Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
File: FrGYtu469o3rwjR6Xpj3Efsw8os.cer (raw, json)
Hash identifier: NdOp1GZANEw1WSfgTkkvDZiwL1KVSgtn794FpH9aYKw=
Subject key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC81ABC4DE678B9B16DFD023689164B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:18:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214058
IP: 62.68.78.0/24
IP: 212.108.99.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:1a:bc:4d:e6:78:b9:b1:6d:fd:02:36:89:16:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:f1:08:8a:d8:49:29:6c:86:0a:55:c8:d2:
15:e6:6a:09:69:f4:04:3b:6b:5e:68:02:77:e2:4c:
49:ae:b2:f9:b0:c6:eb:1d:3b:6a:d2:52:f9:4d:17:
64:85:5a:84:48:4f:23:45:1b:46:cd:08:1e:81:56:
5a:93:f3:31:26:a2:d4:49:e9:4a:df:77:c9:f0:9e:
ea:3e:b9:f7:16:a5:f4:50:e4:1b:d5:5d:35:fc:0b:
35:2c:97:e8:9c:61:7f:60:c0:2d:f0:1c:7d:36:2e:
bc:19:84:7d:6f:4a:1f:6c:e5:50:9b:61:49:7e:6f:
8c:63:f5:e1:15:c6:04:96:c6:a6:84:78:8d:78:8d:
d3:da:e8:03:0b:ce:11:8b:14:ae:10:90:98:39:15:
92:46:76:b3:54:ca:73:71:2c:77:c7:85:54:b2:72:
06:8f:0d:61:5d:6c:da:68:3a:2d:f6:a0:06:6c:1b:
b0:d6:23:21:f6:8c:83:07:d3:2d:76:de:02:54:18:
3a:96:7c:b1:c2:05:d6:e4:83:68:81:8c:6f:c2:74:
3b:32:97:11:fb:81:c5:c7:fd:cd:8b:2c:56:b4:cc:
ea:0c:90:90:c8:d5:9c:58:07:b1:1b:07:60:5a:4f:
f6:54:bb:82:97:93:92:60:8a:e9:6b:e5:fe:d2:9b:
61:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.78.0/24
212.108.99.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214058
Signature Algorithm: sha256WithRSAEncryption
19:4d:6f:b1:fe:3a:83:38:e6:7f:0e:87:b8:23:53:1a:01:4a:
ec:04:07:3f:e9:90:22:8b:9e:7f:5e:6a:89:78:22:dd:3c:11:
16:74:4e:61:18:d7:ce:b8:60:04:17:72:a2:fb:51:3c:82:6a:
24:6b:f1:5d:f0:71:8f:93:3f:5e:2f:eb:d2:b8:68:31:c5:7d:
c3:13:b8:77:40:4b:6d:79:04:dc:8b:8e:40:d1:82:f2:7f:e5:
75:06:8f:e8:a2:f8:cd:87:a6:0a:4a:6a:82:f7:2a:6d:d3:3b:
a6:20:55:de:4c:f8:5c:3a:f5:3c:f8:21:95:90:51:1d:2d:70:
69:ee:28:50:9d:88:97:47:8f:29:ac:00:43:3f:1c:e1:4e:e1:
9e:a7:8f:99:cd:aa:c0:3e:eb:53:78:a4:58:0b:e3:0e:ed:61:
24:df:0b:8c:c3:a9:c6:3b:8c:df:8d:ae:53:27:99:cf:8f:0e:
5b:f3:fb:68:94:6d:77:d7:dc:a0:bb:aa:17:4c:39:5e:57:f8:
a3:3c:58:70:71:3f:c0:12:f2:30:4e:d1:c9:48:2b:75:da:89:
e0:1d:ed:4f:ea:c6:4b:b3:9a:b6:23:7e:58:28:d4:78:ec:04:
b1:62:a6:26:1e:62:b1:a3:d5:06:f9:74:61:ed:36:59:87:62:
df:0e:a3:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:18:59 2026 by rpki-client