Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
File: fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer (raw, json)
Hash identifier: BxsR6qoGPca7dxGHNhtnEdhMsWwbdcARmCiBbThj800=
Subject key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E2B6C60CE4C6B3052EFD4BE1D0119B293
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 15 May 2026 11:36:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39642
AS: 42355
AS: 43196
AS: 43557
AS: 50490
IP: 37.75.160.0/19
IP: 77.68.128.0/17
IP: 78.156.96.0/19
IP: 83.137.120.0/21
IP: 85.191.128.0/17
IP: 85.203.128.0/17
IP: 87.104.232.0/24
IP: 89.249.0.0/20
IP: 91.194.154.0/23
IP: 92.246.0.0/19
IP: 95.138.208.0/20
IP: 139.45.0.0/17
IP: 178.21.88.0/21
IP: 178.157.192.0/18
IP: 185.17.216.0/22
IP: 185.101.88.0/22
IP: 188.114.128.0/18
IP: 217.198.208.0/20
IP: 2a00:1f98::/29
IP: 2a02:25c8::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:6c:60:ce:4c:6b:30:52:ef:d4:be:1d:01:19:b2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 15 11:36:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:13:df:6a:e0:6b:9d:48:bd:4c:e9:2a:dd:
93:35:ef:21:e1:eb:c6:12:43:b2:c0:7e:03:a9:82:
50:3a:bc:2d:df:7d:a3:d4:e5:4e:2c:2e:a7:60:ed:
3c:8b:41:32:fe:03:1f:af:81:37:4e:79:a2:63:4c:
52:b3:1b:2f:39:8c:15:a8:04:ac:76:80:a7:50:d3:
e4:28:50:d6:07:9b:03:0e:d6:6a:34:ba:e6:45:a8:
92:44:11:86:be:10:74:7a:d8:25:85:9c:58:fd:a6:
96:01:d3:04:3d:b3:8e:c6:47:89:71:c9:8a:a1:bc:
75:e4:37:66:a5:af:81:b4:5d:6a:af:74:db:9a:9f:
1e:7c:22:a4:f9:d9:8b:ed:b4:55:6a:a2:0c:56:47:
11:57:92:57:41:8b:e7:7f:eb:be:f8:f2:50:be:a9:
23:c3:b1:56:b6:05:d6:38:8a:b1:eb:f0:5d:df:6c:
06:78:b5:3e:21:4d:3e:8d:c8:c8:14:9c:71:24:35:
95:73:ee:2f:f8:32:7f:09:af:3d:28:9d:90:47:b7:
d9:03:34:8a:c1:2b:4d:71:bb:d9:0c:1e:56:99:57:
6c:fb:d5:9e:95:38:81:f1:ac:a8:c5:d1:b2:03:ce:
0c:ef:13:f7:7e:9e:7d:44:8d:13:71:90:87:37:cc:
47:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.160.0/19
77.68.128.0/17
78.156.96.0/19
83.137.120.0/21
85.191.128.0/17
85.203.128.0/17
87.104.232.0/24
89.249.0.0/20
91.194.154.0/23
92.246.0.0/19
95.138.208.0/20
139.45.0.0/17
178.21.88.0/21
178.157.192.0/18
185.17.216.0/22
185.101.88.0/22
188.114.128.0/18
217.198.208.0/20
IPv6:
2a00:1f98::/29
2a02:25c8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39642
42355
43196
43557
50490
Signature Algorithm: sha256WithRSAEncryption
4b:2f:1b:3c:10:6c:d4:3a:88:f6:02:85:61:eb:1e:45:94:d8:
e2:cc:71:03:c5:88:25:3c:92:a0:da:4e:38:8e:a2:21:9f:07:
bf:6c:25:07:61:8d:85:17:81:d2:ce:4b:f6:e6:b9:59:34:98:
17:ce:d3:7f:2b:58:9a:98:37:91:fc:1c:91:e6:64:b2:62:63:
7f:60:81:0b:f8:98:7b:da:d0:74:bf:e5:8c:31:e3:e2:0c:d1:
72:86:44:c0:95:20:8f:02:3e:52:e0:6c:40:7f:5f:4d:b7:24:
87:76:bc:5d:37:1f:32:dc:2a:46:bc:72:be:83:ea:88:10:bb:
0e:e0:de:e9:ac:17:d2:b1:fb:bd:c3:5f:6f:a4:56:35:57:3f:
9f:ea:3e:98:6b:9c:55:e8:22:6c:7c:d9:25:a4:57:52:8e:b6:
00:b8:52:15:dd:51:df:0c:05:01:84:ed:e9:c8:79:f6:0a:2a:
f2:1f:82:dc:f7:5d:80:ee:9c:d7:9b:37:13:7b:a5:15:18:84:
4f:93:7f:b0:dc:88:bf:7c:d1:00:42:2d:b1:93:8f:93:8e:e1:
5c:4a:dc:15:85:a7:e3:9f:4a:eb:ff:d6:da:be:38:af:52:81:
bb:c9:7d:68:60:0f:5b:3e:8f:e0:35:d0:d5:22:7a:75:1a:e9:
78:88:9f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:20:55 2026 by rpki-client