Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer (raw, json)
Hash identifier: a6drpozXF/MV5QSVOUwrtaGo6SDxIIJMCbNBA/p55Iw=
Subject key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ECDE5911E5F09B42193897FE031CA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44548
AS: 51222
IP: 91.220.199.0/24
IP: 195.54.36.0/23
IP: 195.93.156.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:de:59:11:e5:f0:9b:42:19:38:97:fe:03:1c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:be:6c:1a:28:e3:86:e6:a3:e1:30:a9:f3:
0e:a0:55:b4:f1:3d:31:28:d2:d7:68:05:e6:86:07:
84:b9:1d:b6:8b:c6:c7:47:90:c5:3a:a1:04:2f:ff:
3e:62:36:c2:5b:9a:69:f1:83:0f:7c:de:79:19:31:
dd:e1:96:39:3a:f8:57:33:60:cd:f9:0f:e8:c9:b7:
39:bf:66:6c:13:b8:bc:6c:44:33:ce:72:c4:52:bc:
45:aa:ac:22:51:1f:6f:78:d2:f8:90:06:85:d5:80:
ac:e5:52:b8:e2:c0:c2:b1:93:5c:f2:d3:a6:7f:e3:
af:87:f3:b3:48:a1:6a:27:c5:63:4e:56:ff:e4:56:
40:c8:f0:f5:d8:11:73:18:72:32:b6:02:76:ae:59:
7c:6a:48:45:c2:53:df:4b:72:aa:5d:c4:b1:22:98:
28:8c:2d:8e:e8:d9:24:c6:e6:84:e7:4f:5e:b0:14:
f8:b2:18:c3:d3:39:38:ac:f5:72:a2:da:f0:15:b2:
76:ef:d4:6e:16:c4:0e:ee:9b:09:39:57:a5:b0:22:
cc:a7:ac:da:4e:17:92:58:03:24:b4:b3:2f:fd:19:
ee:42:19:33:d3:8d:0f:c2:67:13:51:f5:d7:2d:3a:
fa:a5:cf:a6:cb:d7:74:bf:bd:6a:6d:9d:fd:30:2e:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.199.0/24
195.54.36.0/23
195.93.156.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44548
51222
Signature Algorithm: sha256WithRSAEncryption
a4:4a:41:05:f0:11:1b:2a:8d:03:19:fd:a0:d8:16:0f:6b:81:
85:6e:4b:f0:4f:39:32:d1:e8:1d:51:1d:9b:68:53:e2:ac:4a:
c1:39:b7:ad:49:fa:98:a1:2b:24:06:21:49:f8:eb:0b:29:d7:
9a:83:a1:4a:e7:cf:5e:f6:1e:b7:92:f5:9d:1f:e1:7d:89:36:
54:fc:09:03:21:ad:d7:2c:8c:28:b1:37:90:53:96:70:ae:0e:
89:5b:e8:ce:fc:7d:70:1b:cd:bf:f1:53:c3:d3:e4:40:a4:ef:
0a:5c:c9:9b:e5:09:15:4c:f2:f8:d1:8e:90:04:fd:dd:ef:78:
a6:02:e4:ca:72:18:8d:78:20:e7:d4:07:3c:09:7a:6d:ca:2d:
ce:4e:29:50:f5:b6:c5:91:a2:7d:18:f2:7d:5f:4b:ac:c7:56:
1f:07:7b:fb:89:af:d4:84:d9:43:77:b8:ec:c0:07:0c:76:ed:
37:0e:3d:e8:ca:50:df:33:e3:19:7f:bb:37:4d:d5:98:51:b1:
4b:80:17:e9:05:f4:d0:f4:fc:31:fa:e2:5c:80:c2:c7:7b:aa:
84:ed:59:93:44:71:04:ed:f0:b6:2b:b6:be:3d:48:d1:f2:84:
2a:b2:aa:1b:2e:94:43:9e:e9:a5:b7:17:84:5e:eb:c7:68:35:
28:c2:53:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:10:22 2026 by rpki-client