Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f76kKjzOSLi-F9qZN51XHnNpCzg.cer
File: f76kKjzOSLi-F9qZN51XHnNpCzg.cer (raw, json)
Hash identifier: nFEmjxeHtEURQLMmvcFzCzmDzT1WLQruyB3UUCu3zEc=
Subject key identifier: 7F:BE:A4:2A:3C:CE:48:B8:BE:17:DA:99:37:9D:57:1E:73:69:0B:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1784084B90F50942EA880F00553AF849A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 26 Oct 2026 12:47:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.158.208.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:40:84:b9:0f:50:94:2e:a8:80:f0:05:53:af:84:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 26 12:47:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fbea42a3cce48b8be17da99379d571e73690b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:48:2b:f0:b2:f0:ab:40:bd:59:f5:d4:77:75:
9b:b2:79:de:f2:01:a5:07:c3:3d:92:08:06:70:31:
f9:c6:ef:26:cd:ae:3d:30:4b:96:e6:39:6b:11:a3:
42:e4:b7:33:a2:d3:ea:d4:c3:fd:df:9c:e7:36:7b:
a6:6c:b4:0d:54:00:55:1e:2b:ea:e0:f8:d6:50:98:
3b:91:fe:e2:92:5d:53:0c:83:91:bd:ec:99:17:7b:
52:0c:46:3c:58:b9:aa:88:bf:12:b8:f5:87:88:ce:
3e:dc:8f:b7:5d:32:9b:3a:5d:3d:4b:aa:cc:9d:87:
b6:dd:5e:c5:c4:c4:57:16:37:31:4a:b8:2b:0c:18:
2c:94:17:d6:47:20:e6:3f:6b:be:01:1c:4e:75:ee:
98:e1:2c:b7:90:c8:78:66:5d:e5:0c:b3:f5:7a:7e:
0c:fc:60:21:68:06:e2:fd:1e:e9:fe:68:45:49:f3:
09:07:79:9a:37:ef:54:39:dd:4c:1f:2c:27:66:a4:
5c:93:55:75:22:a7:f6:75:d1:43:90:6d:37:26:99:
7b:e9:70:08:21:5e:9e:72:05:62:72:ea:3a:12:07:
b6:03:20:0a:de:a9:47:cc:c3:6d:f3:5f:05:35:34:
a8:dc:17:06:02:13:59:ca:b4:20:6f:e8:08:43:3a:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BE:A4:2A:3C:CE:48:B8:BE:17:DA:99:37:9D:57:1E:73:69:0B:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.208.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:f9:13:f0:65:1f:39:3b:d7:41:17:d5:c1:23:05:5d:ed:57:
d8:27:31:80:a9:d9:26:73:2d:9a:01:76:26:29:43:08:c6:7e:
0c:ce:e4:e9:68:92:ee:e3:7b:91:a1:93:e9:0d:83:15:d8:ed:
ab:e3:48:08:51:81:c5:cc:dc:9f:d2:59:05:86:ed:81:3e:96:
01:04:de:1c:32:ee:5b:5c:d3:78:ab:3c:66:f2:55:ea:b3:57:
68:3f:f1:eb:96:ac:b9:e1:f7:54:23:03:43:e4:2f:94:7e:ec:
e5:b1:9f:ea:62:52:3e:54:94:bf:49:73:9d:83:55:e6:13:9a:
53:2e:72:3c:fc:46:06:46:ce:c4:69:19:08:cf:d1:7b:f9:13:
9e:7a:24:43:85:0b:9a:09:58:de:8c:d5:e0:c7:0f:f0:97:86:
89:1e:33:e8:79:16:af:f3:5d:3e:79:06:1d:b5:79:c1:04:f2:
1c:69:26:b1:b2:ca:3d:68:63:94:af:47:f1:bc:a8:c2:94:cb:
02:6b:26:24:d4:ee:75:5d:2e:e9:c4:21:6c:e2:a2:4c:6b:98:
d0:d8:fc:0d:6d:07:40:af:22:b3:35:fa:10:dd:40:c6:12:a2:
c4:dc:25:1b:85:51:43:8d:9d:d2:0b:c6:15:2e:ca:a6:d9:e6:
7e:ec:29:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:00:08 2026 by rpki-client