Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
File: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer (raw, json)
Hash identifier: xXyoy1MjST9v0TU8WBJC6fEBaFM1plrd8oBTeenE5cs=
Subject key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA4F9042D9846FB6F01CC19A14D58F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:18:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201193
IP: 185.76.232.0/22
IP: 2a05:5dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a4:f9:04:2d:98:46:fb:6f:01:cc:19:a1:4d:58:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=153d757b77067befd9446694748ad2b04e97b38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:1f:88:20:b6:94:b7:39:08:27:72:82:39:
1b:d3:d4:46:1a:b2:5b:17:ad:cc:36:f5:e8:0a:38:
e8:a8:74:b5:d6:be:78:a2:26:17:22:c6:76:9b:94:
a1:d5:25:48:1c:63:bd:53:b7:0d:f6:2d:d0:88:c2:
3b:b6:ee:d6:e1:6f:8c:0d:b5:7c:8d:7d:72:18:44:
7c:d0:48:ad:55:d6:c2:61:6c:f0:96:bd:32:9b:55:
3a:68:46:79:86:6a:16:f4:ab:13:e3:3b:27:78:02:
00:40:66:59:9a:ae:ab:a7:0a:13:b8:1b:d6:49:ca:
14:e3:04:14:d0:14:10:ca:42:0c:ca:3c:6e:ac:79:
4b:df:0d:8b:27:49:5e:c9:9b:da:51:ec:8f:72:c7:
a5:85:04:b5:37:45:ff:36:23:8d:18:70:99:bf:67:
6a:eb:16:16:b0:d3:ea:0a:25:17:30:eb:65:8b:10:
0b:1c:2f:bc:d6:48:c7:62:15:d5:34:79:00:21:b0:
12:e7:0a:1b:26:9e:1a:da:b6:2c:88:66:9b:13:01:
48:0e:cb:d3:7a:fb:f3:f1:c9:a3:f1:9a:a8:17:c5:
f0:10:42:71:27:87:9e:cf:f0:e5:f7:dd:4c:04:38:
74:98:bb:b3:bd:c5:bd:82:8e:2c:08:09:d1:a3:bc:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.232.0/22
IPv6:
2a05:5dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201193
Signature Algorithm: sha256WithRSAEncryption
37:52:11:e4:07:e0:94:ce:04:a0:54:e5:99:f1:d2:ce:5d:57:
bf:f4:19:ef:10:d1:83:ff:28:5e:f0:db:15:c4:d2:c6:39:38:
69:95:58:64:76:6d:dd:96:31:c4:2f:55:2c:cf:d1:8d:c6:84:
f1:2a:29:8d:59:3e:4d:84:33:58:2d:00:cf:dd:85:95:c7:71:
32:eb:38:29:a9:26:3f:09:c0:d5:05:00:30:f2:64:d6:95:91:
ae:c8:7d:00:66:45:ed:4f:e4:d4:2f:7c:1d:68:37:c0:e9:4f:
08:3b:91:74:b8:8b:4c:15:7b:95:df:9e:2e:1f:af:93:03:51:
d3:4e:3d:5e:2c:38:ba:10:ae:82:9b:7a:31:41:a4:0e:f9:2f:
89:23:cd:f5:65:09:88:2b:2b:c5:33:f5:97:a0:7a:b4:db:f7:
5f:ca:48:12:7c:3e:33:f1:9f:f8:2a:06:ac:bb:27:2e:11:7b:
5c:3f:70:56:98:6a:6c:57:7c:3a:95:7f:a3:75:71:8a:1a:77:
df:f2:7d:e6:99:0a:d3:bb:96:5d:c5:88:bd:26:83:ec:46:86:
7e:0f:9f:c6:97:98:34:c3:0d:86:90:7c:cd:51:c6:fe:42:d8:
32:05:59:1e:d2:50:61:3d:ed:a0:3f:61:dc:f5:92:6e:65:57:
43:cc:26:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:24:24 2026 by rpki-client