Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
File: FTtGcCg5p5W6uo2NFezcymN-M2w.cer (raw, json)
Hash identifier: jY6/Jz/UFevrTxJkzMamUv2Gx4IoV/VQmgr2u0+tt00=
Subject key identifier: 15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5B7997F8ABC847AE1269B593D62920
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:19:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.245.22.0/24
IP: 2a0c:d4c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:79:97:f8:ab:c8:47:ae:12:69:b5:93:d6:29:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=153b46702839a795baba8d8d15ecdcca637e336c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:28:35:8d:e3:e5:08:73:13:ef:dc:3a:d9:be:
3f:7c:60:83:61:72:cd:f4:b8:e7:e4:40:17:1c:42:
c6:6c:e5:2a:e6:75:8b:1c:34:be:32:40:a9:89:1b:
23:87:17:d6:00:a6:7c:b4:80:ab:b2:a1:68:9d:f7:
55:0d:f9:35:38:03:39:50:f1:50:5c:47:94:cb:e2:
eb:74:f3:db:53:a7:a3:1b:ce:70:6c:0d:77:f8:75:
41:8e:5e:4b:be:4b:d4:73:d3:28:56:41:cd:56:be:
b4:cb:10:72:13:dd:b4:05:4e:b2:04:5c:e7:06:8b:
c2:e3:48:99:0a:a2:5d:ae:30:35:ba:60:40:3b:66:
fc:5c:6e:e2:f3:af:73:bd:cc:fe:ba:07:91:27:35:
31:21:23:3e:31:3d:e1:87:75:50:b3:9e:00:40:1c:
c8:78:fc:7c:e3:36:4e:d1:13:c0:6e:ae:44:68:93:
7c:23:46:d9:15:d2:cf:ec:d4:37:92:db:43:fc:67:
55:5c:6b:23:00:5f:ae:a9:a7:87:4b:6d:32:3b:72:
69:a9:a5:52:4c:57:3a:48:4b:c6:44:39:eb:1a:a5:
91:db:0d:cc:6b:33:a8:a3:b6:34:08:06:12:ed:cc:
a8:1c:9c:f6:23:e5:d6:74:09:2a:21:6b:36:c9:a4:
65:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.22.0/24
IPv6:
2a0c:d4c0::/29
Signature Algorithm: sha256WithRSAEncryption
48:88:74:da:82:81:c5:06:e7:d5:55:c1:28:e0:bd:f2:25:ca:
c3:4c:47:c0:d0:93:06:bb:85:c7:f2:42:01:b2:4f:85:41:c7:
94:3a:5e:e3:83:57:64:4e:89:db:5e:c0:5a:5e:f6:28:1a:1b:
7d:2f:df:80:c8:6a:b5:23:8a:52:41:02:a3:bb:95:6c:a7:56:
ef:48:b8:f9:49:7a:e8:87:33:47:21:50:f6:17:af:89:3c:0e:
6e:36:4b:7d:18:ae:b1:97:37:bb:9a:3d:7b:a6:f7:65:18:7a:
8e:96:5f:3f:de:4a:28:d0:70:ad:71:29:31:78:10:c8:59:d2:
79:ca:a7:a9:8d:93:b0:1d:45:4c:5f:ce:6f:ca:5f:fb:bf:69:
e5:96:d1:5c:a6:04:40:0c:9d:48:93:6d:39:d9:cc:c5:87:d4:
65:63:9a:cf:c0:ea:b9:c5:b7:7b:1b:63:6c:a8:77:f9:ba:06:
88:8e:01:50:5d:82:50:31:65:78:3c:9a:d5:92:38:27:16:aa:
1f:5c:fc:7e:f7:fa:9a:69:0b:b2:76:01:fb:88:ea:c6:38:68:
71:af:eb:5c:4c:08:45:fe:85:e1:3b:b0:6e:9b:c4:d8:95:43:
4e:dc:e4:ee:8a:b6:03:22:23:fa:d0:27:4a:bb:a5:41:3b:ab:
9e:01:39:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:13:32 2026 by rpki-client