Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
File: FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer (raw, json)
Hash identifier: +JR/1BHRsd8XTw+86P7BJ62NGe7ugQjomO279EwVy1g=
Subject key identifier: 16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CB94668E3156465ACAD948A4CB1C50854
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Mar 2026 14:35:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200405
IP: 185.248.180.0/22
IP: 193.186.5.0 -- 193.186.6.255
IP: 2a0d:ee80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:46:68:e3:15:64:65:ac:ad:94:8a:4c:b1:c5:08:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 4 14:35:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:0e:b0:0c:2f:31:67:ca:9c:3a:25:c8:8a:
58:30:4f:8f:06:03:9a:a2:b9:d1:5d:7e:75:55:b0:
66:de:2b:32:71:7c:88:c2:eb:0c:2b:5f:18:30:bd:
96:35:5e:e6:3b:a0:3d:d2:74:25:df:88:50:f5:39:
98:ac:c9:d6:a7:62:9f:03:7f:db:ae:63:22:e7:05:
e5:46:31:de:63:f5:49:46:89:94:36:29:4d:31:10:
7e:36:85:c2:08:81:54:0e:01:18:46:10:c9:8c:83:
6b:06:6a:74:c4:07:4c:e7:38:c1:97:68:a8:74:83:
e8:ab:2e:b1:e6:46:10:a8:b7:b2:f4:70:af:c5:9e:
af:75:19:04:3e:ff:59:93:78:df:65:7a:1d:d9:8c:
af:c4:b3:8b:87:e3:01:85:50:a4:c4:fe:ce:05:26:
f6:c6:66:ee:3d:13:a8:a8:77:1f:24:5f:32:4a:1c:
e2:db:94:26:d3:57:25:10:7e:c1:eb:31:a1:85:50:
50:3a:ff:1c:b3:1f:d3:9d:a5:77:14:d1:d5:fa:c8:
df:8c:1a:7d:80:2e:83:f8:99:68:35:ff:d7:fa:a0:
c1:f2:07:29:55:fa:1a:4b:3f:dc:69:f5:c2:4e:35:
fd:c4:9a:2f:be:e2:f5:be:a3:66:60:80:0f:5e:2e:
84:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.180.0/22
193.186.5.0-193.186.6.255
IPv6:
2a0d:ee80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200405
Signature Algorithm: sha256WithRSAEncryption
9d:27:49:fb:63:a8:b7:7c:d1:2c:9e:c0:1f:2c:6f:f5:dd:48:
9f:66:a9:d4:9f:58:62:5d:12:ec:56:e2:7b:fd:1b:bc:10:5f:
fb:b4:05:f8:1f:40:d8:0e:34:54:7a:72:58:bb:09:3f:6b:d1:
27:74:67:d5:65:87:02:04:1b:ab:0a:bd:e7:75:d4:8f:3a:72:
12:66:07:b9:68:0c:72:d3:f2:3c:be:cf:0d:55:06:b1:b0:fe:
f0:46:b1:e4:26:20:96:42:01:44:8b:0f:a6:e2:f5:db:80:41:
31:34:91:81:c0:ce:cf:fd:e4:bc:19:0b:bf:0b:ac:7b:be:f0:
1f:d7:b8:b5:ec:ec:0c:9f:ea:98:c2:44:7c:47:d3:b1:c2:a9:
61:4e:10:62:77:d4:f4:71:e8:b5:58:e4:f2:6d:bc:96:82:b5:
f7:ea:7e:cc:2b:d8:a2:16:68:12:f1:07:49:42:53:29:96:e4:
a5:b7:15:9c:e1:8a:28:e0:ee:a6:7d:db:a5:e8:c5:ff:43:37:
46:39:9f:3c:5a:ba:b1:28:09:30:52:e1:87:fa:01:5d:28:65:
b0:47:8f:fa:a2:9c:1f:61:45:68:b1:9d:5a:33:9a:fd:dd:7a:
3b:8b:fc:d9:d4:11:8a:dd:91:e4:e5:ef:48:b4:15:c9:e3:57:
b7:82:ba:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:05:43 2026 by rpki-client