Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer
File: Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer (raw, json)
Hash identifier: pVQ3uhherlsAgxUrbt/EBu+h1aS5VFnzvea8xMP9b/w=
Subject key identifier: 17:2D:A9:A7:BB:C8:E1:63:69:B4:06:BD:25:6E:2A:30:02:CB:DD:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB90354B783B242B5900E90B50C582
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.9.48.0/22
IP: 45.67.132.0/22
IP: 46.232.208.0/23
IP: 91.239.58.0/24
IP: 185.246.172.0/22
IP: 2a09:77c0::/29
IP: 2a0e:ce00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:90:35:4b:78:3b:24:2b:59:00:e9:0b:50:c5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=172da9a7bbc8e16369b406bd256e2a3002cbdd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:a5:c0:1c:b6:66:78:fc:59:04:db:5c:b9:
03:04:eb:e6:aa:c4:b8:03:e6:bd:a2:15:f0:5a:36:
a0:98:dd:d1:6a:d0:bb:2c:09:a8:6c:3b:98:84:54:
c8:cd:dd:24:a2:0e:a6:9b:bb:0d:7e:59:b2:4a:02:
91:c8:30:4b:d7:28:79:8a:7f:a4:7e:4d:67:f8:42:
e6:0e:ef:98:62:22:42:64:f6:54:ac:e4:fb:2e:a8:
29:ff:62:96:8a:67:24:70:9a:ec:0b:b6:ed:75:d5:
9b:f3:59:10:27:60:cb:8b:cd:fd:2a:6d:ca:93:3d:
04:99:2a:ed:dd:2e:40:17:97:8d:12:2f:a8:c0:3b:
1f:98:a6:a5:cb:72:73:35:6b:9b:7f:a3:4c:02:61:
b2:65:44:97:3a:a2:37:db:b9:bd:2a:8c:c2:79:9c:
3e:5e:20:f8:48:e7:10:73:5b:36:25:fa:a5:bc:f1:
bd:2c:3d:45:37:f9:8c:7d:85:df:48:cd:b9:c2:3d:
2b:2d:16:62:d6:78:b5:84:ce:c5:e9:97:4f:7c:a3:
69:ca:98:96:48:e2:bf:a3:0c:c3:d8:17:13:8b:44:
83:5e:70:87:a6:3a:71:5e:8d:bb:19:52:2e:4e:3e:
80:84:15:ce:08:d9:05:10:00:44:21:ee:ba:9f:0d:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:A9:A7:BB:C8:E1:63:69:B4:06:BD:25:6E:2A:30:02:CB:DD:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.48.0/22
45.67.132.0/22
46.232.208.0/23
91.239.58.0/24
185.246.172.0/22
IPv6:
2a09:77c0::/29
2a0e:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
65:43:ab:03:7c:4e:85:f2:db:7e:26:f9:e4:f6:23:8e:2c:a6:
ba:df:70:b2:b2:7d:07:6a:28:25:de:dd:eb:96:ec:ca:d1:ca:
0c:7b:a0:4b:9e:d8:46:1d:d8:8b:91:07:ee:ad:b6:e3:00:34:
e5:c3:5d:7e:12:eb:bb:5e:10:79:b9:12:11:f8:6b:f3:ed:f1:
2d:e2:ac:4e:ef:70:c9:32:fd:36:9b:92:21:a4:11:9e:6e:29:
ef:3b:60:5b:0e:0d:0b:4f:d9:85:0a:c9:ea:84:21:39:ba:62:
14:68:4b:14:74:5e:e1:6c:27:44:d8:10:93:bc:6a:2b:e5:37:
de:fb:0f:78:96:e0:e8:9e:d1:59:d9:20:a8:20:e4:8b:24:aa:
0f:f3:32:be:d4:74:78:7d:3c:bd:b9:93:ed:de:d6:23:dc:bc:
b1:0a:f1:75:bf:1b:29:b0:d0:80:63:7e:99:cb:57:f5:ef:b5:
82:85:e7:b4:34:9f:9d:8a:a0:23:cb:04:e1:9d:8e:dd:55:ae:
61:40:17:ff:cf:b0:78:5c:3f:60:22:e4:b9:f6:f8:d1:70:64:
df:9b:d2:18:7a:9d:fd:22:b2:41:1e:35:4f:57:c2:0a:51:28:
43:f4:a5:00:23:17:c9:58:97:f7:a6:b4:ee:ac:e5:2b:1b:3b:
3a:63:f2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 14:38:03 2026 by rpki-client