Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
File: F3m5XYpY_MpqgS53fn72lFP4rJg.cer (raw, json)
Hash identifier: cjK92bYxw+BgvMaNwfZ7VNPJjxEuNFCkmBQw8zvDtXc=
Subject key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ED10BC44B7A842A3A401F7EC5629C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.184.212.0/22
IP: 212.78.96.0/21
IP: 212.78.109.0 -- 212.78.111.255
IP: 2a00:1d08::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:10:bc:44:b7:a8:42:a3:a4:01:f7:ec:56:29:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:28:28:28:db:0e:88:83:f1:e0:f9:c0:88:
da:f7:f6:38:86:a1:b0:3b:48:b7:8c:aa:d0:9f:8f:
44:19:28:37:2d:8b:f9:62:13:6f:73:46:65:3e:4f:
d5:64:18:cf:09:65:0d:e9:dd:99:2c:48:1a:94:a0:
7a:69:39:79:a3:14:86:1b:e0:b8:df:47:1e:60:b3:
24:95:d7:21:34:5c:8c:a1:b2:7c:c7:42:41:4a:7c:
f9:9c:5e:4e:67:7a:d4:13:a8:07:b5:a9:40:0e:e2:
72:44:92:97:d0:7a:a1:76:98:a9:9b:75:89:91:fa:
53:6d:01:83:fb:c3:2c:f9:ef:06:53:22:80:ff:21:
7b:c2:a1:62:2e:30:a6:3a:3d:6d:61:44:52:04:93:
de:e7:57:4f:b8:70:e8:2d:3a:2c:72:64:b4:fb:1e:
22:5c:73:a6:df:ac:2e:8b:ab:07:16:e3:78:3f:3f:
52:56:40:3a:05:9e:4d:46:01:b7:4c:46:3b:29:ea:
60:b4:ca:24:15:a8:92:7a:04:52:cf:7f:67:da:8e:
10:68:ef:92:dc:ce:aa:70:7c:4d:fc:5c:5a:ed:8b:
10:dd:40:8f:0b:21:a6:0a:7c:0f:0d:25:b6:74:74:
52:b8:45:73:ae:d3:d6:3f:52:ff:0e:4b:92:d6:c8:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.212.0/22
212.78.96.0/21
212.78.109.0-212.78.111.255
IPv6:
2a00:1d08::/32
Signature Algorithm: sha256WithRSAEncryption
36:60:33:a1:0b:30:a5:ef:5d:86:75:04:bb:be:06:8b:54:e1:
ee:39:46:ef:e9:4e:79:92:eb:51:27:ff:12:8f:a5:5a:d3:46:
78:6c:53:03:4c:3d:82:6b:99:75:a4:ef:35:cf:8e:31:05:95:
ea:d2:5b:40:c1:f3:90:b1:7d:96:36:b7:18:3f:80:ce:12:ea:
63:14:91:de:29:2a:31:d0:b3:41:f9:0a:82:68:74:b6:34:02:
fb:9d:0b:83:88:7f:69:3b:d7:12:68:2a:79:4b:74:ec:45:f0:
b0:d2:23:8b:d3:4b:78:ae:52:b3:c7:6f:ff:e5:aa:6e:30:2a:
9c:87:da:0d:cf:ee:88:c9:11:18:0e:b5:84:e8:9a:ff:08:47:
73:06:12:70:ac:7f:50:aa:1f:b7:ce:84:03:7a:d5:9b:d7:9c:
9f:4f:f0:a7:ba:b1:ea:7d:ff:0a:d1:bd:93:9e:b5:8b:16:e4:
6b:42:4c:d6:80:68:ef:27:04:bf:4f:58:61:ba:33:d8:36:cf:
b9:a3:74:7d:91:01:4d:5e:cb:e5:a6:a5:da:4e:3a:67:c8:09:
09:fc:97:16:91:73:97:9f:63:94:89:4a:3d:cf:15:57:64:fb:
c9:2c:76:55:07:78:bb:3c:1c:3b:3b:ec:d5:42:ae:76:2c:02:
fc:0c:19:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:36:33 2026 by rpki-client