Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FvLalTudPdkr-T3cMtdfCQwhaIo.cer
File: FvLalTudPdkr-T3cMtdfCQwhaIo.cer (raw, json)
Hash identifier: YtIYRzpkOdTTJMzntIEA+qR91yuGGVgP504hiGcFSUo=
Subject key identifier: 16:F2:DA:95:3B:9D:3D:D9:2B:F9:3D:DC:32:D7:5F:09:0C:21:68:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FB7DE33C67028E3A64532BC245C96A173
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 31 Jul 2026 11:10:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219094
IP: 2001:678:12d4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:de:33:c6:70:28:e3:a6:45:32:bc:24:5c:96:a1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 31 11:10:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16f2da953b9d3dd92bf93ddc32d75f090c21688a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:a0:97:e5:f4:67:04:66:65:73:ea:3c:20:
a6:45:90:9a:61:b8:ec:b0:b7:89:99:c8:aa:ae:92:
81:fe:c3:f8:30:d5:72:1f:ed:f6:01:9c:6f:5b:c1:
4c:27:48:4c:41:64:a3:2c:83:33:e4:bd:35:f0:a3:
6b:5a:d3:76:70:57:40:1a:d9:95:75:a2:60:7f:d5:
e4:55:b0:a3:9b:e0:81:d7:9c:a0:0d:7d:c5:93:0e:
22:15:15:bc:34:29:72:21:e8:6c:67:7c:d6:43:de:
94:a3:cf:e9:49:27:ab:55:d8:f5:0a:69:58:87:1b:
87:6a:32:c8:50:81:75:42:31:0c:9c:8b:01:4f:30:
7c:64:0e:56:88:1c:ce:b2:84:eb:ee:54:a4:d8:f1:
4c:5e:c6:f0:51:3f:2d:16:13:c0:03:99:d4:01:63:
de:61:dd:2d:2f:3a:c2:59:b6:d4:8f:79:33:e0:4d:
c1:fb:18:de:d9:ef:75:af:63:c7:51:27:57:c7:22:
63:75:de:b9:c1:0c:7a:9e:77:db:d3:f7:25:8f:38:
06:52:32:4a:47:e9:a4:f1:60:f0:5c:29:d7:9f:37:
d2:42:56:27:8f:27:ec:81:d5:78:35:a6:93:9c:a3:
49:fd:59:0f:2f:10:6a:26:8e:81:0e:bc:0d:05:07:
ce:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F2:DA:95:3B:9D:3D:D9:2B:F9:3D:DC:32:D7:5F:09:0C:21:68:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:12d4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219094
Signature Algorithm: sha256WithRSAEncryption
94:05:c9:63:0b:78:d0:22:81:9f:78:88:4c:b1:03:f7:f1:33:
68:97:e2:6b:bd:92:d7:49:e3:32:e6:a4:00:8c:14:9f:47:3b:
50:f4:6d:42:cf:31:74:81:09:3c:7b:3b:dc:52:f4:c2:3f:d8:
35:b4:e8:ca:03:1e:eb:e6:a7:29:01:67:99:ec:5a:d2:2a:9d:
1b:d0:ab:6a:d8:60:c1:f6:36:e6:89:dd:f2:be:71:61:e0:21:
92:10:dd:81:b8:9d:e6:d5:89:3d:10:e4:0c:5e:3d:42:92:79:
c7:3d:a8:05:fb:27:3b:e8:de:a1:a0:8a:1c:f4:7f:6b:c8:94:
23:3d:e4:25:43:9b:f1:72:c5:f6:c6:d8:07:85:04:43:e4:74:
f8:87:37:19:71:a5:42:f9:8d:3b:69:89:20:96:c7:d3:00:fa:
bf:a5:0e:e5:bf:c5:b2:d6:36:68:e4:1a:37:c8:c0:6d:23:a0:
29:ea:70:66:f6:0b:a6:6d:f3:f3:54:c7:1c:96:27:8d:5c:f1:
0b:f2:7b:dc:58:f1:7a:3a:4a:4a:4f:9c:43:85:3a:cb:cf:22:
4e:12:98:7a:fd:ff:08:60:10:a5:6c:f1:ea:d2:59:87:ca:d7:
26:93:d9:4c:cd:53:62:e8:c3:0b:20:cb:a8:59:0f:64:06:30:
03:be:b3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:29 2026 by rpki-client