Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/N0-NItIYTMfO2e6xPZSgX0u-DKc.cer
File: N0-NItIYTMfO2e6xPZSgX0u-DKc.cer (raw, json)
Hash identifier: CHvgOjiOwhUt8cPeDJkqymQq02G/HKjVB2drpFYerkg=
Subject key identifier: 37:4F:8D:22:D2:18:4C:C7:CE:D9:EE:B1:3D:94:A0:5F:4B:BE:0C:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0E6B490ED58FC122CB8DB357514C16FE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Sep 2026 06:29:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.150.230.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:b4:90:ed:58:fc:12:2c:b8:db:35:75:14:c1:6f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 28 06:29:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=374f8d22d2184cc7ced9eeb13d94a05f4bbe0ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e6:18:19:c3:60:5b:f8:b9:dc:cf:3d:0e:fc:
4a:58:6c:da:42:b7:91:a2:bd:93:18:35:4e:55:2b:
92:36:c3:01:93:88:c7:0b:21:61:7f:20:be:e9:c8:
66:5c:10:4a:7a:2a:c4:37:7a:67:d3:35:b8:30:f7:
36:a5:91:50:a5:06:9d:08:2f:5d:4d:f2:cc:45:34:
84:d4:a9:4d:b8:e4:20:3c:de:8c:a0:82:8b:fb:09:
ed:c4:66:ad:bd:65:df:3b:91:39:12:a1:d3:b3:6e:
38:0e:a0:c8:6b:53:a5:28:d8:52:57:78:ca:2f:54:
79:dc:d8:b6:cb:8d:d8:f9:a5:00:ba:ee:62:f5:f3:
f4:d6:32:37:4d:56:46:32:c8:d7:f2:1f:8b:45:c2:
05:f4:60:e4:b3:bb:b6:83:12:e7:7c:b4:b5:c5:54:
65:63:9c:48:42:47:fa:f0:a4:67:e3:c6:64:b0:b2:
57:4e:72:77:3f:d4:8f:19:7d:84:dc:be:dd:26:dc:
96:21:b4:b7:4f:b4:ef:1e:1e:65:0c:27:af:e5:4f:
78:f4:f0:81:b3:8a:a5:fa:75:d9:92:9e:9c:05:ca:
39:df:cc:6b:3f:50:73:65:9e:4e:ee:fc:49:d1:92:
45:54:03:76:85:8b:68:07:c3:62:26:91:8c:4f:62:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4F:8D:22:D2:18:4C:C7:CE:D9:EE:B1:3D:94:A0:5F:4B:BE:0C:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.230.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:9b:3b:31:61:63:21:b6:e0:66:bd:50:27:ab:35:cb:85:61:
1d:8e:47:2d:5b:5a:7c:9d:55:1a:98:fd:75:6b:92:46:3b:9d:
b4:97:63:54:fb:a8:58:2b:19:5d:9d:b5:e2:ab:ca:17:e6:78:
ed:0b:b4:bf:80:c4:f5:ce:ae:b3:c8:cc:42:1f:c9:a2:ce:c1:
db:79:ee:10:c4:ff:ca:a6:ba:0a:8b:e9:9b:92:98:32:fc:91:
f8:9c:45:af:c1:7e:0f:e5:b6:c2:64:e4:51:be:71:c4:48:bb:
3a:c7:b2:ac:81:3d:56:1e:53:52:8d:16:5d:87:12:f6:19:97:
0b:21:ce:da:65:be:f0:2a:ae:38:a3:69:d1:21:cf:dc:22:a6:
11:e9:d1:59:d4:4d:26:5e:72:2c:c9:2a:32:66:73:4e:64:aa:
c5:33:f1:59:57:16:71:33:fb:6b:f7:ac:4b:71:66:00:0c:32:
b0:a6:be:5c:83:32:a1:ea:7c:71:06:94:ab:27:92:2b:8a:bf:
bd:bc:4b:c7:74:1b:f3:52:8f:09:d9:21:d4:a1:64:09:68:62:
cb:e8:81:97:88:55:47:85:dc:d1:ff:84:80:f8:51:89:22:fd:
7d:e3:3c:60:cb:6f:fa:3b:cd:8f:a1:3c:6b:dc:2d:87:1e:d5:
0b:bd:8e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 19:15:51 2026 by rpki-client