Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Ff6t2FjLbO-eBpbm0hVcInv2VA.cer
File: 6Ff6t2FjLbO-eBpbm0hVcInv2VA.cer (raw, json)
Hash identifier: 9WyJcxMopbVmtbcDNRHdssrOB13mMX+HkC1TXRNzq60=
Subject key identifier: E8:57:FA:B7:61:63:2D:B3:BE:78:1A:5B:9B:48:55:70:89:EF:D9:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F156D353D09F04EF03F92CFCBEC30F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:21:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35629
IP: 185.133.228.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:6d:35:3d:09:f0:4e:f0:3f:92:cf:cb:ec:30:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:21:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e857fab761632db3be781a5b9b48557089efd950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:9d:72:19:94:27:1c:68:7c:96:02:f1:96:
c2:d7:08:94:6e:1e:7e:2a:87:a8:da:c3:df:42:6a:
d5:64:39:b7:15:ce:87:3f:d7:5e:cc:83:b5:9d:a5:
d3:53:6c:2e:9e:19:37:ab:f2:23:48:c5:7d:20:22:
40:ba:68:3c:7e:16:50:d8:80:c0:a8:c4:5e:34:5d:
f8:e0:2a:16:40:52:50:9b:84:c3:8e:34:fd:e2:2d:
90:fe:04:a8:e6:e5:a9:07:1e:b8:f0:e0:96:57:86:
7e:4d:84:2c:b5:00:c1:bf:5a:0f:31:e4:47:c3:4c:
07:66:5b:fe:65:fc:e3:25:b0:e6:fc:22:de:c8:1b:
0c:33:53:74:d5:ee:65:61:d5:48:0b:e3:5e:e4:cd:
84:59:d1:78:63:3a:cc:05:e5:0d:67:c7:17:2b:91:
6c:37:38:d4:77:59:5a:07:a9:dd:0c:e0:90:ba:4a:
9b:a5:05:25:50:82:61:7b:4c:eb:60:58:fb:61:44:
04:20:4b:ae:6c:41:b0:de:99:51:d4:99:aa:76:f3:
2e:8e:7d:eb:ed:b4:8f:0f:cf:1a:b6:be:43:3e:70:
82:b3:eb:78:58:69:a3:ad:31:c5:50:35:24:65:d2:
f4:f2:f4:af:82:83:81:17:bc:45:73:ca:51:c9:99:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:57:FA:B7:61:63:2D:B3:BE:78:1A:5B:9B:48:55:70:89:EF:D9:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.228.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35629
Signature Algorithm: sha256WithRSAEncryption
69:08:b0:17:2c:73:ad:54:7c:1b:ba:af:7e:83:d3:b3:68:d5:
36:17:42:f1:2c:41:2b:7e:f9:ba:46:97:dc:5f:3d:56:a1:ad:
c6:e6:c4:e5:ea:e6:a5:b5:33:82:87:6c:34:17:54:fe:69:7d:
4b:a1:ca:8c:ba:0d:df:02:8f:42:82:ca:d2:a1:2e:c8:d8:f5:
3f:b9:47:1a:df:aa:8f:b7:69:cc:84:aa:eb:49:b6:dd:e9:cc:
b5:81:8b:a5:27:1a:94:f2:7c:7e:54:17:0c:b0:7a:30:3c:ee:
7d:41:5d:ac:57:98:db:da:35:cf:96:3f:cf:d3:b3:d8:e6:54:
ac:b9:4a:f4:e2:ea:73:92:22:e9:58:68:2f:1a:d4:a1:e4:cd:
61:17:d8:42:1e:39:f0:0f:1a:6d:57:c6:4f:b6:a9:f5:13:78:
70:90:d6:60:7c:fb:68:2a:75:48:43:9b:12:ce:59:dc:89:30:
2c:16:11:ee:93:13:a2:e6:99:9a:ba:14:8f:27:bc:4e:b9:0a:
85:6a:0a:78:bd:38:54:b1:a1:c5:87:24:78:ba:39:2e:ed:19:
99:ce:67:e8:2d:e6:68:95:11:3c:bd:e1:6a:cd:4c:57:6e:64:
34:dd:f9:45:80:64:47:a0:00:42:14:1f:d4:fc:84:12:62:d2:
92:af:7f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:41:51 2026 by rpki-client