Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer (raw, json)
Hash identifier: 2nq/LV7ruSbSo/AImpeZb2B9xUdgJC2rcSDog4Tx+h0=
Subject key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A336BF6CE67EEDD1F79125CC439EA1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 212.18.110.0/24
IP: 2a12:8400::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:36:bf:6c:e6:7e:ed:d1:f7:91:25:cc:43:9e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=159366259f9bae7c37337b515fa5bee05f53abce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:f6:0e:08:db:20:73:11:bd:76:30:42:bc:
56:f0:cb:df:be:77:aa:29:fe:54:2c:71:fd:be:0c:
c4:41:fe:15:de:b4:52:f3:c1:1a:71:bd:07:2a:b5:
d6:a9:d6:dd:a5:a4:a0:80:6c:ec:a4:1e:af:e8:54:
4f:18:64:35:1e:59:c9:13:f8:8e:e1:e5:9b:15:47:
99:24:e7:ab:5e:ed:7c:46:bb:87:58:7d:a8:41:f3:
23:e4:52:fa:6e:13:f0:72:8e:95:2e:bc:a7:c0:f7:
06:4f:71:fa:50:c3:9c:60:6b:31:dc:ee:eb:46:81:
22:02:78:c7:1d:9d:7f:01:ec:be:63:4b:af:55:30:
1c:95:c6:1c:ce:84:49:33:17:62:29:fc:8e:67:6b:
00:f9:26:bf:4e:1c:41:03:d3:ab:95:69:6b:ba:11:
21:80:8e:2f:e3:27:94:42:55:1c:61:b0:fc:f4:78:
dd:78:69:43:e2:03:0a:fd:fb:16:6e:89:24:15:bc:
db:87:c1:82:21:e0:bc:3c:1d:ab:19:4c:be:d5:ad:
65:9e:32:24:49:27:42:93:6e:ff:ce:21:54:69:50:
3c:cb:6b:0a:4a:fb:69:97:84:13:e9:94:e2:69:fb:
88:b0:0d:11:99:c9:74:88:67:e6:fc:bf:43:49:e5:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.110.0/24
IPv6:
2a12:8400::/32
Signature Algorithm: sha256WithRSAEncryption
64:c2:b5:f8:76:c2:15:71:4c:78:44:18:db:12:5a:90:2e:2f:
b1:2e:9c:16:7c:89:61:d8:37:fc:da:00:8c:52:61:be:2f:9e:
b3:ad:16:ed:15:f6:23:79:9c:09:54:ad:7a:32:19:f5:fe:ca:
e5:ba:e3:86:46:07:99:41:33:3e:a1:8f:55:7c:dd:c6:df:02:
38:b6:bc:04:c7:da:53:ec:b5:3b:ef:5a:f3:a6:5f:88:0a:19:
be:a2:49:45:42:6c:b9:9b:c4:61:b1:7e:a1:8e:cd:ce:cf:43:
4d:7e:c9:38:dd:8a:13:d9:16:6b:a1:2d:fe:ad:44:b8:3d:d2:
24:96:82:da:0e:bb:86:d7:79:35:f1:ec:fc:ab:ad:13:e4:6f:
ca:87:07:b1:e6:9f:b6:4b:a1:47:11:90:2d:c5:b0:23:09:2a:
c0:08:40:2f:f1:c8:25:65:81:e6:0d:b0:81:38:a1:5d:93:f4:
b9:1f:8e:d6:1c:e1:c8:2d:59:c7:51:f2:ad:5a:79:bb:88:24:
dd:af:ac:cd:b3:a2:fe:93:ad:36:ba:18:6e:67:b9:19:2b:82:
69:32:f0:1b:21:ba:63:d7:31:45:5e:17:ab:7a:5a:32:d1:2e:
5a:01:0d:43:a6:60:5d:3e:54:02:4d:a5:61:d2:f0:e0:7d:69:
bc:44:ad:a6
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZt4oza/bOZ+7dH3kSXMQ56hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTkzNjYyNTlmOWJhZTdjMzczMzdiNTE1ZmE1YmVlMDVmNTNhYmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqP2DgjbIHMRvXYwQrxW8Mvfvneq
Kf5ULHH9vgzEQf4V3rRS88Eacb0HKrXWqdbdpaSggGzspB6v6FRPGGQ1HlnJE/iO
4eWbFUeZJOerXu18RruHWH2oQfMj5FL6bhPwco6VLrynwPcGT3H6UMOcYGsx3O7r
RoEiAnjHHZ1/Aey+Y0uvVTAclcYczoRJMxdiKfyOZ2sA+Sa/ThxBA9OrlWlruhEh
gI4v4yeUQlUcYbD89HjdeGlD4gMK/fsWbokkFbzbh8GCIeC8PB2rGUy+1a1lnjIk
SSdCk27/ziFUaVA8y2sKSvtpl4QT6ZTiafuIsA0Rmcl0iGfm/L9DSeWlTwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFBWTZiWfm658NzN7UV+lvuBfU6vOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1LzEwOGY0
NS0zZTcwLTRkYWMtOTM0MS1mOTU0MDAyZjUyNDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvMTA4ZjQ1
LTNlNzAtNGRhYy05MzQxLWY5NTQwMDJmNTI0NS8xL0ZaTm1KWi1icm53M00zdFJY
NlctNEY5VHE4NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA1BJuMA0EAgACMAcDBQAqEoQAMA0GCSqGSIb3
DQEBCwUAA4IBAQBkwrX4dsIVcUx4RBjbElqQLi+xLpwWfIlh2Df82gCMUmG+L56z
rRbtFfYjeZwJVK16Mhn1/srluuOGRgeZQTM+oY9VfN3G3wI4trwEx9pT7LU771rz
pl+IChm+oklFQmy5m8RhsX6hjs3Oz0NNfsk43YoT2RZroS3+rUS4PdIkloLaDruG
13k18ez8q60T5G/Khwex5p+2S6FHEZAtxbAjCSrACEAv8cglZYHmDbCBOKFdk/S5
H47WHOHILVnHUfKtWnm7iCTdr6zNs6L+k602uhhuZ7kZK4JpMvAbIbpj1zFFXher
eloy0S5aAQ1DpmBdPlQCTaVh0vDgfWm8RK2m
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:05:37 2026 by rpki-client