Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
File: FXR7x-Ei3DLmSJdOml-AZwccX2g.cer (raw, json)
Hash identifier: 8Ia0cDDBIM4KBJk9wuLDF8u0vhnu3CZ+YhWuu5XEYgI=
Subject key identifier: 15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9608067E52BD48AA0C14A60F5489F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 51557
IP: 93.89.224.0/20
IP: 185.33.232.0/22
IP: 185.111.232.0/22
IP: 2a00:e5c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:60:80:67:e5:2b:d4:8a:a0:c1:4a:60:f5:48:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:31:a7:46:dc:0c:a3:8b:ce:64:b3:78:21:
8f:aa:a3:06:07:50:3f:4f:31:ff:4f:cf:86:bb:88:
90:c5:05:fc:99:f5:e6:8e:05:a4:a5:75:44:40:48:
99:8a:ed:27:a8:c9:dd:8b:d0:d3:ac:c8:48:ff:54:
a6:e8:70:c1:02:e5:19:f3:58:8d:81:96:84:82:f0:
9e:7a:2c:0e:8f:6c:ec:30:98:48:9e:ba:79:a0:72:
3d:e8:e0:0f:9e:c8:66:d1:78:f1:17:17:ce:12:f4:
4a:46:56:07:52:4c:f8:fb:6f:5c:6c:aa:f2:a4:0d:
27:0c:dc:1e:d5:87:b3:da:b1:db:42:56:b2:21:18:
9d:cd:c6:6d:70:9a:07:8d:76:45:60:75:3c:31:ee:
7a:ba:6f:1e:64:ac:6b:ba:fc:5f:b4:a7:2c:39:b9:
10:6d:47:d4:1a:38:79:d0:2a:c0:9d:27:bd:3a:fa:
96:43:c3:cf:f6:77:a1:6f:57:7f:dd:0e:01:58:09:
b6:4d:dd:b4:1f:7a:6d:cd:21:41:da:bf:eb:8f:77:
ab:0d:b8:89:24:3c:21:03:32:db:98:4d:cf:e5:f4:
5e:26:56:cd:0a:bb:68:d4:fd:e7:63:75:a9:23:aa:
d0:0b:a5:36:57:28:99:e6:6d:30:d2:32:6d:7d:0a:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.224.0/20
185.33.232.0/22
185.111.232.0/22
IPv6:
2a00:e5c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51557
Signature Algorithm: sha256WithRSAEncryption
24:9f:8e:3d:0e:fc:b7:b3:2f:23:82:a8:ee:4c:80:68:11:c4:
bf:0d:02:ff:4e:f0:cb:e5:bc:d5:e0:ee:17:89:d1:7d:b7:83:
2e:5c:fd:74:4e:3a:3c:ac:49:d0:35:9c:8e:bd:d6:6a:e8:4b:
6e:2a:23:26:b8:03:4a:fd:9c:5b:03:e4:f7:ed:98:29:00:69:
a7:0f:00:29:4e:60:bd:7a:90:84:13:17:59:3b:51:ee:53:89:
93:30:3a:60:ee:48:b3:99:e4:8d:81:28:0a:e8:35:3f:8d:5b:
cc:05:50:fd:96:d8:9b:28:72:5b:e9:0b:1b:7d:7f:b3:e6:19:
96:02:0d:14:e1:1a:1c:59:be:3d:d9:db:fb:8c:38:1b:c9:e4:
40:f4:07:cb:31:76:47:7e:0b:4c:3c:c8:df:a8:b4:f2:bd:cf:
59:de:80:a2:83:60:fa:1f:2a:53:4b:21:4a:fc:3f:76:9a:01:
f1:2a:9a:72:e4:04:98:71:2a:bc:51:73:9c:73:ff:f6:6d:3a:
c0:55:8b:26:d3:9b:ca:3b:d8:f9:3c:68:21:58:43:9d:5d:a2:
55:10:9c:60:ac:01:16:01:be:b3:d5:8f:fa:37:b3:d2:40:7f:
57:62:d8:c0:d0:67:f6:d4:e0:f5:0d:ae:91:d2:77:a1:e5:f3:
d9:36:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:50 2026 by rpki-client