Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/imgZHKtu8GsyKwsSSHhdSEpFJPM.cer
File: imgZHKtu8GsyKwsSSHhdSEpFJPM.cer (raw, json)
Hash identifier: sKQqeKszt3NTyqcEKTdZuidx7cmmfHiGgEGDq46DbNY=
Subject key identifier: 8A:68:19:1C:AB:6E:F0:6B:32:2B:0B:12:48:78:5D:48:4A:45:24:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F808FE4C67CC70DD941BDE086896035
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:18:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211582
IP: 5.45.144.0/22
IP: 80.243.224.0/22
IP: 185.214.188.0/22
IP: 212.60.24.0/21
IP: 2a10:b040::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:80:8f:e4:c6:7c:c7:0d:d9:41:bd:e0:86:89:60:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a68191cab6ef06b322b0b1248785d484a4524f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:ae:10:7a:16:54:b6:6b:6f:43:2c:9a:c4:
0a:74:f5:7f:d7:23:67:dc:8a:28:bb:59:9b:aa:0e:
1f:fa:07:d5:87:bf:7b:71:ad:79:74:87:f8:b9:76:
06:c6:19:94:39:f4:8e:35:a9:b2:7b:17:e8:92:13:
6e:dd:d7:54:7d:ab:3e:be:14:72:3c:49:64:5c:07:
6e:6a:1e:ea:19:1a:c4:a3:03:74:0d:21:a3:c2:3f:
04:07:40:30:b6:9c:3e:5a:89:a3:e7:3d:a9:ca:47:
02:6e:d7:b7:9a:fe:c6:f1:da:9c:34:79:31:80:91:
13:44:06:eb:d3:1f:eb:69:7d:c0:69:d7:c3:70:4e:
11:3d:32:24:5b:1c:1a:22:3a:3c:58:61:87:0b:8c:
c2:1f:92:53:d4:ae:4d:3c:0c:12:e7:d6:f9:53:82:
ef:0d:da:af:0d:75:22:57:bd:e0:a3:6f:e5:6f:8e:
6d:fb:f0:c1:b7:e9:41:0b:20:25:9c:d2:4c:2c:76:
6c:00:22:b2:48:95:39:6a:d1:4b:bd:d7:9d:92:07:
27:76:51:dd:88:2f:b0:5f:fc:22:58:5e:85:02:40:
c0:80:c7:66:37:3a:c6:e6:93:e2:e0:6b:9e:26:de:
30:85:3e:e6:92:0e:d1:72:64:ba:f1:eb:ac:cb:31:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:68:19:1C:AB:6E:F0:6B:32:2B:0B:12:48:78:5D:48:4A:45:24:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.144.0/22
80.243.224.0/22
185.214.188.0/22
212.60.24.0/21
IPv6:
2a10:b040::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211582
Signature Algorithm: sha256WithRSAEncryption
2f:c9:15:45:bd:37:84:b3:7b:59:7f:90:24:96:57:ab:4a:02:
ff:0f:b9:dd:99:0e:80:30:a4:a1:54:0e:b7:5a:f6:c3:6f:28:
ec:26:e7:20:49:e0:bf:d1:68:6e:be:ba:b5:79:ea:cd:a5:ad:
62:0e:7b:04:64:41:6b:9a:37:c4:4f:13:50:fb:23:30:b2:6a:
d8:63:69:43:ee:67:9e:62:24:c5:b5:61:09:a5:ce:60:d9:56:
50:c4:c9:6e:78:bf:16:37:de:eb:fc:b9:b5:de:1b:0f:41:4b:
8a:9a:72:c6:d1:06:22:62:0a:3d:91:b2:01:dc:2a:d8:68:a5:
37:6f:be:5b:13:d3:7b:3d:5a:07:41:a8:38:5a:cc:8e:ef:9e:
6e:12:7b:75:3e:86:9e:1e:b1:3d:05:23:36:a2:c1:e3:b9:7a:
c8:a8:8d:69:ff:eb:f9:f0:ef:2b:1b:12:32:14:6d:f2:45:c7:
47:5e:bc:d4:d7:ce:c5:fc:55:d4:ed:af:5e:55:65:dd:09:39:
94:08:86:7c:22:2e:7d:03:9c:63:e2:e1:c5:ac:c6:32:3d:a3:
38:9c:df:95:5d:d2:b9:e8:09:b3:e9:8e:01:5e:89:4a:eb:2c:
78:8a:b3:d2:cc:b1:a8:39:9e:7e:35:f5:4b:0f:45:f9:fb:f8:
62:e1:5e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:16:16 2026 by rpki-client