Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P6NM0-FkjlyNMFRd65qVqtul5sE.cer
File: P6NM0-FkjlyNMFRd65qVqtul5sE.cer (raw, json)
Hash identifier: y2hcRWslKe0kS9WSoxIKQFGBOhac3HRuCfV1GO/1cSE=
Subject key identifier: 3F:A3:4C:D3:E1:64:8E:5C:8D:30:54:5D:EB:9A:95:AA:DB:A5:E6:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C422F4CAF94F174CD4F966C2AD4D1E37C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/P6NM0-FkjlyNMFRd65qVqtul5sE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 09 Feb 2026 11:35:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.223.100.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:2f:4c:af:94:f1:74:cd:4f:96:6c:2a:d4:d1:e3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 9 11:35:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fa34cd3e1648e5c8d30545deb9a95aadba5e6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:ce:1f:c1:96:66:41:d6:91:aa:8d:d7:9e:
0c:40:23:c5:73:2e:db:34:cd:32:fa:5b:00:1f:cd:
cd:ff:83:77:5a:f2:ea:c2:88:26:56:60:a7:9c:40:
83:4d:1b:c7:23:4b:28:18:77:94:28:11:1c:20:c0:
fa:cd:61:7a:e1:f0:7e:05:b2:bf:26:3e:14:b5:4c:
bc:2a:73:c3:42:11:fe:f6:0f:c7:b1:c8:9a:71:6d:
28:f1:be:85:16:32:18:bc:67:de:32:58:b6:59:72:
17:ba:cd:a9:92:e3:8a:48:c5:41:09:68:2c:7b:2f:
1a:1f:e5:54:b7:6c:c6:82:38:53:c6:f2:d0:be:f2:
22:37:92:51:e8:85:71:51:7f:93:b5:f1:4c:65:48:
8a:c0:2f:d1:6a:90:a2:af:67:51:3f:1b:22:8a:c6:
ae:f2:f0:40:b3:f4:87:34:e0:88:61:d1:d6:58:9a:
27:ea:cf:bf:11:80:89:9c:79:17:3f:ea:98:f0:30:
d0:ca:80:b7:7a:af:08:c6:26:78:28:63:bf:cc:d9:
48:cc:52:ac:99:5d:72:c7:6b:a4:4e:14:66:8d:8d:
bc:cc:ce:d9:16:38:1b:5a:b5:32:26:4b:dc:c1:e3:
c2:3b:31:df:32:87:2b:aa:42:1d:fa:03:29:d0:84:
f5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A3:4C:D3:E1:64:8E:5C:8D:30:54:5D:EB:9A:95:AA:DB:A5:E6:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/P6NM0-FkjlyNMFRd65qVqtul5sE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.100.0/24
Signature Algorithm: sha256WithRSAEncryption
65:dd:6b:8e:da:bd:af:ae:3a:4e:89:ea:01:9c:d9:86:49:1f:
13:07:7f:61:26:60:56:09:19:55:c3:3b:29:05:83:2b:3e:00:
d8:97:31:8b:87:7a:fb:c4:c7:14:95:12:5f:e2:52:51:8f:22:
4c:52:31:02:b7:d6:46:d8:43:cc:f7:89:dd:00:e7:c2:e7:15:
41:60:2a:37:c3:0d:5e:5f:2b:c9:42:82:28:84:4f:ea:e6:9d:
f7:e1:83:cf:06:ac:f9:15:0a:b1:89:bc:ef:10:23:2c:2f:e3:
be:f7:6d:6f:b6:7d:d5:12:93:6e:04:b1:a4:b9:98:f5:23:da:
7b:51:1f:d1:b5:4a:b2:48:35:9f:94:13:b6:77:d7:4b:af:6e:
3d:ed:28:46:7d:74:6b:67:9e:23:5a:1f:dd:0b:9c:89:58:f9:
86:12:fe:8f:e9:8e:ac:22:22:ae:65:15:24:1c:29:56:12:15:
a0:27:be:41:7e:58:c1:ec:b6:86:e6:7d:56:dd:df:40:f5:45:
6d:99:25:3f:88:ca:1e:54:1c:47:51:b6:b3:4b:d0:72:3b:e8:
73:e4:98:f6:31:6f:84:11:56:a8:9e:b2:15:00:f4:b1:63:46:
7f:49:cc:34:95:a4:5f:b1:f9:d5:8b:54:f8:6e:03:b3:f7:6d:
48:52:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:23 2026 by rpki-client