Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/FsNvff2322zbwD7Ixr-UGwZ5UZg.cer
File: FsNvff2322zbwD7Ixr-UGwZ5UZg.cer (raw, json)
Hash identifier: axMqjEaa9tdpdOy2/IbUCq76hymj2rI98Mbvf11y+bc=
Subject key identifier: 16:C3:6F:7D:FD:B7:DB:6C:DB:C0:3E:C8:C6:BF:94:1B:06:79:51:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA4CBAAA6937299F5C2FD8D78C0DD9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/FsNvff2322zbwD7Ixr-UGwZ5UZg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57781
IP: 91.242.164.0/22
IP: 176.107.208.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:4c:ba:aa:69:37:29:9f:5c:2f:d8:d7:8c:0d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16c36f7dfdb7db6cdbc03ec8c6bf941b06795198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:dc:c8:e4:2d:3c:28:d9:f9:8f:02:12:19:
c1:9a:7c:76:18:59:7e:4a:37:bb:13:97:4c:80:c5:
2a:ed:21:fd:9d:46:d8:7b:e0:85:e1:35:78:da:eb:
c2:9c:55:20:d6:62:49:77:b6:c6:46:f1:1f:ed:5f:
d7:83:3b:bd:47:70:4f:0b:16:eb:48:87:c8:2e:1b:
bb:8f:62:d9:1a:a1:3b:5e:9a:be:7b:2f:03:a8:f7:
48:99:2a:7d:98:09:6c:80:7d:1d:e9:2b:60:bd:04:
76:d0:54:6b:ba:6d:67:d7:c4:40:63:cd:9b:80:99:
28:32:09:6d:6d:f4:c4:d7:0e:0f:b1:0b:e7:5c:ff:
a4:02:5f:c2:78:fc:b3:c5:af:ae:ed:45:7e:09:4d:
5e:c0:6d:c9:65:39:f8:e3:ab:83:91:d2:da:3b:ed:
03:44:94:a1:e4:7f:79:db:c6:33:ca:ab:bd:77:6c:
20:b0:bd:fa:90:2e:82:2e:6c:cc:47:4d:57:6a:ad:
a6:2b:25:77:1b:e5:62:04:ad:e5:77:fe:2a:a9:af:
db:95:fb:96:81:8b:4c:c4:37:d1:13:cf:96:1d:2d:
eb:83:5f:6c:c3:be:18:31:ca:7c:88:f4:85:3b:45:
06:50:ec:5e:6e:67:6c:a6:4d:bf:d1:59:ce:ba:7e:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C3:6F:7D:FD:B7:DB:6C:DB:C0:3E:C8:C6:BF:94:1B:06:79:51:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/FsNvff2322zbwD7Ixr-UGwZ5UZg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.164.0/22
176.107.208.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57781
Signature Algorithm: sha256WithRSAEncryption
af:ae:12:f0:2e:3f:5c:9e:a6:2f:5a:37:80:83:90:72:ba:87:
18:7b:2f:b5:15:2b:72:4a:40:5d:3e:32:60:52:0f:0d:f2:ef:
bc:b8:50:52:9e:89:79:9c:7f:24:22:f3:c9:f5:71:6b:03:e5:
7d:e2:b5:da:1d:72:8c:a2:8a:bd:a5:bb:57:06:4c:e5:f6:2b:
a3:0f:fe:9e:cd:be:55:c7:be:71:d6:85:fe:4f:9e:96:2d:32:
2c:6e:9b:84:1e:c2:08:81:f0:52:c6:b4:0a:ff:d5:f9:2b:f2:
99:43:9a:17:2f:52:aa:cf:3e:91:3b:5d:2c:96:37:90:31:ae:
a6:53:db:ea:17:32:e1:46:c4:e6:13:40:86:ae:16:eb:d8:c4:
47:46:ef:c9:a7:26:3c:6d:a5:4e:e9:e0:15:92:c7:f7:85:a8:
3b:e9:da:4a:fd:ee:27:c7:1a:93:f3:21:73:c7:08:4e:af:8b:
5a:e1:f1:fc:2a:d1:be:a3:74:df:77:d4:ff:42:fa:e8:7a:d7:
36:de:97:4d:2a:f9:31:88:68:4b:ae:97:17:15:85:45:4c:f3:
5b:da:58:e2:6e:37:77:fe:ec:7c:d3:a8:bf:d7:6c:d6:d8:b3:
39:02:e7:ef:dc:3b:08:ec:bf:4e:4b:97:7c:b5:c9:b7:cd:3b:
e4:b4:1c:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:53:58 2026 by rpki-client