Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
File: FivG9rrBQqA6uxp62RaQaD8DpNw.cer (raw, json)
Hash identifier: NTlJf9F26kI5ff60eAxuK85aZSbtEDM4hR5HEi8zlf4=
Subject key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E37FA600D06E29C0E06828284A653A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:19:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60245
IP: 185.54.236.0/22
IP: 2a02:4760::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:fa:60:0d:06:e2:9c:0e:06:82:82:84:a6:53:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:49:ed:1d:8e:4f:39:34:7e:58:93:5e:ce:
9b:2a:e5:a1:60:9e:8f:8f:28:58:cc:2c:09:b5:9a:
fa:d4:11:af:dd:ac:27:5f:ff:26:d7:0b:a5:61:2b:
38:ca:9a:88:34:e5:7b:51:d8:32:ab:95:d3:de:30:
a8:5d:8b:d4:b1:34:56:f0:c0:4a:09:af:fa:fe:0c:
94:18:61:2b:a3:b7:f5:98:00:c8:a8:34:e5:d9:65:
65:41:2b:c5:67:67:11:7c:6c:4e:7b:f4:15:6a:12:
5b:8a:89:db:c8:75:21:00:56:39:ae:26:b1:28:09:
02:77:18:1c:63:17:72:66:f8:e8:3c:34:ba:a9:23:
73:2d:f3:b4:58:77:e4:f6:fb:c4:a2:86:d5:a6:8b:
ce:61:92:bf:b0:d3:76:6d:41:f3:9f:05:11:61:7e:
a2:4b:e1:d2:10:9a:2e:3c:3f:c3:5b:53:b3:e9:6e:
a2:d4:0e:2d:79:ec:0b:51:ee:9b:15:4a:12:5b:31:
fd:c6:ef:8c:76:ab:24:ff:c7:10:16:7a:d8:89:e6:
b4:c5:9e:e4:c7:03:38:8c:0c:b0:28:ab:79:1c:b7:
e9:60:e1:69:c0:5b:c6:a8:76:c3:ef:75:b6:50:2c:
24:73:1f:e3:37:20:0e:dc:c8:13:b7:0e:85:70:a7:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.236.0/22
IPv6:
2a02:4760::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60245
Signature Algorithm: sha256WithRSAEncryption
a6:8f:df:55:c5:f1:22:83:50:87:c7:fd:d1:9a:42:c5:b5:b8:
74:93:83:7b:0b:21:d1:8c:88:6f:f4:cb:53:ba:78:c1:37:1e:
0c:33:e8:ef:7a:51:7f:f9:b7:90:64:ca:38:0d:25:45:41:1d:
f6:43:de:26:cc:95:30:79:9d:38:7d:9a:e3:bd:e4:68:fb:6c:
4b:5e:72:7c:cf:61:0d:e9:a3:5b:81:fd:1d:25:68:fc:df:47:
26:80:ae:f8:f5:6a:49:5b:a0:54:a6:36:09:cb:8a:7f:13:8c:
d8:26:0d:95:89:74:41:93:85:6c:8a:78:bc:22:d2:b9:85:02:
01:55:a7:02:51:7a:94:91:d4:bf:04:a6:80:3f:27:9d:a7:34:
4c:be:f5:ca:7f:8a:fd:9c:53:d1:07:c0:23:98:80:2b:09:be:
49:f2:8a:56:6a:25:62:59:26:5b:24:40:44:a0:a9:3b:ca:67:
e5:82:d7:0f:01:2f:b0:2a:7c:1a:9c:b6:2b:a2:ad:18:75:2c:
99:71:d0:90:73:e1:f8:3b:00:03:a7:90:c3:b4:a1:34:4b:9c:
a7:34:74:18:c7:53:43:dc:7b:53:11:37:a2:f9:0d:e2:59:2b:
b1:79:80:ba:a1:27:b7:6d:14:3f:26:d6:ae:96:b8:2d:50:ed:
3d:88:60:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:00 2026 by rpki-client