Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
File: F80TGMkZxu8W0kynhGKgt94UugU.cer (raw, json)
Hash identifier: x7gEQ4GuQ0h0LT9b9VAMl2tv3poRtonRGG4Kp3XDp4I=
Subject key identifier: 17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01992FABDF4EF97A9EED41D083B4B53D86F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Sep 2025 18:10:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209036
IP: 91.243.77.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:ab:df:4e:f9:7a:9e:ed:41:d0:83:b4:b5:3d:86:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 9 18:10:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:d5:f1:af:a7:f6:4f:99:71:fc:97:71:53:
ca:16:a0:15:9c:a7:93:9d:89:d4:c1:bd:5b:02:05:
a7:a8:c6:41:7d:36:41:d2:ea:56:57:b8:61:cf:19:
d1:53:59:48:13:67:8b:21:eb:e9:8d:97:22:40:a1:
d1:93:58:b1:03:8f:1f:58:f8:4d:e2:31:66:6d:c4:
20:84:c9:98:e6:e9:5c:04:0d:02:ed:12:c5:60:43:
c3:ab:5f:22:23:94:d8:6c:37:83:aa:7d:ac:8e:8e:
8a:b2:65:de:17:ed:88:cb:89:1d:19:dc:26:7c:95:
da:ac:97:65:30:36:e7:c1:16:29:28:a3:10:fc:0d:
c3:b2:e0:d6:36:4e:bd:ed:a0:a1:e0:35:30:05:fe:
83:8d:f5:98:73:c1:c8:f0:8b:5b:1d:d7:53:90:1f:
ef:51:9f:73:17:0d:18:4e:a6:6c:4d:2e:d9:63:16:
0a:84:ad:cb:8e:07:04:96:d8:c2:7f:cb:68:96:c8:
e2:86:f6:fd:ab:70:c7:34:9b:2a:a9:2f:ae:8d:c6:
f2:ee:3e:73:8e:08:a4:b3:9d:d7:4f:36:d2:95:ad:
17:ef:46:98:76:14:b2:15:40:44:07:89:c3:0b:8d:
b7:d8:a4:9f:b6:ab:f8:25:a7:b7:11:53:49:e7:0e:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.77.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209036
Signature Algorithm: sha256WithRSAEncryption
47:69:9f:40:7b:9c:a3:7f:ab:53:de:8f:9a:97:d3:7d:2d:5f:
87:53:20:7f:84:1d:21:8c:b5:52:9c:3e:3d:0f:29:c9:f5:84:
8e:a1:cd:a5:4e:1f:1e:d3:03:b7:1c:db:f9:c0:51:06:c3:f8:
ad:40:4b:92:c5:aa:ae:e8:49:97:40:f2:73:e7:b6:77:64:84:
8b:ff:b6:82:1d:81:13:1c:a5:88:6c:e5:75:57:77:bf:8e:e8:
fd:16:df:82:cc:e6:cd:9c:d2:31:7d:10:f8:00:24:38:5f:a2:
7d:76:28:d4:b3:f7:bb:56:eb:0b:7b:f1:59:83:5b:b1:6c:93:
e2:be:c7:76:3e:0d:cd:4e:c8:ff:0f:b4:74:d9:28:cc:f2:ac:
9b:ec:5b:e2:97:34:54:87:db:23:8a:87:59:97:7e:f2:44:39:
3f:c6:49:72:98:a6:2d:6a:6e:8a:d4:f8:24:7b:6b:a2:d7:62:
b0:38:f4:c6:37:2e:d8:a0:85:3e:6b:d1:1b:3e:db:84:0e:60:
f4:d9:48:ad:0a:33:5a:58:26:12:48:ee:13:2b:9f:f5:f5:99:
83:0c:33:f7:6c:90:b7:4c:0b:e2:2d:8b:ac:0b:da:75:d8:98:
62:e4:69:fd:e1:6e:ac:03:22:04:84:6e:67:94:3f:d1:86:9d:
87:60:50:5b
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZkvq99O+Xqe7UHQg7S1PYbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwOTA5MTgxMDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2NkMTMxOGM5MTljNmVmMTZkMjRjYTc4NDYyYTBiN2RlMTRiYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqunV8a+n9k+ZcfyXcVPKFqAVnKeT
nYnUwb1bAgWnqMZBfTZB0upWV7hhzxnRU1lIE2eLIevpjZciQKHRk1ixA48fWPhN
4jFmbcQghMmY5ulcBA0C7RLFYEPDq18iI5TYbDeDqn2sjo6KsmXeF+2Iy4kdGdwm
fJXarJdlMDbnwRYpKKMQ/A3DsuDWNk697aCh4DUwBf6DjfWYc8HI8ItbHddTkB/v
UZ9zFw0YTqZsTS7ZYxYKhK3LjgcEltjCf8tolsjihvb9q3DHNJsqqS+ujcby7j5z
jgiks53XTzbSla0X70aYdhSyFUBEB4nDC4232KSftqv4Jae3EVNJ5w4HVwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFBfNExjJGcbvFtJMp4RioLfeFLoFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiLzFiYWFl
MS02MjNjLTQ1M2ItODY3Yy05Mzc0MmM0OGUwZmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvMWJhYWUx
LTYyM2MtNDUzYi04NjdjLTkzNzQyYzQ4ZTBmZS8xL0Y4MFRHTWtaeHU4VzBreW5o
R0tndDk0VXVnVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW/NNMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMwjDANBgkqhkiG9w0BAQsFAAOCAQEAR2mfQHuco3+rU96PmpfTfS1fh1Mgf4Qd
IYy1Upw+PQ8pyfWEjqHNpU4fHtMDtxzb+cBRBsP4rUBLksWqruhJl0Dyc+e2d2SE
i/+2gh2BExyliGzldVd3v47o/RbfgszmzZzSMX0Q+AAkOF+ifXYo1LP3u1brC3vx
WYNbsWyT4r7Hdj4NzU7I/w+0dNkozPKsm+xb4pc0VIfbI4qHWZd+8kQ5P8ZJcpim
LWpuitT4JHtrotdisDj0xjcu2KCFPmvRGz7bhA5g9NlIrQozWlgmEkjuEyuf9fWZ
gwwz92yQt0wL4i2LrAvaddiYYuRp/eFurAMiBIRuZ5Q/0Yadh2BQWw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:44 2025 by rpki-client