Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
File: IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer (raw, json)
Hash identifier: SphQzgh7dShNrDZvxiBHzcrOJDwE5YR9dCUtcv6rl1Q=
Subject key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D05819826060699CAA5BC062871E63EFC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 19 Mar 2026 09:51:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210605
AS: 213336
IP: 45.148.176.0/22
IP: 185.25.112.0/22
IP: 2a00:7e60::/32
IP: 2a11:61c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:81:98:26:06:06:99:ca:a5:bc:06:28:71:e6:3e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 19 09:51:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5a:a1:1c:f1:0e:6b:b6:7a:86:30:3f:4e:ae:
ee:d2:d1:bf:32:61:a4:17:55:e9:86:97:f6:69:d3:
d5:9e:03:32:40:59:22:97:93:87:02:3c:de:3d:36:
a7:a3:5f:7e:1d:9d:2c:51:bb:b5:51:8a:4c:34:5e:
f9:f6:f5:62:1e:0f:3f:33:f4:50:86:0c:ec:8b:20:
ff:cf:65:54:f9:4b:77:c8:53:6e:0e:75:5f:13:18:
91:02:b2:c6:f3:aa:a8:c7:05:62:63:73:11:4e:fd:
ce:db:ad:78:db:4e:35:9a:88:38:04:ab:c0:23:78:
b8:8c:ec:84:b8:e7:41:6d:6e:bf:fc:df:1b:90:8c:
1e:39:25:ed:9b:eb:e1:ed:67:ca:d8:4a:d5:73:0d:
5f:75:c3:49:b3:d5:4d:70:6d:c7:84:38:e0:93:2b:
26:07:98:cf:59:ea:ee:c2:71:3d:d9:c1:9e:7c:37:
ee:39:f6:4c:ad:5c:26:ef:5f:1a:ce:6a:7a:05:b6:
50:b9:9b:70:1f:88:4b:fa:a6:a8:9c:cb:6d:bc:fb:
b4:d2:74:cb:32:35:1c:4a:0b:a6:60:09:70:18:11:
b1:bd:8c:db:3b:ea:54:ec:ed:56:de:66:58:9e:f8:
92:41:37:22:45:15:c6:ab:20:14:2c:f1:0e:c2:1f:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.176.0/22
185.25.112.0/22
IPv6:
2a00:7e60::/32
2a11:61c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210605
213336
Signature Algorithm: sha256WithRSAEncryption
0d:3e:e6:c7:98:86:13:66:2f:65:a7:76:ce:47:9b:7c:b4:6f:
56:d3:14:69:67:ab:69:90:e9:50:10:ad:9c:cf:0b:03:0f:9f:
47:66:f2:d7:7b:d2:f6:c4:10:20:f0:c4:45:b4:87:69:72:aa:
35:f3:8e:89:6e:07:eb:71:5f:57:bc:1b:24:22:cb:ab:1f:51:
c1:ca:58:d1:44:c5:fb:cf:f1:ca:f9:6b:4f:37:51:68:50:43:
8d:38:81:07:0e:75:f8:91:f3:db:52:04:3d:f8:0d:a2:84:93:
bd:06:a6:07:dc:71:f4:67:7b:fc:eb:75:0f:71:41:a8:eb:db:
ff:8f:57:51:b4:dc:44:79:48:a7:76:1e:16:8c:4b:86:c7:b1:
18:88:d6:36:8f:27:50:a1:ad:98:e7:35:32:c2:b9:85:22:02:
b0:d5:39:52:7b:ef:54:bb:e7:29:7c:dc:55:ae:0b:10:64:79:
bf:53:3b:52:fc:b3:56:62:b8:5a:91:42:dc:1c:2c:f2:3d:4b:
9c:5b:d3:94:f0:37:76:d2:ba:4c:02:62:48:a7:f6:a5:49:13:
38:24:79:c7:7d:66:97:33:7c:64:86:8b:d6:8f:ea:7d:93:b2:
c8:4f:80:6b:62:81:8a:59:40:05:4b:07:f8:03:8f:20:f8:60:
6b:f2:3f:85
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAZ0FgZgmBgaZyqW8Bihx5j78MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzE5MDk1MTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWMxNjcyZGJiYmY3MTY1YTZhODNiMzIyN2E3MTE5ZjBkMzFlOGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lqhHPEOa7Z6hjA/Tq7u0tG/MmGk
F1Xphpf2adPVngMyQFkil5OHAjzePTano19+HZ0sUbu1UYpMNF759vViHg8/M/RQ
hgzsiyD/z2VU+Ut3yFNuDnVfExiRArLG86qoxwViY3MRTv3O26142041mog4BKvA
I3i4jOyEuOdBbW6//N8bkIweOSXtm+vh7WfK2ErVcw1fdcNJs9VNcG3HhDjgkysm
B5jPWeruwnE92cGefDfuOfZMrVwm718azmp6BbZQuZtwH4hL+qaonMttvPu00nTL
MjUcSgumYAlwGBGxvYzbO+pU7O1W3mZYnviSQTciRRXGqyAULPEOwh8D3wIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFCHBZy27v3Flpqg7MienEZ8NMejuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2MwNWQ0
Yy05NmQzLTRiNTctYWUzNC0zNDc3YzdmY2Q0ZDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvYzA1ZDRj
LTk2ZDMtNGI1Ny1hZTM0LTM0NzdjN2ZjZDRkOS8xL0ljRm5MYnVfY1dXbXFEc3lK
NmNSbncweDZPNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQCLZSwAwQCuRlwMBQEAgACMA4DBQAqAH5gAwUA
KhFhwDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDNq0CAwNBWDANBgkqhkiG9w0B
AQsFAAOCAQEADT7mx5iGE2YvZad2zkebfLRvVtMUaWeraZDpUBCtnM8LAw+fR2by
13vS9sQQIPDERbSHaXKqNfOOiW4H63FfV7wbJCLLqx9RwcpY0UTF+8/xyvlrTzdR
aFBDjTiBBw51+JHz21IEPfgNooSTvQamB9xx9Gd7/Ot1D3FBqOvb/49XUbTcRHlI
p3YeFoxLhsexGIjWNo8nUKGtmOc1MsK5hSICsNU5UnvvVLvnKXzcVa4LEGR5v1M7
UvyzVmK4WpFC3Bws8j1LnFvTlPA3dtK6TAJiSKf2pUkTOCR5x31mlzN8ZIaL1o/q
fZOyyE+Aa2KBillABUsH+AOPIPhga/I/hQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:02 2026 by rpki-client