:a3:3a:d2:fd:da:30:b1:a6:53:c3:b4:46:57:db:4e:26:
aa:e3:5b:fc:53:31:a9:0b:98:24:48:47:e6:70:b1:a2:3c:5f:
e4:7f:69:ac:73:df:b3:57:71:e1:fc:d7:08:cf:5a:bc:82:4a:
14:84:b6:df:14:26:df:61:f3:be:06:db:e4:9d:bf:6f:76:e7:
f2:b8:84:77:36:8f:b9:f7:15:b3:85:e9:d0:6e:ea:79:17:29:
34:4a:1c:22:7b:23:a4:eb:5f:5e:bc:12:d4:e2:59:60:6e:64:
70:6c:58:85:c3:ac:24:4d:8d:9e:9e:d6:63:ed:b8:cd:19:cf:
fc:c2:09:51:8d:45:5e:b1:69:66:6b:fc:c4:11:b3:a9:14:bb:
3c:55:2a:78:1e:92:22:ba:16:61:7b:91:b3:71:56:1d:0f:74:
2b:1b:29:f6:af:0f:ef:16:b6:c2:b8:2b:94:ac:7b:23:0d:d0:
a8:f1:34:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:45 2026 by rpki-client