Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FJn4V-ztdZxVruBBJtSkPlJ-IuI.cer
File: FJn4V-ztdZxVruBBJtSkPlJ-IuI.cer (raw, json)
Hash identifier: 8rac6AbYouKykI+eBvgfIIK0GHaVZ9mtCo3LQ5mfwtI=
Subject key identifier: 14:99:F8:57:EC:ED:75:9C:55:AE:E0:41:26:D4:A4:3E:52:7E:22:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C8FB1EE078311E20AD06F355E487E923D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/24877e-531a-40b3-bdc7-f01a15456236/1/FJn4V-ztdZxVruBBJtSkPlJ-IuI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/24877e-531a-40b3-bdc7-f01a15456236/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Feb 2026 12:48:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214769
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:b1:ee:07:83:11:e2:0a:d0:6f:35:5e:48:7e:92:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 12:48:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1499f857eced759c55aee04126d4a43e527e22e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:bf:94:4c:6e:36:2a:ce:7e:c4:b3:03:4f:
af:02:6e:28:f6:29:0f:da:32:a0:53:fc:ef:c6:74:
cf:74:9c:9a:1c:5a:10:ec:55:e6:01:69:71:1b:a6:
ca:32:66:59:30:26:ff:cc:12:da:cd:af:d1:d4:31:
d6:ef:a3:1a:46:6c:4a:5c:3d:86:6a:ec:e5:34:d9:
be:f0:80:ef:e9:ab:a0:b6:2e:73:0b:ae:ac:30:00:
ba:99:d0:c7:e8:e5:bc:50:10:53:54:7c:92:3b:9e:
0e:93:00:4a:b1:9e:7e:df:07:45:5c:15:3f:eb:aa:
b1:5c:f0:a8:7d:a5:9f:e0:99:7d:89:35:8e:45:a8:
0f:6f:8f:e0:1d:8e:c3:f2:40:5f:b6:78:33:24:e4:
37:b1:f0:18:3e:26:2f:42:be:d6:51:b7:1c:19:fa:
ac:23:87:cb:d0:df:d7:f1:91:ca:30:ed:06:16:4f:
25:f4:df:df:c4:8f:e7:95:e8:93:e4:0d:2f:11:78:
af:18:77:66:a0:7a:99:69:f4:0a:d5:cb:96:d6:d9:
bd:64:1a:d3:be:a3:c8:09:09:0b:78:01:0c:60:d2:
d7:ef:fd:da:83:79:05:a6:f7:bd:28:37:0a:a8:57:
29:9b:28:47:f9:57:b9:d9:c0:e2:21:a7:d4:94:26:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:99:F8:57:EC:ED:75:9C:55:AE:E0:41:26:D4:A4:3E:52:7E:22:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/24877e-531a-40b3-bdc7-f01a15456236/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/24877e-531a-40b3-bdc7-f01a15456236/1/FJn4V-ztdZxVruBBJtSkPlJ-IuI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214769
Signature Algorithm: sha256WithRSAEncryption
0a:5c:11:3b:58:fe:c7:0b:b6:b8:2a:6c:26:3e:fc:f3:6c:6f:
df:a9:bc:0b:76:69:c4:21:be:55:97:f9:76:81:2c:51:00:10:
f9:d4:c1:69:c2:ec:6e:14:a3:30:e6:d4:21:14:b1:0e:48:ed:
38:28:78:da:3e:a5:70:ca:8d:af:43:a3:ec:63:26:46:2a:a1:
d1:89:1b:0c:5f:db:03:26:31:5c:c0:dd:b1:c0:28:4c:69:02:
cd:4f:7b:6e:e6:91:16:2e:53:4e:fa:60:86:ca:d0:c6:bf:16:
88:b3:c5:e1:82:af:cd:da:7a:f2:25:fa:b9:13:6c:da:59:9d:
41:e5:1b:76:57:e9:47:65:40:67:dd:4f:73:39:5b:cd:20:2f:
d4:0a:9d:9b:59:30:bd:d6:13:74:37:b1:50:14:01:6c:6a:4b:
ca:1e:8a:33:51:77:f3:4c:f1:62:e1:bd:00:2a:30:a1:52:e8:
1e:dc:14:94:80:63:4f:56:f0:ce:23:56:2c:58:87:d8:41:18:
03:b8:56:7b:a3:ed:21:ff:f3:4f:13:bd:50:8e:2c:8d:cf:6b:
05:14:b3:6c:a1:e1:a7:56:02:e6:99:ce:20:d6:e6:de:ed:60:
b5:c8:27:2e:e8:71:e5:c9:77:4f:8c:2d:9a:e1:31:e6:94:8e:
da:52:63:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:06 2026 by rpki-client