Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fIOIMRS3dX0t-tjbBVzaFbScMQw.cer
File: fIOIMRS3dX0t-tjbBVzaFbScMQw.cer (raw, json)
Hash identifier: EbNZdL1oX9GU15ucMFKSIWDJpKcc1K2fevBgGEoTdnA=
Subject key identifier: 7C:83:88:31:14:B7:75:7D:2D:FA:D8:DB:05:5C:DA:15:B4:9C:31:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D2445AC163818E57CA58E4FED292826A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/fIOIMRS3dX0t-tjbBVzaFbScMQw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Mar 2026 09:13:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.180.9.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:45:ac:16:38:18:e5:7c:a5:8e:4f:ed:29:28:26:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 25 09:13:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c83883114b7757d2dfad8db055cda15b49c310c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:49:25:1a:ac:dc:40:31:ff:03:6c:69:48:
10:3c:4f:3f:19:61:67:17:f3:8d:66:91:8c:ac:a5:
e5:20:d4:d8:f7:07:da:3d:91:e6:bb:82:fc:e7:fd:
39:12:d6:4e:ca:51:f0:5c:7e:aa:74:15:48:39:d5:
05:f0:0d:0a:f1:f3:05:c2:91:48:bc:16:70:b7:82:
bd:43:8b:47:a4:41:44:59:4d:31:36:f5:b7:df:91:
9a:3e:1b:15:a5:97:6d:78:64:de:27:80:da:80:7c:
55:21:ac:4b:00:ab:0b:0c:51:4c:be:3c:7a:d2:ea:
4a:36:86:e9:97:d4:9e:7e:e0:04:ab:10:b7:f4:4e:
c5:fc:cb:16:37:d3:66:43:97:76:01:98:8e:7e:a3:
f7:37:60:da:b5:a6:2f:5b:05:17:7f:ec:1b:c1:1f:
32:77:c5:eb:65:b0:31:34:66:2b:79:cf:10:9c:f1:
68:a8:92:e1:71:1a:5b:d4:25:c9:33:23:80:c2:dc:
50:55:ca:dd:72:44:41:93:ac:c7:cd:13:9a:84:13:
a6:94:54:a5:e9:62:cb:57:33:6a:41:16:34:3c:13:
8a:85:4d:fa:0c:f0:51:ab:0a:21:6d:a5:72:fd:77:
bf:ac:8d:11:fe:8f:c3:22:90:ac:85:f5:c1:12:65:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:83:88:31:14:B7:75:7D:2D:FA:D8:DB:05:5C:DA:15:B4:9C:31:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/fIOIMRS3dX0t-tjbBVzaFbScMQw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.9.0/24
Signature Algorithm: sha256WithRSAEncryption
24:90:25:02:31:49:9a:7c:af:26:75:fd:49:84:f4:80:87:b4:
9d:c7:2b:3c:4b:ea:44:9b:38:b3:c3:86:80:27:7b:ab:26:21:
86:5c:14:40:aa:5e:8e:d6:72:1a:ff:fa:c6:f7:24:e7:8c:0f:
25:49:bb:9b:d9:d6:d6:81:eb:0f:d1:7c:0b:fc:ac:6e:aa:84:
33:f6:ce:46:91:27:18:5d:74:e0:03:0b:15:0e:af:40:ee:2c:
1f:2d:e7:7b:02:f9:27:12:79:94:e7:5a:7a:4b:e8:6a:48:22:
cb:51:65:73:aa:1a:72:1f:eb:1f:65:0d:31:80:85:b5:65:ea:
44:be:9f:8c:5f:52:86:ca:19:59:97:12:51:85:83:a1:fc:1b:
77:1d:a1:d1:82:43:a8:52:71:4e:a0:aa:34:06:28:20:1d:32:
55:5d:39:0c:8c:38:6d:03:fd:0b:1a:9f:4c:26:c0:12:9a:92:
38:43:c2:20:28:df:88:41:b2:ae:62:f7:d7:a3:54:4d:05:9f:
d4:d1:71:a2:4f:08:0a:59:27:1c:36:08:8a:00:98:d8:bb:d0:
2d:19:e9:ab:43:9b:29:3a:58:f2:cf:ed:33:e4:03:3d:3e:0f:
11:ad:34:9b:be:6c:f7:7f:05:93:65:e1:e8:99:a5:70:98:46:
bf:0c:a5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:12:13 2026 by rpki-client