Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
File: FqX_fn4arzjlmWnWCYBKOz8Fvog.cer (raw, json)
Hash identifier: HGFdluawGiuCcLIC7kkV3CZQQJMfCJVXOPJG0CP6dWw=
Subject key identifier: 16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77593893B5045D11E824D84FD10FEB27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:18:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.84.75.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:38:93:b5:04:5d:11:e8:24:d8:4f:d1:0f:eb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3a:13:e4:6d:92:bd:27:6c:7e:b1:85:b0:eb:
ea:d2:51:a5:aa:8f:a2:b2:26:ba:14:b0:c1:01:21:
f2:14:6a:78:0b:25:dd:0f:f1:ee:25:5e:d1:d5:5d:
43:76:7e:65:98:01:41:11:d2:b4:e8:ed:a1:35:b2:
1a:4b:53:a7:fb:a9:60:f8:ce:7e:f8:4c:9f:f6:d0:
2a:52:2d:9e:9d:42:32:ce:08:a6:33:92:fd:58:1b:
be:e2:ca:76:da:0e:a9:a7:11:f9:99:62:e0:b6:5d:
a3:33:10:d9:cb:57:e6:8e:b5:56:89:1a:43:48:6c:
5a:ee:c6:e0:e5:94:78:a2:a7:a8:7c:e5:4a:b1:f3:
fb:c0:7e:ad:fa:b2:e1:06:04:a0:0a:17:fe:9a:7e:
dc:4b:28:a9:e8:77:93:8b:ca:d8:8f:83:0c:33:65:
6a:bc:bc:80:b3:04:a1:58:11:26:34:89:13:03:1e:
5a:2d:c4:62:3d:0c:a4:8f:79:0a:67:39:1e:86:01:
d3:dd:3a:99:bf:ba:a6:fc:92:59:60:e8:b4:f2:b9:
cc:72:e6:5e:92:54:45:b7:07:69:dd:31:c1:c6:6c:
ac:88:79:b3:9b:76:19:0b:45:67:f8:aa:37:44:1d:
eb:42:b6:7e:43:d9:ff:0b:22:49:8f:61:53:0b:a0:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.75.0/24
Signature Algorithm: sha256WithRSAEncryption
17:84:8b:ba:68:23:7f:20:73:ce:be:f1:26:97:10:41:4a:3a:
cf:39:07:64:63:9d:34:f0:7a:8a:ad:0d:c4:00:ee:a3:1a:2b:
04:2e:c7:98:f2:6b:34:07:ff:09:da:8c:e3:de:d4:10:b3:2e:
55:dc:bd:e6:0e:d9:ff:23:91:78:4e:d4:5f:2c:83:a8:4c:96:
76:ad:86:95:88:a9:e2:65:ba:de:ec:8b:e8:b8:26:5e:d9:08:
1c:45:37:94:70:c9:be:c5:ac:22:28:f8:c1:46:07:6d:1c:27:
c4:85:ae:f7:25:cf:43:67:a9:3b:bb:1b:1d:80:5f:c9:0d:3a:
3d:13:66:5f:f5:1b:9c:4c:b1:8c:b8:9e:24:30:4f:cc:2e:48:
d8:02:49:4c:00:44:0e:d8:9d:06:5a:c3:8c:63:8a:c8:f8:42:
80:65:dd:c4:b3:37:41:8e:10:c2:f7:df:51:f3:cc:c4:76:ab:
e2:9f:96:eb:6e:11:9a:85:fc:45:05:4e:e3:b7:ec:b8:59:a3:
7a:76:09:de:98:76:8a:a8:c4:a8:b9:1e:3e:fc:42:8f:53:b9:
58:0d:f3:3b:f9:23:52:83:83:ff:01:96:61:dc:ce:f8:80:99:
43:60:1e:81:87:27:fe:cd:1e:53:9f:8d:ba:1f:f8:9c:99:07:
52:68:5e:f7
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZt3WTiTtQRdEegk2E/RD+snMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmE1ZmY3ZTdlMWFhZjM4ZTU5OTY5ZDYwOTgwNGEzYjNmMDViZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDoT5G2SvSdsfrGFsOvq0lGlqo+i
sia6FLDBASHyFGp4CyXdD/HuJV7R1V1Ddn5lmAFBEdK06O2hNbIaS1On+6lg+M5+
+Eyf9tAqUi2enUIyzgimM5L9WBu+4sp22g6ppxH5mWLgtl2jMxDZy1fmjrVWiRpD
SGxa7sbg5ZR4oqeofOVKsfP7wH6t+rLhBgSgChf+mn7cSyip6HeTi8rYj4MMM2Vq
vLyAswShWBEmNIkTAx5aLcRiPQykj3kKZzkehgHT3TqZv7qm/JJZYOi08rnMcuZe
klRFtwdp3THBxmysiHmzm3YZC0Vn+Ko3RB3rQrZ+Q9n/CyJJj2FTC6CRCwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFBal/35+Gq845Zlp1gmASjs/Bb6IMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzBmZWNk
NS1lZTYyLTQwMWEtYTU3Yi02NmRhZGVhMjljNGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMGZlY2Q1
LWVlNjItNDAxYS1hNTdiLTY2ZGFkZWEyOWM0YS8xL0ZxWF9mbjRhcnpqbG1XbldD
WUJLT3o4RnZvZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwVRLMA0GCSqGSIb3DQEBCwUAA4IBAQAXhIu6
aCN/IHPOvvEmlxBBSjrPOQdkY5008HqKrQ3EAO6jGisELseY8ms0B/8J2ozj3tQQ
sy5V3L3mDtn/I5F4TtRfLIOoTJZ2rYaViKniZbre7IvouCZe2QgcRTeUcMm+xawi
KPjBRgdtHCfEha73Jc9DZ6k7uxsdgF/JDTo9E2Zf9RucTLGMuJ4kME/MLkjYAklM
AEQO2J0GWsOMY4rI+EKAZd3EszdBjhDC999R88zEdqvin5brbhGahfxFBU7jt+y4
WaN6dgnemHaKqMSouR4+/EKPU7lYDfM7+SNSg4P/AZZh3M74gJlDYB6Bhyf+zR5T
n426H/icmQdSaF73
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:19:07 2026 by rpki-client