Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer (raw, json)
Hash identifier: LiUyb4BZJx1Hx4BumM5gXh3cPZi6Cvl8dHl7sYMwGdU=
Subject key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F8574E4578F052DC04BBCA1F11545F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:23:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:678:1030::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:74:e4:57:8f:05:2d:c0:4b:bc:a1:f1:15:45:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:23:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:3d:92:a0:40:df:a9:fe:4d:00:f8:f3:42:
68:f1:4b:f3:a3:98:1f:04:43:a7:a5:6f:3b:c2:6f:
5c:d9:99:8b:0b:23:ca:03:78:91:1d:0e:27:62:60:
a0:2e:fa:ab:bf:ad:a2:ca:88:e8:e8:2c:76:15:bc:
b6:d9:a1:10:b8:f5:9c:88:c6:58:cf:35:d3:48:8f:
c2:c6:ab:9d:26:09:f5:e8:d1:13:69:65:b2:cc:f7:
5e:a9:d1:ca:7e:e2:a2:00:de:e1:f0:96:25:28:3d:
86:21:e1:48:24:20:d5:68:4b:ee:89:16:0e:98:2d:
80:e9:96:f6:ea:fa:e7:98:ab:fd:9b:44:6c:7d:0d:
0f:98:fc:27:66:3a:a7:28:9b:c5:cd:c0:db:ff:2d:
6c:47:8d:12:80:6d:bf:d5:c4:f9:95:0b:71:cc:fb:
2d:0f:76:f0:3c:df:84:60:6b:87:81:61:c6:c7:40:
58:97:dd:5d:37:d3:d2:25:77:e5:74:29:57:4a:9d:
c2:d6:1d:7f:c6:be:2e:80:3f:c0:be:4f:bb:a7:eb:
28:f3:28:28:9d:f0:e6:e8:5c:b0:e7:e2:b3:2f:cf:
28:61:ee:1b:0e:6f:a2:fa:8d:34:8c:89:57:0f:6f:
05:6a:07:9e:54:56:01:c0:2a:08:38:b6:2c:e9:62:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1030::/48
Signature Algorithm: sha256WithRSAEncryption
50:76:30:a2:f2:8a:d1:c3:00:7a:6a:77:3f:e1:14:15:ca:3e:
b7:dc:76:02:98:0a:5b:d5:ae:58:aa:4f:3b:7f:3e:94:1f:6b:
3f:46:a9:5c:97:2b:5e:e1:35:66:e3:14:c4:a0:85:43:8b:25:
96:18:e9:1b:19:e8:c0:32:10:6b:cb:bb:e8:98:3b:ef:71:2c:
7e:4a:75:13:f3:ed:01:35:4f:d8:21:1c:54:5c:11:6e:d6:3b:
57:58:10:8c:81:ab:24:2f:f1:b8:1c:8d:7d:a7:5f:ab:e0:06:
29:ab:68:7e:f8:bd:13:d1:0e:b6:13:b2:70:55:03:b7:21:9d:
33:a1:79:09:cd:8b:59:29:68:67:7c:92:50:9e:f0:a4:a3:06:
0b:c8:63:b7:6e:ce:a8:1b:ed:1d:30:46:80:60:c3:38:31:06:
87:2f:ba:d9:db:2f:7b:62:70:1c:dc:29:de:25:5f:96:a8:0c:
98:f2:cf:96:b2:33:40:21:8f:ff:ee:27:95:dd:61:0d:87:2c:
61:87:01:35:2d:c0:1f:91:88:bb:72:c5:6e:d0:af:b4:79:88:
71:be:85:1a:b6:36:4a:f0:5e:f3:79:b8:6a:07:51:f7:31:ad:
6b:a0:ce:19:73:83:7f:52:ba:60:b6:f1:3c:6e:22:33:ea:ad:
08:c7:d3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:03 2026 by rpki-client