Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer
File: fsGdR6J46MXxy7L88r0LJnajZew.cer (raw, json)
Hash identifier: tLrGyk4BwEJ2/WGN9bAkL+ET00O4YnVpNgkI6QCX3R4=
Subject key identifier: 7E:C1:9D:47:A2:78:E8:C5:F1:CB:B2:FC:F2:BD:0B:26:76:A3:65:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9E44969EC9CAC0C161EA6E89C4B07
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212416
IP: 2001:67c:f18::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:e4:49:69:ec:9c:ac:0c:16:1e:a6:e8:9c:4b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ec19d47a278e8c5f1cbb2fcf2bd0b2676a365ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:c6:35:d4:d5:6d:3e:19:ea:25:31:5a:28:
db:af:d8:40:d1:20:5e:36:46:44:3f:be:7d:43:5b:
ea:74:94:a6:e6:8c:05:8d:d6:74:e5:16:88:c5:8b:
4f:92:a8:2a:37:86:fd:ef:aa:e7:3f:ab:05:7a:e2:
cd:c2:2b:59:eb:8f:e1:2a:07:b9:10:5d:93:ed:07:
0b:29:af:b0:a8:87:a2:de:38:fc:52:74:59:4a:7e:
08:6e:6e:9a:a7:65:97:ee:df:c8:7c:12:a3:e4:89:
77:29:3e:da:43:3f:38:41:de:ea:3b:ce:84:c0:58:
c9:70:aa:ea:5c:34:30:8c:9e:ae:40:12:b1:c0:06:
39:51:4a:5f:4c:db:04:16:02:38:1f:7d:61:21:81:
de:c9:a6:bd:a6:44:19:c4:d6:52:21:05:90:13:83:
c1:f3:ed:f2:69:18:80:6b:37:c7:2d:4c:a3:2a:73:
a3:84:3d:14:a8:0c:b6:ed:40:de:ab:a3:0b:c8:3b:
2e:40:c7:ae:91:fb:86:2a:be:05:12:e4:de:3a:d7:
0a:b4:79:81:f7:aa:d4:dd:06:52:c3:86:4e:cf:c0:
eb:43:23:6a:93:2c:28:21:95:37:32:fb:5c:03:c5:
9f:a6:dc:09:39:16:54:fc:66:0a:09:cd:e5:81:ee:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C1:9D:47:A2:78:E8:C5:F1:CB:B2:FC:F2:BD:0B:26:76:A3:65:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f18::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212416
Signature Algorithm: sha256WithRSAEncryption
87:8b:a6:cb:09:f4:82:1a:73:8f:89:b4:ef:96:6f:12:11:97:
22:84:f3:6d:f0:02:fe:39:6b:ad:ee:63:0c:2d:fa:b9:77:3f:
19:08:4d:62:97:9a:fc:06:14:c9:b7:82:e5:a6:56:74:36:75:
d7:f0:da:3d:46:67:28:fe:70:59:30:a4:b1:0b:7b:2b:f2:7c:
90:01:da:08:29:a7:2a:00:16:1e:21:92:6f:aa:3a:50:9b:2f:
4a:80:7f:13:7d:26:33:40:5a:28:a2:3d:0a:ec:db:26:ac:70:
8c:39:ab:e1:c1:83:7b:81:fd:9b:66:86:7d:96:2a:5a:7d:3a:
76:bf:a4:57:e7:76:28:a7:e5:30:d6:90:00:52:ae:dc:1d:1b:
b2:1a:b4:56:58:02:d7:17:1b:57:29:da:f5:4b:ba:20:10:ba:
76:3a:9b:21:9a:18:5c:f8:35:ac:51:a5:0e:6c:63:37:d6:05:
7e:38:75:62:10:ac:3e:90:7f:46:65:d2:7c:90:41:8c:9b:de:
6f:47:34:de:c4:2e:15:81:43:08:1d:ec:89:40:6a:44:e3:e1:
64:0b:3f:45:17:38:54:bd:51:5c:76:d9:ed:c9:80:c4:a0:9e:
5f:b4:bb:38:6c:6d:2d:64:04:f5:6f:2b:8f:a2:ac:7a:bf:19:
2c:f0:ae:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:28 2026 by rpki-client