Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_AzBczfYTpuF2W_dk-N7bx25080.cer
File: _AzBczfYTpuF2W_dk-N7bx25080.cer (raw, json)
Hash identifier: ToZeOGs6yy4I6FRLuOy3P/YOE9yIavgxTFock603OiI=
Subject key identifier: FC:0C:C1:73:37:D8:4E:9B:85:D9:6F:DD:93:E3:7B:6F:1D:B9:D3:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5C051C6F7612BF26EB4AECBCA05C3F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:19:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a06:b580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:05:1c:6f:76:12:bf:26:eb:4a:ec:bc:a0:5c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:19:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc0cc17337d84e9b85d96fdd93e37b6f1db9d3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cf:37:4d:d9:0e:31:17:a8:e5:8c:2f:7b:ff:
4b:fc:f2:5d:61:db:28:a4:be:ec:3b:3b:fb:9b:9d:
60:a0:30:bb:30:49:6a:86:55:da:38:92:39:f0:25:
c7:aa:80:06:a3:73:25:ce:e0:59:af:aa:16:68:f3:
c4:47:9d:eb:1d:6d:cb:94:27:24:e5:dd:97:52:a5:
bd:a0:1e:88:54:5a:41:26:33:16:44:32:77:c0:e5:
ac:ef:e2:1f:4f:54:ad:75:b0:4b:ab:53:ba:f4:6a:
fd:70:49:06:ed:3c:bb:b4:31:df:7b:71:53:46:a2:
27:dd:5c:96:8b:29:b2:75:2e:5f:6d:6c:bf:16:2b:
50:62:08:37:dd:e9:9f:b2:6c:54:82:fa:bb:28:8f:
73:8e:4e:99:07:e9:bb:fc:4b:93:b8:3c:9e:8e:ed:
f4:33:a6:9f:d9:99:99:a7:0b:e4:41:f1:91:6b:26:
63:a8:e8:57:fa:48:bf:20:65:c3:c8:6d:5d:ad:bd:
86:a8:a5:e8:d0:cb:9e:53:6b:a1:51:65:49:4c:99:
6d:79:94:33:74:4f:7e:b7:3b:98:db:a4:5b:55:f3:
3f:fb:a6:f7:f4:5e:c8:b9:ae:99:6e:b5:32:d8:01:
a5:1e:02:a0:3c:c3:55:aa:26:54:e7:68:6d:0a:e6:
6d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0C:C1:73:37:D8:4E:9B:85:D9:6F:DD:93:E3:7B:6F:1D:B9:D3:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b580::/29
Signature Algorithm: sha256WithRSAEncryption
ac:d3:f4:ef:d1:31:dc:5d:d6:bc:7a:be:6c:2c:9a:9a:1b:1f:
37:1f:e5:17:68:55:c6:ed:4e:7e:08:e7:a2:da:d8:e1:ef:de:
0e:59:47:26:ed:f8:37:c3:28:01:e5:8d:78:be:6b:70:b3:07:
b0:e1:a1:f4:91:33:71:d5:b9:67:5f:44:85:4e:fe:f6:54:72:
6b:c4:0b:95:b2:ca:1b:c9:1b:42:6e:31:43:14:e8:8a:43:fc:
dc:fa:b7:b5:8a:a4:69:d7:28:38:e8:70:e7:58:6b:b4:20:ff:
46:16:47:af:c9:8b:dc:0f:ab:74:67:b6:96:e8:14:d8:d2:ae:
7f:85:78:b8:32:a9:4b:1c:64:e9:77:8e:54:fe:b1:c6:c7:7b:
12:25:3d:71:59:d4:32:b5:72:c8:a2:55:77:33:e1:b3:25:23:
47:07:bb:fc:4d:74:a5:36:f4:40:2e:fe:d3:94:df:75:0c:26:
11:7d:5e:02:bc:b2:35:03:6b:d5:e2:2c:50:0a:5d:31:6f:6b:
d5:8c:e5:c0:cb:65:6c:98:36:65:ec:31:30:35:cd:16:5e:ff:
f1:ad:18:73:f7:38:dc:5d:ac:a2:6f:b7:bb:2e:7d:83:f7:28:
c0:42:c6:d3:db:3e:c1:83:7a:a4:5e:ac:74:f0:49:49:79:f9:
ee:ce:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:34:30 2026 by rpki-client