Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer (raw, json)
Hash identifier: sR5RcCUxJA6+0Xme7z9GYLvbOe0ULGEZO9dwclz45XM=
Subject key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E393D4095F176A6A6F6FA8C85A905FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:20:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212085
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:39:3d:40:95:f1:76:a6:a6:f6:fa:8c:85:a9:05:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:8f:94:d7:04:9d:de:f2:b2:a9:eb:17:0d:
ca:97:5b:1a:20:17:1a:5a:1b:2a:20:1c:7d:68:13:
b4:99:a2:1e:00:d2:53:ef:f7:e7:ee:fe:a4:f6:ad:
a3:43:bb:c9:9a:07:bd:d4:3f:7e:1d:5e:63:a3:61:
6a:1b:99:e9:48:cb:21:e9:0a:b4:4e:05:72:cb:0f:
51:81:e2:cb:d3:d5:d1:b1:76:d6:b8:3d:e1:fc:45:
e6:ae:ef:5a:d1:ab:54:99:f3:59:14:7f:1f:68:a8:
79:d8:72:ed:ed:f9:10:a6:41:12:fa:bb:93:4c:c2:
db:e6:0b:c8:f8:1e:c1:44:60:98:e4:12:7e:c0:da:
ba:ba:67:3e:46:81:ff:ed:cd:47:56:ef:c4:ee:54:
4b:2c:58:c7:e2:c8:1d:3d:6a:43:23:2a:e8:6d:df:
a7:78:d3:18:86:75:65:4f:64:f6:c0:dd:c3:15:61:
c3:77:06:3b:12:a6:15:8f:b1:40:13:82:14:98:f9:
8f:0d:4a:9c:c3:76:45:03:52:28:a8:a7:dd:8a:7c:
d3:6b:74:da:05:fa:fd:75:f5:4c:b4:66:d4:fa:46:
46:20:7c:b3:16:5d:b0:c5:82:06:df:cd:c3:a9:10:
54:0d:9f:61:b6:db:fd:d4:d9:ce:ba:ea:8c:c6:88:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212085
Signature Algorithm: sha256WithRSAEncryption
2d:1e:59:f0:f7:06:ba:51:bd:e5:81:a7:72:6a:0b:56:9c:fd:
40:88:60:5d:c0:97:ed:85:d7:21:d3:14:af:bc:91:25:8a:a6:
3b:cb:8b:3c:af:21:65:0f:7c:50:8e:4d:46:60:c9:93:43:3a:
43:1b:bb:b5:4d:04:b2:a1:c2:3d:c4:cc:db:54:40:14:52:cf:
33:ad:43:a9:97:10:cd:3e:03:0b:a2:b0:43:b8:12:bc:12:57:
b5:94:8f:4e:89:c7:e2:fe:05:a6:1d:84:42:c6:09:ff:f3:20:
39:78:17:4c:0c:85:a7:aa:44:20:19:98:01:40:66:3b:47:27:
64:f0:f5:fc:17:31:4c:97:3a:40:ac:df:18:a8:08:65:9e:98:
c0:e6:36:00:05:74:84:f3:05:0f:b1:50:3b:f5:84:ad:d4:74:
2b:00:9d:bb:02:a1:a0:24:4d:4d:72:60:5f:02:ad:a1:d8:f0:
ec:da:13:49:5a:1a:7b:d6:1f:0d:05:71:ca:b4:df:2b:9a:35:
86:97:f6:44:54:6b:8d:85:d1:a6:cb:e5:80:03:4e:32:2c:45:
d1:28:69:69:c1:1a:22:d4:35:74:72:17:7b:75:81:0f:ec:ef:
d2:3d:14:14:a5:5b:64:da:f4:63:f3:10:75:78:40:13:a9:44:
06:e6:06:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:37:57 2026 by rpki-client