Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fo_q-FM_haWBITrWyAHjn0pCC1k.cer
File: Fo_q-FM_haWBITrWyAHjn0pCC1k.cer (raw, json)
Hash identifier: Rbj5u4xcdg4fEXQ6oAOh/CCXUj8q/b69lQRZW72k5Hc=
Subject key identifier: 16:8F:EA:F8:53:3F:85:A5:81:21:3A:D6:C8:01:E3:9F:4A:42:0B:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA52BC48395ECDCF04A881B52C02FDE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:19:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214979
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:2b:c4:83:95:ec:dc:f0:4a:88:1b:52:c0:2f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=168feaf8533f85a581213ad6c801e39f4a420b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:14:a0:80:8a:85:41:d2:b6:4b:ef:62:36:
76:14:65:23:fe:ff:ac:de:1e:42:ce:44:46:ed:4f:
40:19:11:a7:7f:c3:43:8f:1b:c3:33:7c:3d:88:c1:
cf:f2:b6:21:3b:d2:cc:28:fe:48:6c:53:e4:7f:7e:
0d:ed:3f:03:36:f0:8b:da:fa:48:b7:12:05:9b:45:
f0:20:47:ee:c4:68:e6:2a:74:eb:90:86:b0:a8:ed:
d8:12:f5:58:b7:3a:69:07:38:44:77:dd:0b:6f:2e:
75:28:72:42:b4:88:8d:9a:80:d4:50:55:da:e5:28:
15:79:21:f5:66:73:78:b0:0d:8c:0f:9b:5f:f5:b6:
b4:4b:b1:2d:fd:49:64:50:f2:c9:62:ef:63:b7:d8:
1c:ee:56:8b:89:2b:cd:a4:64:e0:29:26:ae:e2:02:
6d:b3:d6:34:cf:13:02:c1:54:9e:8b:72:0e:bb:34:
f4:64:14:d0:b4:f6:b2:d5:cf:5f:e7:04:d7:51:ed:
f5:ea:36:10:d2:ef:47:2f:fe:4a:12:5b:48:78:4b:
9a:7f:c9:7e:40:4d:3f:7c:76:b0:14:2a:2c:e4:d0:
f9:19:13:b3:dc:40:c6:75:57:2a:23:7e:39:ab:ce:
f1:33:d6:51:7a:98:a0:d0:fa:0d:73:bf:7e:a9:6d:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8F:EA:F8:53:3F:85:A5:81:21:3A:D6:C8:01:E3:9F:4A:42:0B:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214979
Signature Algorithm: sha256WithRSAEncryption
95:af:78:8b:a9:74:f5:c3:83:2e:d7:5b:2a:d5:99:55:9f:57:
da:a4:07:60:80:cf:8e:1d:ed:b5:1f:eb:58:18:29:e5:2c:7d:
27:9c:6d:ae:47:14:20:5d:f7:73:02:67:83:4b:9e:a0:f5:16:
c9:30:8e:65:e1:09:a9:60:cb:20:28:af:5a:b0:25:e1:df:f7:
4c:16:d7:a9:7c:d3:26:e6:9c:0a:43:c2:ed:c0:28:b6:30:98:
0f:4d:ad:77:de:1d:86:4c:60:9b:98:81:5c:01:6e:83:64:b3:
e6:28:4b:f1:73:e2:d6:f1:d1:cd:91:98:ad:b9:41:3b:82:11:
d6:2f:ff:52:a5:93:ce:88:40:ac:40:20:7e:e0:4c:9e:26:71:
91:d6:01:02:a4:a2:da:64:45:fd:50:99:a4:94:a2:7c:c1:90:
df:a2:7b:a8:a5:32:6a:44:ac:ce:18:0e:0f:0f:18:8b:da:53:
08:8a:7d:00:fc:a9:7b:bd:5b:18:b2:3b:0c:15:1c:cf:8c:8c:
d1:24:43:fa:21:f1:47:e6:13:e0:ce:e9:08:4f:a0:68:51:57:
54:f2:6f:06:d8:18:a7:a5:c1:4e:5b:d1:ee:aa:0e:c7:70:0a:
d3:07:f1:9d:23:32:89:f7:d3:0e:cf:fa:36:80:72:84:96:d6:
a0:09:f6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:20 2026 by rpki-client