Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
File: f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer (raw, json)
Hash identifier: F3shHq+UEurfizdddyRPsLGOE5Nr9Pw+7vWPFh/0lA8=
Subject key identifier: 7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C8029E07078F24170626B30192F49F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:18:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:678:66c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:29:e0:70:78:f2:41:70:62:6b:30:19:2f:49:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:2d:d4:d6:e4:0d:d9:46:e0:31:a0:31:3a:
7a:31:ca:b2:43:82:94:ca:e0:fd:bf:d5:d0:90:88:
b9:00:1b:9d:f1:9b:28:e2:7f:43:c9:9d:f1:f2:ea:
b7:df:80:35:0d:f5:f1:69:28:08:e4:de:11:5c:31:
2b:74:5f:46:ba:50:3e:75:d3:ee:16:50:d0:f8:23:
41:56:63:36:1f:d4:d9:c1:31:54:a9:fd:c9:77:66:
1d:de:0b:37:2d:24:92:c0:99:57:76:28:52:b7:41:
96:28:c6:4e:3d:c4:ea:27:33:ad:57:a7:a5:17:51:
10:f2:24:8e:6c:b1:63:7c:4e:66:99:e1:0c:1d:89:
f6:6d:10:5a:06:d9:f7:cf:fb:a0:c6:23:3d:8b:0c:
4b:9a:80:5d:cc:20:a3:22:c5:ec:c3:7f:10:3a:a5:
83:72:33:6e:ae:9d:fa:5f:e2:5b:57:d8:95:05:f4:
c2:87:6a:f5:07:b4:34:57:c4:85:66:c8:3f:de:d6:
51:6b:4b:af:bb:c3:3c:08:12:e4:13:45:43:ac:5a:
82:b5:d4:9e:0d:fe:c9:e2:bf:ac:12:ca:9e:00:55:
17:87:1b:eb:05:4a:e9:5d:ff:6f:ea:f5:46:11:b0:
50:64:40:f5:0f:56:66:4b:25:ae:2e:16:99:5f:50:
1c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:66c::/48
Signature Algorithm: sha256WithRSAEncryption
57:60:04:77:b8:c1:da:94:d1:f8:15:6f:6b:b7:1d:75:bc:f8:
73:fb:da:24:77:f2:69:8a:36:51:12:14:31:9a:2b:f0:6f:1d:
70:10:39:68:d8:7e:d1:c7:a3:42:5b:0e:73:93:5e:7d:5a:d8:
3f:b8:62:3d:45:d8:06:6f:b2:e7:b5:fa:f1:1b:61:df:f0:bf:
d9:33:ad:9f:2b:06:d2:a8:d1:dd:e7:74:7b:61:66:99:a6:89:
69:c6:20:3f:2f:7b:02:4c:e2:bd:b8:d6:5d:a0:a8:9d:97:70:
06:cf:40:19:8c:8e:1d:7e:5d:dc:0c:10:78:63:96:7e:1e:c8:
ae:a5:93:22:4c:e7:9f:47:c0:9a:32:39:fd:1d:da:b9:0c:d6:
85:a7:2d:2c:5f:70:a6:a9:ba:cf:f4:ee:55:ef:64:18:fa:ce:
e2:e4:bf:24:78:6e:f0:53:0d:e9:40:f3:69:c6:08:ec:9d:9b:
76:1a:cb:7b:da:10:24:62:a3:85:a6:ce:2e:cb:16:27:1c:e8:
f1:5e:dd:4f:64:a7:ce:bc:6c:33:9f:dd:df:5f:45:2d:cc:02:
af:d9:ce:c1:5c:dc:5b:10:e9:39:34:71:3b:e6:22:73:c5:52:
2b:3d:27:c5:ee:cf:24:58:b1:7d:a4:1b:ae:94:47:32:ce:ee:
fe:1a:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:49:38 2026 by rpki-client