Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
File: n5FENjC-1KQYJ6zlcHmpR6yHy74.cer (raw, json)
Hash identifier: k5/Jvno7BHunhQWStI0R+48X/DngNEvc41ByIDJcP8E=
Subject key identifier: 9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7758B4A8D8573C91F23454CB3DA14183
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:17:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205622
IP: 185.198.160.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:b4:a8:d8:57:3c:91:f2:34:54:cb:3d:a1:41:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f91443630bed4a41827ace57079a947ac87cbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:22:e6:65:cb:df:24:ed:8b:a0:87:99:75:
88:f0:6e:ca:5d:8f:33:f6:f9:ee:84:d0:4b:52:14:
2a:fd:0f:da:ea:85:d6:9b:62:e4:1a:e3:e0:f5:cb:
f1:a3:4f:98:a1:cd:b3:58:61:95:e9:45:87:18:87:
23:bd:c1:ab:b2:ba:3f:a5:bd:3e:78:f8:99:03:ca:
c6:ff:3d:f7:4e:51:0b:d0:17:f7:23:65:df:95:65:
d2:10:92:2c:25:0f:c0:66:09:74:f3:83:f8:1b:65:
01:34:de:52:da:c2:a4:97:8a:6c:7a:81:0e:4c:ba:
8d:85:6a:8c:be:46:99:59:fd:84:46:3d:c1:50:1c:
88:6d:9f:19:62:06:19:33:20:c3:ae:64:17:84:65:
9c:73:d9:5b:62:0a:e1:21:19:1d:32:0e:58:ab:38:
88:a6:27:e3:47:c9:a2:e8:01:d8:f9:52:0c:02:45:
9b:68:f0:87:41:30:36:d4:26:3a:c5:c1:a4:3e:3d:
ba:92:5c:c8:1b:c8:44:54:12:54:71:74:9b:5a:e8:
65:6b:00:22:5f:38:ac:2f:b5:96:4d:ad:4d:4d:9a:
6b:a6:52:b4:4f:99:86:91:48:4d:4a:29:42:80:43:
b4:75:29:92:ac:70:5b:db:2f:db:8b:7c:c1:76:d5:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.160.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205622
Signature Algorithm: sha256WithRSAEncryption
09:95:dd:3a:e2:50:4d:78:98:37:0b:09:f6:f8:5f:28:35:48:
39:c7:84:ac:e4:6c:87:34:68:cd:df:6d:26:80:a0:42:64:79:
a4:82:78:06:2b:2c:0f:5b:75:46:42:b9:fb:d2:bb:98:71:fa:
28:7f:11:6b:3b:27:0d:7f:fc:a9:32:45:fc:6c:bf:f4:a3:21:
0b:3e:62:3a:88:55:89:d6:97:11:0c:26:99:16:56:76:04:ec:
29:fe:d7:5f:fa:cd:01:7b:ff:31:0d:fb:99:f9:a3:a0:e6:cf:
7a:da:e3:33:74:38:0c:f1:58:0f:a5:ec:97:d7:db:8b:b4:fc:
6e:ff:c4:64:4c:21:3e:71:16:df:3d:87:1a:49:5f:27:27:50:
af:ef:48:84:2e:4c:4c:d4:98:91:8f:76:80:60:1e:fa:5e:bb:
d7:c8:fd:c2:e9:5b:11:c8:e4:79:b4:68:99:22:65:c7:64:19:
ef:67:81:69:ef:8f:9a:95:cb:bf:32:9b:c1:fc:70:d7:64:96:
6e:a8:24:e0:04:e7:32:26:ea:ee:73:3e:cc:5f:d4:fe:c8:f2:
df:91:6d:8b:84:51:6a:ed:87:ce:53:ad:84:f9:36:6d:a6:18:
fd:e9:a8:b5:23:d4:7a:bd:a6:d3:bf:b5:fb:32:ac:ef:1b:0d:
ef:aa:bc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:17 2026 by rpki-client