Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
File: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer (raw, json)
Hash identifier: KuHapOCxe/HeBtgniEZOabfe++KJ80ux4r5w/Khg/b0=
Subject key identifier: 16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F849B88D7F1FCD3703A0CB3E570BD7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:22:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209053
IP: 45.8.232.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:9b:88:d7:f1:fc:d3:70:3a:0c:b3:e5:70:bd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:22:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:83:a6:5c:18:6c:4a:d1:27:6e:70:62:c7:
d2:01:cf:3f:97:89:ba:4a:00:07:c2:2a:7e:f9:c9:
63:8b:87:f2:c2:0b:2f:ab:61:b6:84:7f:42:de:4e:
22:68:89:46:61:d3:b8:ec:ec:42:69:13:ee:f4:42:
f5:d0:8d:2c:38:15:47:8e:5b:d3:35:81:42:03:95:
8b:39:44:59:4c:39:97:a3:c7:6b:36:fc:be:03:e7:
37:03:1c:a1:2c:3e:4d:ad:32:8f:94:66:28:e9:11:
0b:c0:c2:d3:9d:84:ab:4e:b5:24:3d:08:77:e2:81:
2a:21:40:9e:ed:a1:00:80:29:3a:9f:8c:67:95:a3:
01:5d:f0:f0:3f:48:87:64:ab:d7:07:d1:e1:c8:96:
79:1b:a7:36:c5:59:b4:e3:ce:a2:62:11:23:a0:34:
16:81:08:2b:04:36:07:04:f1:7d:18:ba:4d:c5:03:
e3:cb:64:95:2b:05:b9:30:b5:a4:7e:ff:b6:52:e3:
17:5a:a1:5b:64:78:73:26:ca:fe:5a:21:1a:4e:df:
c6:41:0d:b5:d8:2c:7d:af:c9:60:0d:73:23:41:a9:
c9:45:55:8d:a2:68:d8:17:b0:1f:55:f9:05:56:4c:
ca:5c:f5:5c:27:38:4e:46:d1:67:c6:19:71:18:ee:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.232.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209053
Signature Algorithm: sha256WithRSAEncryption
83:b0:85:a4:e2:b0:f8:9c:27:ab:ba:0b:b6:80:aa:65:0a:0d:
c3:8d:9d:89:dd:77:37:c7:e0:bf:65:44:2a:f1:da:49:5e:89:
c4:80:dd:15:6c:dd:24:9f:f7:fe:cb:66:c6:39:ae:37:5d:1f:
21:8a:a8:e0:94:08:42:eb:0c:03:2c:d6:36:66:e0:fc:a1:06:
f6:e5:ae:aa:f3:04:25:3e:b6:17:c3:b4:03:88:e1:45:3b:6c:
ff:19:88:a1:ca:31:eb:e8:e1:e0:a8:fe:9b:55:c4:70:79:66:
8d:ce:6e:37:e5:04:d0:12:7a:a0:a4:e5:b6:6d:7b:8f:9b:de:
16:c9:0f:7c:1a:f6:32:03:9a:c3:16:1b:14:37:09:b6:dc:67:
3e:23:24:e9:55:db:b3:7b:9b:23:26:0c:15:87:04:64:e6:de:
d9:81:ab:34:1e:29:36:0a:1e:4b:51:58:3e:ba:6f:cd:0a:05:
84:fb:54:2a:60:eb:09:b9:ce:4e:12:0b:c1:08:24:ea:77:75:
12:0b:b2:6b:2e:ac:d4:01:e0:fa:b1:e8:50:db:cc:39:cc:a2:
f1:24:94:5d:5b:ce:73:9d:23:a3:c8:e0:c4:8f:7e:c6:8b:de:
46:61:18:9d:62:2b:97:da:d1:c5:a0:5f:4d:6e:f8:84:7e:3b:
e8:ef:e4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:11:31 2026 by rpki-client