Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
File: FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer (raw, json)
Hash identifier: u0uR1nvv9mHweFOy5hIdkMhf23n93atXkt7Uvy5FDs8=
Subject key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EACECE77A1E303460F3E5F81AA9184
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:17:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202831
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:ce:ce:77:a1:e3:03:46:0f:3e:5f:81:aa:91:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1721b760b60f722951b92527a82ffd3a5ea38459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:2a:5e:66:31:25:f0:4a:3c:cf:96:6f:40:
32:83:53:7d:a8:e6:b7:2b:bd:da:36:4e:e8:51:b1:
3e:7b:33:97:66:35:cd:2f:08:74:ed:04:00:3e:44:
b8:7c:a9:ab:88:2c:08:ab:29:c5:93:17:28:9c:7a:
6c:43:98:29:8e:57:41:a3:17:f7:70:fe:91:37:f5:
82:77:1e:41:bb:43:dd:42:04:7e:76:00:39:1f:65:
e2:67:c9:43:ef:2f:21:27:fa:b9:57:80:6c:c3:2d:
b0:38:e3:98:74:85:15:5c:40:fb:be:89:95:da:82:
f8:1b:08:b9:e2:61:0b:35:c1:3b:2a:f0:5b:c3:3a:
ea:14:a9:6c:8c:d0:80:4e:4e:b3:77:69:d9:67:be:
df:f2:b9:0d:bd:ed:ce:c8:0f:89:5b:66:5e:ad:3b:
ba:e1:24:ba:03:28:b8:b1:d9:8c:9b:20:cd:55:b9:
12:fa:65:0a:02:9d:fa:81:4e:dc:d4:07:49:a8:64:
1e:27:f7:ab:4e:7e:38:98:59:16:af:7e:2f:69:ed:
10:dd:75:50:a1:1d:fb:59:ba:1a:5f:75:9f:67:ad:
3c:4c:56:bf:99:bc:5a:9e:ee:e3:4b:a5:55:62:c6:
bb:99:31:7f:94:db:c8:90:39:cd:dd:e8:3e:92:bd:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202831
Signature Algorithm: sha256WithRSAEncryption
82:66:77:44:f6:5f:0f:7a:b3:5a:91:f0:0a:b3:2d:5a:72:8c:
e2:a2:d2:c4:d6:e8:82:92:0e:d7:17:e3:a5:6d:48:2a:fe:57:
13:a5:02:ed:e7:87:e4:67:53:3a:d0:f7:fb:85:4f:94:d1:dd:
71:c0:1c:f2:73:6f:21:5c:96:f4:d6:9d:a3:d4:c2:1a:bb:42:
19:88:a4:97:56:91:91:eb:6e:d3:ba:a2:8d:a9:75:95:75:b5:
e8:cd:07:44:b2:01:f7:24:7c:2c:d0:b8:e9:12:c9:e8:d5:96:
84:37:07:ac:34:26:d0:fe:0b:f5:16:5e:31:ab:69:39:1c:a5:
60:16:69:68:43:0d:17:80:ae:b1:f4:7a:af:f3:07:5b:5d:81:
da:37:54:fd:7c:df:45:42:a4:ff:7c:dc:6c:91:cb:bd:65:dd:
67:9d:14:0d:f9:44:f8:33:e2:4b:a3:2e:5f:67:53:ff:ef:38:
0a:4f:6b:fc:f9:99:7e:4e:43:67:af:f4:bf:b6:58:d6:a6:16:
c8:47:e3:ff:36:a4:10:e3:f9:f1:7a:df:30:eb:6c:0b:15:78:
bb:e0:8d:64:3f:b4:ef:fc:9a:3a:b1:db:30:ce:ef:ae:9e:95:
5b:b5:a3:e5:ef:2a:75:16:86:d4:16:86:33:55:e5:54:10:72:
ec:43:6c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:41:05 2026 by rpki-client