Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
File: FMuhsMMFzGL5KXwtmRiZRbl3leE.cer (raw, json)
Hash identifier: OshWqkxO7L0U+LOSyjf9u+nvOzQFueEaAqvK40kNzMk=
Subject key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F827176413F8D3752F055C90EB7A214
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:20:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44036
IP: 91.199.7.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:71:76:41:3f:8d:37:52:f0:55:c9:0e:b7:a2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:63:51:54:26:96:99:4c:be:2c:08:68:e4:
6d:98:1c:c3:6d:28:b7:50:1f:f9:2f:44:34:18:85:
ef:5e:21:22:ab:5b:c5:99:31:fd:05:78:0b:08:d1:
52:ee:8f:ec:ec:fd:68:8a:62:cf:ef:58:c7:4c:76:
f8:3b:e8:97:2d:c3:8a:ba:46:13:fb:86:b9:4e:68:
81:8c:46:fd:ed:7f:d6:c1:30:ce:06:9d:f4:e1:52:
b9:d4:54:60:e4:ff:21:22:cd:24:86:e7:48:2b:35:
47:4f:b0:93:c9:87:fa:1d:db:4e:7d:96:bd:0e:db:
07:83:3c:a3:56:10:e4:db:25:55:9e:83:ea:9c:18:
94:85:9a:7a:1f:dc:8e:18:4e:1b:45:ec:8f:26:78:
77:3c:91:5d:f6:e0:86:d2:9c:9d:a5:41:60:95:8c:
0c:d9:51:2a:c9:cb:79:a2:94:f2:b8:b8:b8:1c:ac:
0b:5f:74:6e:a2:96:32:e0:d0:0e:aa:f5:ba:2a:3d:
eb:7d:1c:4a:c4:85:04:ef:82:d9:98:6e:11:24:18:
5e:c0:43:a4:25:1e:8f:ea:40:59:b5:03:e2:9a:61:
cd:9c:8a:17:0a:93:65:2f:90:54:78:d4:1b:b3:2c:
d4:48:3f:6a:41:37:6d:1f:80:d6:3e:f5:20:3f:30:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.7.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44036
Signature Algorithm: sha256WithRSAEncryption
7f:37:d3:df:e6:cb:56:3b:01:7b:43:f5:42:5d:12:05:72:a3:
22:8b:ae:6c:5b:9b:72:6d:87:08:36:08:09:43:31:77:77:af:
00:25:a9:ae:76:d2:3b:aa:4f:75:34:d0:29:70:53:38:d6:b7:
7d:3a:90:7e:47:d7:e6:bf:21:56:3d:ee:0c:11:cc:3a:08:a2:
52:2d:e5:f8:8d:87:94:30:3f:cb:ff:1c:d7:67:0a:91:d6:16:
85:4a:0f:cd:03:d1:2c:42:f8:88:81:c5:f3:56:ca:fe:fe:82:
84:07:44:5b:9a:50:26:7b:f6:9f:0e:d3:89:4a:b3:82:3f:76:
29:3b:e4:24:d1:2e:2b:91:5d:e0:2d:6a:d5:ae:91:f9:73:08:
77:f4:1f:a9:0c:95:b2:1f:57:84:31:87:6e:43:b7:f5:72:54:
6a:a1:b1:55:fd:20:0b:1b:bc:19:5e:36:2b:f4:72:ed:4e:f5:
51:06:7e:46:8b:f5:72:92:bf:9c:2c:84:39:ec:ae:17:0f:5d:
69:22:27:ed:5c:c8:39:3b:d6:02:51:32:e9:e4:7f:ea:b7:7c:
f6:a4:33:af:e0:cc:9b:00:c9:ea:6e:bd:1e:c0:cb:33:a6:7e:
d6:1e:99:fc:b9:13:0d:be:0b:e4:e5:3b:07:d6:60:90:e7:15:
8c:28:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:18:33 2026 by rpki-client