Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
File: fEn63vQJ71hdX0o1su85SbWZxUc.cer (raw, json)
Hash identifier: kYEERcV859CJyXVyEqf2R26i8fSscfjvCZYMzKFrNxg=
Subject key identifier: 7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D717C4F564EC5C96120156609B4131F94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Apr 2026 09:04:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44975
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:7c:4f:56:4e:c5:c9:61:20:15:66:09:b4:13:1f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 9 09:04:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:cc:ee:b6:38:8e:a5:a6:9b:df:98:47:61:
7b:58:38:3a:54:8c:d8:0b:20:da:2c:a1:9c:21:bc:
27:72:38:4c:e4:9f:8f:63:68:37:62:2e:f3:5e:92:
54:7f:80:4c:c3:37:f6:82:6e:27:e4:e3:02:a6:2c:
78:8e:35:ed:01:76:c7:c9:30:b4:56:d3:e3:83:2b:
aa:a3:ac:af:91:62:58:5c:2e:94:fb:81:80:c4:95:
3a:6d:e3:7e:88:7e:41:8c:6a:c9:11:bd:3e:a6:1c:
c7:4c:c4:de:92:70:6e:1f:48:92:6a:a9:3c:90:b8:
83:c0:2b:5e:ee:f5:cf:01:ee:01:39:1c:25:d6:78:
27:58:74:ef:ef:b3:72:51:c5:69:3d:45:e6:76:0e:
43:6a:94:04:d3:1c:b2:2e:d9:50:ce:82:16:19:df:
46:ab:d8:3f:0d:0d:90:48:21:b5:75:a4:d8:ef:73:
1f:ab:44:7e:56:65:c9:9b:6f:17:2b:5b:0f:71:02:
b0:51:29:78:ce:dd:83:fc:20:53:a9:05:15:6c:8f:
93:d6:85:bc:07:80:22:c3:b7:0a:a3:d8:e0:bb:a9:
f1:6b:3a:b8:70:fd:fe:22:7f:89:45:be:65:71:11:
3b:04:2d:6e:84:a6:f4:c0:58:95:e8:2e:13:52:bd:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44975
Signature Algorithm: sha256WithRSAEncryption
21:52:48:40:1e:70:f7:93:7c:aa:87:a7:66:0d:8c:a4:e7:27:
b7:e9:88:2a:2a:b6:c0:fe:83:03:16:dd:d0:7b:95:54:62:58:
c6:72:cf:21:e0:cc:b1:cd:17:5c:d0:a0:c9:28:ec:0a:9a:05:
0c:e0:34:ae:6b:43:88:a2:16:75:3e:94:5f:65:3a:f4:e0:fd:
a0:2d:4b:84:c2:e0:47:73:4a:62:4c:f2:cf:b0:92:3b:42:0b:
9a:8d:12:98:32:55:88:84:68:19:b3:8e:3e:8e:bf:c0:d6:8a:
60:a8:79:ba:31:7d:84:66:57:71:84:44:20:60:e3:93:35:02:
4c:df:20:a6:f9:4d:08:20:ed:5a:b6:0b:46:77:83:92:46:7d:
fd:8c:a7:2e:48:7b:55:be:1b:f9:67:dd:b2:d0:27:4c:ca:5f:
b4:df:06:11:5f:bc:a4:bd:8b:7f:d4:cf:1d:f8:ef:f3:06:37:
b8:d0:53:0c:ab:21:d8:75:8e:5f:01:99:cc:88:a2:56:51:33:
1e:48:dd:a9:82:5f:1f:39:4d:5f:5b:7d:b5:33:b9:d2:47:69:
22:4c:09:85:2f:59:04:98:75:31:d4:16:e8:8f:6c:98:f2:98:
27:6e:12:2a:d6:b3:02:01:f6:6a:d0:ba:5b:19:30:05:15:a6:
8c:a1:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:58:43 2026 by rpki-client