Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
File: FS1RhIHO0vhNARBPhx1k1EMB2zs.cer (raw, json)
Hash identifier: 6+qRPyG/yK1T+a8ZbBw/CP1LakRtSQoMKslQ9rlzkbs=
Subject key identifier: 15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F945F11C1289C3E3C8EA64F11553FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213409
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:45:f1:1c:12:89:c3:e3:c8:ea:64:f1:15:53:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=152d518481ced2f84d01104f871d64d44301db3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:a9:5e:df:63:75:17:38:fa:9c:93:9e:30:
bb:71:ca:aa:a8:10:dc:db:3e:c7:b6:17:fb:c9:72:
c0:01:09:46:db:86:7d:7e:f4:68:6a:43:58:72:73:
1c:b4:6b:a7:5b:ac:c5:55:65:e4:cf:de:d1:b8:c2:
2b:ff:f0:e6:e6:b5:f2:c3:eb:d1:83:89:75:03:56:
81:0b:2b:37:98:8a:d1:d3:18:1c:8e:ed:38:7e:e3:
b3:bb:f3:72:83:06:7b:00:16:35:b5:e8:9f:0e:5f:
0e:56:7d:9d:2f:fd:9f:72:0f:73:ab:1c:a1:f8:23:
e0:22:fc:46:b5:de:be:73:a3:09:dc:1d:fa:17:37:
f2:f6:c0:22:ae:89:a3:3a:26:6b:b4:14:2d:9f:40:
dd:b0:9c:12:37:f2:2f:23:ed:13:60:ab:0f:df:67:
13:66:bc:80:12:8f:bc:ef:01:55:10:f7:e3:de:d4:
dd:cd:15:e6:0d:2b:8f:4f:f0:c7:f5:dc:35:5e:a8:
4a:54:9f:31:27:5e:2e:fe:cd:f4:b8:12:03:3c:7c:
da:6c:b1:dd:6f:06:44:60:52:3c:f0:3c:7e:7a:f5:
88:97:c2:b1:72:cf:03:45:c0:4c:b7:ca:a9:56:f3:
ef:e3:fb:7d:1f:61:9c:cc:a6:a2:e5:f6:5a:87:9e:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213409
Signature Algorithm: sha256WithRSAEncryption
01:62:8e:05:67:e7:a6:01:8f:04:eb:5f:09:87:fd:ee:ec:32:
6c:8f:af:34:34:04:d4:16:a6:5e:f9:70:4d:4c:c2:3b:70:54:
27:76:af:70:9d:f2:3a:48:0e:79:a6:ce:9c:4c:dd:ba:f6:7f:
92:05:2a:40:18:a6:2b:8e:08:9c:8b:de:7f:ca:2b:33:2f:a2:
fd:6e:0b:fb:c4:04:e2:94:bc:df:f2:60:95:1d:63:b9:e2:c5:
cc:73:6c:f7:c1:a6:67:e3:bb:2a:2a:00:ec:ae:76:28:57:77:
f3:42:ba:ff:a5:4e:ad:03:f0:d9:97:f8:04:1c:d2:2b:22:17:
10:97:0a:06:74:8c:65:fd:18:d9:eb:7b:cf:57:da:97:5d:51:
72:bc:71:53:88:32:48:3a:2d:d3:d1:a1:d1:f3:30:71:fa:51:
95:ab:00:28:62:94:6a:4c:7f:5e:5a:0d:3f:f3:c7:2a:f8:ca:
4f:61:37:f9:99:98:8d:a1:bb:32:9d:4f:2e:0b:8a:8d:c2:fd:
ca:40:8d:9e:fc:59:87:ae:f2:32:fc:75:15:ac:66:30:2b:17:
c0:de:c4:e8:e5:c8:8f:88:a7:57:4e:98:94:b1:7c:b0:9d:21:
29:f5:9a:52:80:9f:bf:76:4b:7b:1c:6c:72:35:59:7a:e0:24:
7c:fe:84:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:29:11 2026 by rpki-client