Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fRgFycPQl9qGBOV3NpFasesh--E.cer
File: fRgFycPQl9qGBOV3NpFasesh--E.cer (raw, json)
Hash identifier: 3Xnb61YN3wPZhmcp3zN/rWoMOQUVTEm1YIaDaFWlhaQ=
Subject key identifier: 7D:18:05:C9:C3:D0:97:DA:86:04:E5:77:36:91:5A:B1:EB:21:FB:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FC6D6154E3F9183960821FF073A2C1C9F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/fRgFycPQl9qGBOV3NpFasesh--E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Aug 2026 08:55:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 213.166.96.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:d6:15:4e:3f:91:83:96:08:21:ff:07:3a:2c:1c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 3 08:55:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d1805c9c3d097da8604e57736915ab1eb21fbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:82:d2:8b:37:dc:6b:9a:47:37:de:b5:28:
3c:93:75:95:bf:cd:54:94:18:99:2b:01:20:6f:79:
95:6f:2a:87:fb:71:96:23:4d:11:d5:22:38:16:bf:
09:f4:3a:97:62:6e:e6:d5:1e:74:73:9e:da:5f:41:
a8:3b:7c:0f:80:19:31:d3:0b:40:fd:08:12:0f:57:
05:9a:9e:94:38:45:ff:d9:0b:1f:68:e4:ec:80:05:
c9:85:64:81:f0:58:5c:a7:3d:b0:c6:a1:d2:32:39:
3f:a7:06:13:27:1c:43:91:cc:3a:16:8b:37:11:36:
b8:b0:8d:37:50:7d:d8:53:15:2c:5c:f1:f3:4e:57:
92:ea:06:76:3c:43:23:23:a2:0d:b7:6d:34:28:fb:
3c:75:36:7d:2d:e9:e6:d8:63:da:05:c9:87:82:c5:
4e:a8:6f:17:be:36:fc:b7:16:7d:84:26:3b:2b:bb:
a5:85:c1:53:be:ba:84:82:c3:b8:8e:3f:54:d7:a2:
56:fe:25:df:42:49:7c:9c:76:4d:db:21:fe:9b:98:
99:ff:f3:bb:1e:24:c4:fc:04:6b:bf:b9:02:f4:9f:
c2:50:f5:5e:91:10:4a:60:c9:7f:54:d0:f4:f9:ab:
76:15:f6:8d:9f:eb:7c:4b:0a:ed:df:88:15:6b:fc:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:18:05:C9:C3:D0:97:DA:86:04:E5:77:36:91:5A:B1:EB:21:FB:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a6a7ef-9611-4e42-8325-001c5d6dd96a/1/fRgFycPQl9qGBOV3NpFasesh--E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.166.96.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:92:d6:23:9b:ad:75:db:bb:ce:0c:ce:59:3d:26:be:07:10:
b8:57:11:09:b6:8c:b0:ea:88:3b:68:62:29:9e:d2:bf:34:65:
ba:89:80:08:08:cc:8f:79:41:af:7a:dc:c2:fc:5f:ec:5b:01:
fc:36:2a:e2:6f:b8:00:57:73:8f:2a:0d:f1:a1:d1:15:6d:12:
ad:23:86:3f:c0:30:31:cb:48:e8:bd:41:36:9a:41:dc:5d:e9:
1f:cb:fc:83:5d:61:71:f9:df:9a:4d:73:96:bb:6d:ae:f2:61:
bb:a3:89:ed:d2:7a:c9:c3:d8:9d:6a:a6:ff:3e:a1:b2:19:f3:
74:17:d2:ae:9a:16:96:91:9d:eb:f2:d5:2b:8d:00:f3:90:16:
76:1a:97:2b:74:51:d9:fa:09:13:b8:8b:f0:d2:50:d3:28:8e:
cd:8a:27:47:ff:cf:ef:c9:9c:9a:67:c7:3d:b5:14:8f:38:b7:
5e:fe:57:51:ef:57:86:58:51:8d:2e:52:fe:72:ea:2f:be:59:
51:6d:9b:39:aa:7b:e8:94:d9:ac:b0:67:8e:c5:3d:a0:fc:72:
51:cb:34:02:c1:36:df:88:f2:9f:f2:81:a7:af:e1:ad:94:4a:
f0:d3:4b:cf:b3:6b:0e:fd:a8:32:15:d9:de:e6:e3:6a:14:d6:
e8:bb:9e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:53:45 2026 by rpki-client