Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
File: X-U8C_w8j7VrgRkTFxREQ-DinSU.cer (raw, json)
Hash identifier: vuhFWgNsrPl7WexZZD2t0FZDiJ+t68FKEVXQZXfai5g=
Subject key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EB1B74A99DF4BDE4A2BA2E466925D8E76
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Jun 2026 13:27:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 87.232.80.0/20
IP: 89.126.224.0/21
IP: 205.234.120.0/21
IP: 2a03:cdc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:b7:4a:99:df:4b:de:4a:2b:a2:e4:66:92:5d:8e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 13:27:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:3e:ed:66:6a:e8:90:20:6e:65:c0:57:49:
5e:8f:12:ba:ff:25:05:8c:11:31:a5:bf:a6:ad:66:
23:0e:5c:19:e2:75:41:d1:b0:3d:0d:2b:8c:56:28:
6f:63:13:40:ff:bb:e5:32:2e:d8:8c:5e:a1:ef:83:
25:6c:e1:13:00:9f:38:8c:a8:73:bc:96:13:11:65:
1b:4b:02:28:bf:2e:6e:5e:b4:1e:60:13:54:f4:53:
e0:da:60:df:09:d9:9f:6f:0c:6c:4f:b4:ac:15:e7:
2c:1e:2a:0e:70:7e:41:e2:98:94:00:d1:d5:bf:5d:
1a:e7:fa:11:e4:2e:48:6e:12:22:51:f6:78:a6:99:
14:67:88:ac:06:eb:50:98:b1:34:7a:4e:fb:42:5a:
19:40:cd:54:eb:2a:da:90:b2:cf:4f:d4:f6:17:21:
d9:21:c0:09:0b:e4:01:cb:b3:47:e3:90:6f:e6:29:
55:d3:5d:07:f2:ea:bb:cc:dd:20:e1:d2:f6:4a:9c:
f1:03:5f:4e:19:5d:86:4d:78:e7:df:a6:12:cb:39:
8c:66:13:d4:53:4b:f2:df:10:35:f9:23:c4:2f:ba:
53:89:50:21:c4:08:95:8b:d6:c5:34:d8:51:a6:f9:
fa:8b:2c:98:47:ea:cb:7e:7e:b8:4d:18:8b:17:82:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.80.0/20
89.126.224.0/21
205.234.120.0/21
IPv6:
2a03:cdc0::/29
Signature Algorithm: sha256WithRSAEncryption
29:7f:c3:34:7e:c7:ad:af:34:d7:93:c5:1b:f1:74:78:49:ed:
38:b7:7c:62:a1:60:07:8a:d9:5c:4c:ed:3f:c4:ac:e6:e9:3e:
cf:e5:1c:61:ab:be:fb:be:76:85:0f:09:a0:77:f9:4c:d0:ab:
8b:50:05:a6:40:30:61:9d:1a:75:ca:6f:d8:7b:45:e5:fa:ee:
8d:a1:7f:97:15:78:0f:5f:50:7c:a5:b7:da:39:1e:33:db:01:
aa:1d:59:f1:f5:d2:21:92:5e:70:36:27:a6:72:dd:49:f2:c5:
c2:e1:56:f3:c6:42:ac:42:d3:b6:5e:57:3c:a3:08:e2:84:ac:
f8:19:32:61:d7:4f:b4:22:36:33:73:b7:c5:d1:29:28:1a:26:
02:4a:fd:d8:48:27:cd:43:c5:31:c7:b6:de:92:46:cf:71:c1:
de:b5:8e:ab:29:3d:96:d7:29:02:4a:d4:a3:bd:32:e1:f0:8e:
2c:0d:6c:02:81:d3:7d:0e:e3:f2:e4:5c:7c:50:d3:f2:0f:91:
06:d0:50:b9:bd:7f:1d:2c:21:43:b6:ef:65:b0:08:c4:73:d5:
39:00:a0:0c:42:9a:44:db:df:de:ee:8d:0b:cb:7e:95:17:f8:
d1:6f:24:1f:f1:01:c8:a2:74:7f:a2:cd:0c:a4:73:f5:fd:d9:
5a:9e:43:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:08:03 2026 by rpki-client