Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.cer
File: FtZXk-tLaeXqrTiwzMkWQlDK3Ag.cer (raw, json)
Hash identifier: FjtewI+H0cfZdK9tvF8Nbqsv6qQTJJ5urYq/xUaQU80=
Subject key identifier: 16:D6:57:93:EB:4B:69:E5:EA:AD:38:B0:CC:C9:16:42:50:CA:DC:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FC1184FA6A1F7A4CE81B638032BCAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215961
IP: 2.57.238.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fc:11:84:fa:6a:1f:7a:4c:e8:1b:63:80:32:bc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16d65793eb4b69e5eaad38b0ccc9164250cadc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:ac:62:50:36:ec:b9:a2:dd:f5:da:f8:bd:
08:b5:8f:4c:02:dc:b2:8f:59:48:a8:c2:06:57:1d:
32:38:3e:1b:9b:69:72:5e:97:ea:a5:84:7e:eb:83:
22:bc:34:76:31:32:2d:06:cd:71:a3:f2:23:7f:09:
89:3e:51:fc:2f:52:1b:ac:8f:86:cd:51:a5:a1:b4:
0c:20:ce:37:94:2b:3e:67:f0:ca:e3:47:15:d4:55:
4e:80:f9:1b:33:f9:2a:97:fb:a4:d6:25:25:6f:4a:
cf:c4:a3:5d:0b:36:00:cf:40:c2:59:04:3d:8d:cd:
46:42:d4:6c:f6:42:45:14:3b:73:6b:b1:38:43:fd:
64:77:c2:68:39:99:9c:3d:dd:72:48:f9:7d:8e:68:
28:a4:37:9a:c4:72:8b:67:8c:9d:65:a8:1b:78:e0:
b3:34:a6:9a:41:01:07:8d:e1:a4:f7:80:78:81:c7:
f7:9c:fa:50:df:4c:41:53:0e:23:e1:cc:ee:88:10:
e0:98:4c:c0:57:8a:33:f4:ed:90:4f:14:04:5a:55:
91:51:a9:54:18:22:c0:6c:d5:27:56:88:97:98:09:
bb:40:dd:cf:c7:19:93:c6:91:c6:3e:c1:e0:b0:e7:
dd:09:f2:4d:cd:cc:b5:78:3b:28:44:cb:81:60:ff:
ae:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D6:57:93:EB:4B:69:E5:EA:AD:38:B0:CC:C9:16:42:50:CA:DC:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/FtZXk-tLaeXqrTiwzMkWQlDK3Ag.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.238.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215961
Signature Algorithm: sha256WithRSAEncryption
82:71:1d:ac:e5:e6:ce:d9:9e:3f:27:ec:2c:ac:7a:e7:4e:a1:
e5:e2:65:2f:cf:2a:82:4d:27:fe:71:cf:20:1c:2c:50:f8:2f:
85:27:43:37:57:44:75:0f:90:53:3d:50:36:e5:9a:09:44:5d:
51:e9:27:7d:e5:8e:a6:1a:d3:82:10:6d:33:c7:25:d4:78:cb:
ac:c3:63:44:b0:47:f4:ea:9d:8c:fa:a7:0a:80:e8:66:6c:e0:
b8:10:f1:3f:a5:b2:57:54:f9:1e:8f:0f:ee:ab:a3:84:da:27:
88:11:9f:62:3b:fd:29:3a:50:b4:70:5f:e6:ef:1f:4b:c2:68:
da:35:7c:67:bf:ea:ab:fe:48:a0:23:ff:4c:e6:b3:09:e7:d0:
df:f0:9a:01:dd:4f:45:9b:93:3a:a9:6e:62:71:11:6e:26:53:
50:fa:06:9e:9f:30:f0:7c:0c:53:d6:3e:05:4d:f2:e5:f8:2b:
09:cb:60:3f:b9:8d:ad:da:66:3a:ae:14:c4:7e:90:b4:29:c5:
63:fa:b9:8f:a1:38:10:0f:96:63:be:c7:8a:8b:d3:9d:94:0d:
93:49:18:94:ee:e5:7c:99:36:fe:0e:ea:ef:7e:c3:b9:bb:c5:
8d:ad:dd:8c:68:47:f3:85:c2:8a:3b:61:fc:3d:61:fc:f0:2d:
ef:f9:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:17:57 2026 by rpki-client