Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
File: F6yAsO71cIxkOQVF0acTkCRLbRs.cer (raw, json)
Hash identifier: ycnE2XT3KmpuAcIUPgNtRKUeyCPtBojl/tqp9dCZQj8=
Subject key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC7FFDE3478A9F9D53B264CEFBB74CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:18:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 56756
IP: 91.226.207.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:ff:de:34:78:a9:f9:d5:3b:26:4c:ef:bb:74:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:c8:08:c7:87:2c:5e:66:3d:03:b1:29:d9:
27:98:e8:d6:62:26:70:d6:ab:78:9e:bc:33:8d:ef:
06:c5:dd:a0:49:22:25:f9:fb:d7:54:ff:e3:b1:85:
af:81:56:04:f8:f5:3b:0f:65:0f:1d:b1:86:42:0c:
56:e9:57:8c:63:2b:da:50:0d:c3:9e:6a:14:89:b0:
99:b9:d3:5a:8b:1e:59:a9:fb:69:51:23:f6:e6:05:
3c:58:0d:2c:6d:5c:71:cb:1c:91:63:d0:b7:94:22:
44:01:b3:90:2f:61:0a:02:3a:5c:09:57:ac:25:6d:
d6:28:89:7b:a7:87:ef:fa:5c:c4:a4:9d:9b:19:6f:
af:fe:78:29:c5:ed:d5:59:80:4c:af:70:05:3a:32:
ea:f4:a0:57:e3:e6:a5:f2:ce:be:ad:d1:9a:c4:4e:
4d:7e:e2:06:0a:1e:8f:8f:2b:41:82:a0:97:52:03:
72:a2:89:43:e5:b2:3b:c4:60:2d:0f:45:7b:b3:c4:
42:86:c6:3f:4d:4e:8e:8f:38:ba:90:1c:7a:fa:04:
b1:5a:58:5f:52:3a:45:a5:08:0b:3c:6a:14:76:9f:
5a:47:6a:39:27:64:27:24:fa:d9:78:a4:7b:08:ab:
f3:8d:fc:75:95:81:0b:6c:90:09:58:cc:d1:5f:48:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.207.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56756
Signature Algorithm: sha256WithRSAEncryption
3e:1a:8c:84:ff:5a:5d:58:b6:b3:b9:32:3b:90:b8:c7:f9:8b:
c1:a8:53:ed:bd:39:46:7a:12:f3:40:7c:b1:d1:e5:d1:ce:03:
09:6d:d0:f4:c2:67:79:15:a2:3a:f0:98:46:41:fb:25:74:58:
fc:78:b2:91:d5:be:64:a0:c0:aa:64:f5:ad:ff:7b:56:0d:8b:
23:af:42:7d:1b:4c:35:06:da:29:e6:7a:c9:fd:d9:6a:cf:a9:
eb:df:b6:19:52:40:07:b1:b1:d8:20:fa:96:ce:41:be:64:02:
ae:5e:c9:31:36:13:0a:66:37:e0:b2:02:8d:d6:f2:48:85:d6:
fa:e7:44:63:e2:b8:e2:75:b7:52:86:66:f2:3e:49:18:16:a7:
d2:d4:f0:8f:83:82:a6:2a:4d:bb:d6:5d:5b:04:e2:53:ab:42:
dd:81:57:eb:8c:27:3d:da:bc:22:33:ee:85:df:a2:ab:43:42:
aa:c7:f7:eb:a7:6d:01:c2:43:a3:3b:61:69:5c:70:fb:cf:b8:
67:83:63:55:12:53:8e:78:8f:ad:e6:42:10:56:9a:a9:0e:10:
23:a9:2b:d3:99:d2:77:01:22:de:da:4f:70:ec:ec:42:ff:13:
56:81:02:56:b9:39:45:c6:11:33:e1:7c:df:c7:5f:3a:9f:02:
67:ec:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:23:10 2026 by rpki-client