Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
File: vu8TjGK4F0xqgIMG7aV-koBd6YU.cer (raw, json)
Hash identifier: 8ckT8pbHsAvp365P6rj+Zm8swITdN3Y7SX5AwAGMdQs=
Subject key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C717667D297D0A1D7A6A7144A9FA0791F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Feb 2026 15:55:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.157.16.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:76:67:d2:97:d0:a1:d7:a6:a7:14:4a:9f:a0:79:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 18 15:55:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=beef138c62b8174c6a808306eda57e92805de985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:c1:1f:a9:e3:98:50:c5:27:cf:30:bc:44:
f5:d3:03:d5:0b:5f:b9:3d:9a:d3:47:8a:40:cc:3d:
f1:cf:85:05:82:04:7b:94:d0:3d:ae:2a:4f:bf:78:
75:60:9d:8a:f3:3e:9b:60:6c:50:0b:8c:18:1e:69:
6d:58:df:58:82:4c:84:0d:d4:54:5a:16:6e:4b:4b:
44:47:af:90:fe:b4:69:46:06:f2:1e:39:1f:27:cd:
4c:c2:48:6b:00:7a:1d:39:b5:67:e5:b9:09:23:25:
59:f9:65:3f:6b:04:cb:b9:12:cd:ac:e2:cc:50:69:
be:6f:55:63:a9:2c:82:11:ff:33:93:c9:c2:b8:ff:
64:8b:98:54:f7:b3:3f:03:41:f0:58:ac:5a:4e:bb:
0a:6d:13:e0:0e:83:21:8d:92:81:3f:d4:e6:82:4b:
da:99:ce:c4:14:36:45:c3:2b:ab:74:4f:50:62:84:
cc:14:95:c7:48:5c:b4:86:c0:fe:c4:38:ee:74:40:
f4:91:27:23:7b:4a:be:db:ea:bb:ee:91:eb:fa:77:
94:f1:25:ea:d8:c9:72:f8:e6:e8:ed:29:73:c1:dc:
1d:5e:a2:d3:98:33:6d:60:90:11:46:b9:5a:83:0c:
32:2e:e8:e0:68:0c:06:cc:28:df:c2:18:a4:75:d7:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.16.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:75:dd:76:c9:b8:f3:01:a9:06:88:4e:c2:59:d3:19:0b:41:
65:0e:fa:1e:fb:aa:29:5e:bc:b5:bf:b7:ef:49:4e:d4:11:e9:
a6:d2:10:3e:ee:25:1b:2f:4f:ab:bb:b6:3c:be:e6:1d:ca:b5:
a7:4c:d8:c8:3e:7d:c7:06:e1:3d:4e:ec:86:16:07:2a:81:5a:
ea:28:1b:0e:10:dd:5f:06:b8:f3:77:06:bc:e4:d2:d2:1f:ad:
b4:79:25:80:f2:cc:c8:c7:07:32:59:bc:c3:6e:74:9c:bc:9f:
5a:dc:aa:a7:a3:98:91:b1:6f:0c:46:e5:bd:8e:e0:ff:21:c1:
f2:a4:c7:dc:f5:21:8a:fd:02:25:23:f3:bf:04:00:62:9c:c9:
19:fe:14:47:cf:17:7e:b9:6e:7a:a0:e7:3d:e4:ef:49:f7:1c:
73:8d:79:d5:30:b8:7f:14:9c:23:a6:40:12:c2:e7:26:a4:68:
41:3a:bb:9d:de:8b:b3:0d:a7:e6:a4:6a:c7:29:d8:8c:e3:11:
29:bf:4b:f9:9e:f2:0b:32:40:15:95:ef:1f:91:91:85:14:f0:
93:d7:43:53:30:45:29:b9:52:fa:60:4c:d8:86:ea:f9:58:3d:
6e:81:5a:7e:cd:9d:ad:66:18:e0:6e:29:62:89:d2:1a:20:0d:
0a:ac:79:6e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZxxdmfSl9Ch16anFEqfoHkfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjE4MTU1NTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWVmMTM4YzYyYjgxNzRjNmE4MDgzMDZlZGE1N2U5MjgwNWRlOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7fBH6njmFDFJ88wvET10wPVC1+5
PZrTR4pAzD3xz4UFggR7lNA9ripPv3h1YJ2K8z6bYGxQC4wYHmltWN9YgkyEDdRU
WhZuS0tER6+Q/rRpRgbyHjkfJ81MwkhrAHodObVn5bkJIyVZ+WU/awTLuRLNrOLM
UGm+b1VjqSyCEf8zk8nCuP9ki5hU97M/A0HwWKxaTrsKbRPgDoMhjZKBP9Tmgkva
mc7EFDZFwyurdE9QYoTMFJXHSFy0hsD+xDjudED0kScje0q+2+q77pHr+neU8SXq
2Mly+Obo7SlzwdwdXqLTmDNtYJARRrlagwwyLujgaAwGzCjfwhikddfpJwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFL7vE4xiuBdMaoCDBu2lfpKAXemFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4L2Y0ZTRm
MS1iN2ZmLTQ3ODEtYjk3Ni01NzI3MDA4MmZlMGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvZjRlNGYx
LWI3ZmYtNDc4MS1iOTc2LTU3MjcwMDgyZmUwYi8xL3Z1OFRqR0s0RjB4cWdJTUc3
YVYta29CZDZZVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuZ0QMA0GCSqGSIb3DQEBCwUAA4IBAQANdd12
ybjzAakGiE7CWdMZC0FlDvoe+6opXry1v7fvSU7UEemm0hA+7iUbL0+ru7Y8vuYd
yrWnTNjIPn3HBuE9TuyGFgcqgVrqKBsOEN1fBrjzdwa85NLSH620eSWA8szIxwcy
WbzDbnScvJ9a3Kqno5iRsW8MRuW9juD/IcHypMfc9SGK/QIlI/O/BABinMkZ/hRH
zxd+uW56oOc95O9J9xxzjXnVMLh/FJwjpkASwucmpGhBOrud3ouzDafmpGrHKdiM
4xEpv0v5nvILMkAVle8fkZGFFPCT10NTMEUpuVL6YEzYhur5WD1ugVp+zZ2tZhjg
biliidIaIA0KrHlu
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:38:57 2026 by rpki-client