Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fe_NafEwzkzLXCCxDAM6Vlph34U.cer
File: Fe_NafEwzkzLXCCxDAM6Vlph34U.cer (raw, json)
Hash identifier: Io3HFpKVaPSmpKuuha/jAWyz4xQ4NsKYQPUi3N+L6sg=
Subject key identifier: 15:EF:CD:69:F1:30:CE:4C:CB:5C:20:B1:0C:03:3A:56:5A:61:DF:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CB8F187BBE7D45AD79EB3158493C69CDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/Fe_NafEwzkzLXCCxDAM6Vlph34U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Mar 2026 13:02:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 28680
AS: 201154
IP: 193.53.41.0 -- 193.53.44.255
IP: 2a11:4700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:f1:87:bb:e7:d4:5a:d7:9e:b3:15:84:93:c6:9c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 4 13:02:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15efcd69f130ce4ccb5c20b10c033a565a61df85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:2e:5d:1e:47:82:85:61:1e:54:29:3a:19:
c8:f5:a2:ca:86:fc:07:38:2c:0e:f6:6f:a1:3b:a1:
99:19:92:91:4e:94:7a:01:95:af:e7:f8:b7:25:6a:
07:5f:fd:e8:a9:32:6e:a3:17:18:82:33:ff:cf:33:
b0:66:14:54:ab:b7:d5:b0:66:fa:ad:03:bf:32:40:
76:2a:1e:ce:72:a6:75:8a:e0:55:6d:6c:5e:a6:b7:
40:ab:09:8a:18:3d:53:82:ed:be:d2:0d:d4:24:8d:
7d:82:a7:b5:5d:04:fb:1f:82:7f:4b:3b:9c:68:8b:
5a:98:57:9f:f3:56:80:49:74:ee:8e:e5:69:a6:91:
63:50:8c:63:06:aa:0a:69:d7:2e:f0:64:8b:19:e5:
6c:93:6a:41:0b:94:37:eb:ba:42:0e:32:a5:9b:5a:
40:5a:cc:b9:26:1d:7d:da:18:36:6d:e2:87:c0:b6:
7c:5b:ef:cb:e5:ce:74:a0:8f:fd:b8:aa:71:b2:35:
c7:05:6c:7e:f6:12:ed:3c:ce:52:87:1e:6f:9e:9d:
f3:da:18:4e:56:f9:a2:fb:9a:78:10:82:52:58:68:
6a:42:fc:76:64:bf:7c:cb:08:42:58:58:0d:cd:79:
e8:a1:e1:23:0d:3f:7c:d2:eb:b9:ad:e5:70:df:fc:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EF:CD:69:F1:30:CE:4C:CB:5C:20:B1:0C:03:3A:56:5A:61:DF:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/Fe_NafEwzkzLXCCxDAM6Vlph34U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.41.0-193.53.44.255
IPv6:
2a11:4700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28680
201154
Signature Algorithm: sha256WithRSAEncryption
97:09:97:49:f2:05:4a:d5:1e:bc:71:44:a9:8d:81:a0:5b:9e:
ed:d3:2a:36:21:50:86:1b:0c:08:9a:14:5d:23:1d:da:9b:84:
92:12:90:bf:e3:6c:8b:85:ad:ac:a1:f4:c6:8f:69:c6:59:a5:
1c:28:f8:3c:49:75:cc:2d:f1:e8:ae:c4:33:e4:a5:8e:c8:74:
3f:50:9b:b8:3b:c0:82:96:d7:90:6c:8e:4b:8b:46:b3:a4:a2:
5d:bf:5d:54:89:42:c9:c4:c2:b6:d6:cd:8f:47:0f:24:9d:d8:
b5:c3:e2:04:3d:eb:d7:03:62:3d:0b:e5:06:e0:d1:1b:49:18:
80:a5:8b:f6:04:16:65:2d:9a:86:e1:ce:8b:25:e2:df:fa:08:
c4:b1:cd:d9:17:2d:b9:b9:c2:41:eb:48:84:b6:e2:28:4a:aa:
cb:8a:8b:50:02:b1:1c:d5:95:e8:73:9a:bc:7b:b1:9a:77:3b:
fe:06:7b:4e:e7:29:01:a2:ce:de:38:39:cb:47:cd:f8:6c:c9:
89:da:32:09:84:9b:ab:48:40:f9:31:1a:f1:52:d2:08:b3:30:
1d:01:8c:2d:5a:93:24:e2:21:a9:ef:d7:57:99:99:dc:46:28:
1c:b9:3a:e6:f5:da:37:59:12:2e:4f:d6:dd:9b:57:cb:d4:99:
bc:ce:e8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:13:32 2026 by rpki-client