Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer (raw, json)
Hash identifier: evLRY4uTnl2UenwjFti+h2bYZyYk8ZxMoVt8GMKk5jA=
Subject key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C6A97DB04F90F80EB976DDCC04AA68
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:17:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 93.191.64.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:a9:7d:b0:4f:90:f8:0e:b9:76:dd:cc:04:aa:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:83:81:4b:74:f3:18:13:8d:cf:8f:53:1e:
62:1e:70:72:88:d3:0f:4d:1f:93:59:46:fe:44:04:
dd:9f:3b:5f:0a:fd:15:80:c0:54:8b:87:1d:4b:1f:
b4:e6:9b:e5:ed:9b:90:68:5e:17:ca:3a:a0:ed:a6:
6f:54:65:bf:be:dd:63:ce:9f:0b:e5:3b:cb:fe:37:
cb:7f:87:8f:ca:71:69:37:f2:73:d7:46:11:35:65:
e6:50:47:a8:5a:8d:0f:53:24:db:bf:ee:57:f8:3c:
b0:7c:9f:46:78:fe:c4:39:1a:24:20:2b:5e:87:3f:
d1:7c:46:3a:b3:f5:c0:3b:3a:39:f4:45:1e:b5:7b:
d2:ab:a7:17:82:03:13:6c:9a:9a:82:19:53:03:13:
44:98:0b:f3:65:06:25:89:c6:17:b2:25:e3:c9:9f:
2c:09:87:ac:21:12:3f:9c:d1:6d:ea:f3:51:bf:6b:
ef:8e:0f:3a:9a:69:cf:f9:23:e3:5b:a9:1b:df:d5:
9e:99:06:ef:87:9d:2f:ef:53:0f:a3:98:b4:b9:fe:
72:b8:66:c3:9e:f8:0a:89:fe:26:26:2a:24:84:13:
4a:82:6b:71:a5:b1:37:f5:28:49:c1:15:1f:c8:f4:
8b:f2:0c:aa:e6:70:dd:5f:f0:6b:36:ae:ce:46:47:
f3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.64.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:b2:a4:df:43:9f:a1:ab:ef:9a:76:b4:27:ae:56:0e:97:91:
4d:cd:85:e8:80:bd:5d:a6:8f:03:ec:3c:65:f9:f8:18:57:4b:
96:c5:e9:ed:32:b6:31:6e:36:96:92:12:34:4c:d2:30:f3:cc:
8b:dd:1d:71:9a:e8:19:46:e6:06:5b:16:ba:d2:ad:62:20:04:
3c:71:f7:9e:66:b5:1b:bb:d9:0b:fc:4c:70:68:9a:48:67:62:
53:07:f7:b1:39:4f:61:ab:f5:16:fe:a0:43:66:78:1a:e3:16:
9e:78:e4:b7:82:34:c4:11:b4:e1:63:8a:f0:81:43:70:ea:c2:
c2:8c:f9:7a:59:9c:b8:ec:f9:85:12:46:fb:84:34:fe:3c:e9:
d5:17:5f:cb:30:af:31:66:03:a1:b6:24:1f:61:b4:71:55:4e:
6a:0c:83:e7:c0:0a:64:a1:5e:f5:bc:d5:8d:fd:40:5d:01:7c:
54:91:2f:51:e0:a7:34:39:0c:d0:05:d6:de:69:9d:05:a0:e9:
7f:8d:65:9d:c7:20:37:c3:48:96:d3:38:7e:1f:91:af:f7:d4:
65:30:ee:f0:a7:47:f4:1f:e6:4e:7a:72:85:73:99:30:77:14:
c8:3e:8c:5c:5d:fc:21:e9:26:b6:49:ce:da:d5:4d:d0:22:58:
b5:97:bb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:39:10 2026 by rpki-client