Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
File: Fi5IMpyL6O8gnplY2marAkAUXhk.cer (raw, json)
Hash identifier: IPUey3OVGb6B7293RLLwGsQiCYVO2NGB1l+zPM33BYU=
Subject key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79EC9AF88BB6633BB06FF30319DDA30F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57795
IP: 23.249.232.0/21
IP: 37.114.88.0/21
IP: 64.23.96.0/19
IP: 64.26.32.0/20
IP: 83.174.128.0/20
IP: 93.92.24.0/21
IP: 149.143.0.0/19
IP: 185.6.204.0/22
IP: 185.34.176.0/22
IP: 185.37.64.0/22
IP: 185.43.212.0/22
IP: 185.144.20.0/22
IP: 185.221.156.0/22
IP: 185.254.41.0 -- 185.254.43.255
IP: 2a00:9340::/29
IP: 2a00:f5e0::/32
IP: 2a07:36c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:9a:f8:8b:b6:63:3b:b0:6f:f3:03:19:dd:a3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=162e48329c8be8ef209e9958da66ab0240145e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:ed:4b:a2:22:58:c3:9b:f9:a3:01:ad:3d:
df:46:25:f8:ec:3d:1a:c0:ea:04:d3:45:8b:d3:61:
b9:31:e6:91:c9:96:8e:f4:0e:44:68:29:e6:0b:8f:
40:47:ed:82:33:96:88:d5:b3:f9:8c:66:24:05:76:
41:d3:ad:3b:95:f3:b9:6d:7b:1c:06:06:20:c7:99:
e7:d4:dc:c7:38:53:66:1c:de:cf:c4:7b:e3:c0:a7:
60:7e:04:86:33:b5:af:20:77:bc:f8:4a:04:e4:af:
7b:af:c3:73:42:d5:eb:bf:80:4f:64:a0:fa:15:2c:
47:8e:cd:b2:6d:46:9c:a7:f7:4a:bd:91:57:e3:33:
5b:9c:ff:bb:cb:2b:cf:42:cc:86:33:22:85:82:e8:
64:da:45:89:97:3a:fe:26:a7:61:b6:6d:5f:3f:97:
da:11:19:8b:c7:1a:2f:c8:22:7d:bc:2c:d7:65:e2:
2b:e3:66:ff:c5:91:a8:b1:20:21:85:c8:87:98:57:
b8:35:22:bf:6a:a8:1a:c5:0a:36:2d:df:57:91:a9:
d0:eb:00:fc:5c:70:9f:bb:a9:e7:02:24:f9:f7:06:
77:89:7d:9a:e0:04:ea:b4:83:2b:80:34:14:92:1d:
7c:25:b3:6c:1c:20:f8:9a:05:06:f7:d1:eb:52:98:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.232.0/21
37.114.88.0/21
64.23.96.0/19
64.26.32.0/20
83.174.128.0/20
93.92.24.0/21
149.143.0.0/19
185.6.204.0/22
185.34.176.0/22
185.37.64.0/22
185.43.212.0/22
185.144.20.0/22
185.221.156.0/22
185.254.41.0-185.254.43.255
IPv6:
2a00:9340::/29
2a00:f5e0::/32
2a07:36c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57795
Signature Algorithm: sha256WithRSAEncryption
5b:fc:70:9d:da:b3:db:5f:b7:a1:b7:15:6c:29:0f:9c:70:e4:
ae:ea:12:1c:f7:58:0e:ef:4f:47:78:3d:81:a1:e8:27:ec:ee:
0c:38:26:4c:1e:9a:62:00:1b:39:4d:40:1d:36:5a:68:f8:3c:
fd:09:f6:24:de:8b:74:44:b1:ac:8d:1d:92:a9:f7:40:10:5b:
91:d2:e4:53:c6:1d:ce:45:88:32:70:56:9a:c4:7f:3f:b5:99:
e2:f8:3d:93:ca:33:96:d1:71:ad:35:ea:5e:ec:e8:95:17:61:
f4:ec:9a:b5:31:c3:8b:26:b9:77:9d:64:13:b3:98:48:6b:1e:
df:9c:0c:c2:74:f1:3c:b9:5c:4b:b7:0c:5c:b3:9b:2b:82:f7:
49:fb:b8:c9:89:4d:f7:4f:95:eb:8d:bb:a3:86:a9:c5:39:92:
93:69:24:60:c5:82:a7:b8:c3:89:3b:50:41:5e:b7:5d:40:03:
51:d8:3b:0c:ac:3b:4c:25:ef:ed:2b:6d:3c:10:0a:a2:f4:04:
f1:0c:4b:12:23:ab:c4:93:9b:9c:49:ac:ca:70:e2:8a:05:9f:
55:d2:f5:59:11:53:6c:7a:f2:3c:6e:b3:03:d1:8b:c8:80:a1:
21:89:e5:72:65:e7:2f:78:1e:f4:83:ca:99:e6:4b:5d:8a:db:
43:80:1b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:23:18 2026 by rpki-client