Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NKuVkYx_iSMAkN_CiSwgO1X5o4M.cer
File: NKuVkYx_iSMAkN_CiSwgO1X5o4M.cer (raw, json)
Hash identifier: 6G6z7US9Br4B8HmT9l+YaFUuK4lW6vsuiI+xVVDNPMk=
Subject key identifier: 34:AB:95:91:8C:7F:89:23:00:90:DF:C2:89:2C:20:3B:55:F9:A3:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D2A214E8FDBE6C4586E12F84FC037B9A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/3b80a8-24b5-458d-b173-8db6ae2a46fc/1/NKuVkYx_iSMAkN_CiSwgO1X5o4M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/3b80a8-24b5-458d-b173-8db6ae2a46fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Mar 2026 12:31:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 59648
IP: 91.246.218.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:21:4e:8f:db:e6:c4:58:6e:12:f8:4f:c0:37:b9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 26 12:31:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34ab95918c7f89230090dfc2892c203b55f9a383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:19:88:e8:d4:ae:e8:12:0e:d9:a1:a3:35:
ca:c1:45:3d:76:c6:c4:6c:df:11:f0:2f:95:05:7e:
ae:1e:e3:d4:ce:5d:e1:4c:e5:e5:e3:c0:20:a8:d0:
96:b9:2d:c5:25:a8:3b:a0:4e:35:61:29:a4:cf:13:
73:e0:db:34:bd:af:8b:e4:5e:01:2d:d4:03:12:37:
3c:18:2a:0d:7c:b3:50:15:61:3f:b5:00:17:b2:36:
33:91:7c:1b:1b:fb:12:23:24:c0:82:b9:85:6e:44:
6b:f3:f2:3d:2e:f4:dd:76:1c:6c:37:09:f7:de:d4:
32:f4:ac:ba:a7:82:6b:ee:27:1a:07:53:18:4b:72:
1f:d1:13:e8:4e:69:90:63:e5:f1:6d:7a:dd:53:99:
ab:ec:f3:2a:6c:13:5b:14:96:d6:26:91:93:3b:5e:
dc:9d:88:4b:3f:44:be:80:52:0a:09:e3:b2:c2:7a:
08:96:a4:b2:37:c1:7f:a7:d6:ae:cf:0d:71:11:fe:
88:41:70:09:4e:98:60:b4:8a:2f:e0:cb:82:81:b8:
0f:34:b4:73:f8:0e:b9:f0:03:4b:6d:76:3d:b1:08:
f7:27:f5:3d:95:c4:d0:11:2f:da:de:25:cf:6f:49:
ef:19:b7:70:99:27:cb:01:c2:a7:51:33:99:2b:11:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AB:95:91:8C:7F:89:23:00:90:DF:C2:89:2C:20:3B:55:F9:A3:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3b80a8-24b5-458d-b173-8db6ae2a46fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3b80a8-24b5-458d-b173-8db6ae2a46fc/1/NKuVkYx_iSMAkN_CiSwgO1X5o4M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.218.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59648
Signature Algorithm: sha256WithRSAEncryption
31:da:ff:6f:28:5c:9c:31:67:03:46:da:17:aa:0f:b7:77:46:
de:d2:f2:bf:0a:4d:e2:b4:3f:96:00:ef:42:56:39:5b:90:6f:
41:35:12:44:cf:91:0b:2a:d8:c1:9c:a3:38:d3:89:04:ec:53:
3d:9f:39:ab:9b:72:fc:c5:1b:a7:4e:de:2a:36:e3:fa:10:14:
56:31:e8:81:49:6f:76:df:52:af:e8:56:3e:83:6c:b4:19:28:
6d:88:2f:69:bd:af:37:ed:a4:5e:59:95:38:e6:41:dc:b5:2c:
76:b5:eb:82:db:01:2b:66:46:4b:72:54:87:61:a2:02:15:f8:
de:5b:fe:dc:17:92:05:8e:dd:ae:14:05:88:8d:84:1f:a9:c3:
9a:7c:67:39:d8:60:27:25:0c:fe:aa:e4:e3:f8:b3:bd:83:5e:
c8:0b:04:9a:0d:f1:b0:2e:f5:0d:38:11:5f:6c:6a:dc:b5:71:
f4:4d:ea:85:06:0e:20:9c:09:26:e9:31:1e:08:c5:3e:68:0d:
f9:63:15:fe:12:99:45:e7:11:14:6f:b2:3b:a1:d8:5b:04:5c:
ba:ce:e9:e9:58:27:1e:f6:d3:29:57:b1:f2:c6:1d:4a:3f:47:
49:cf:e5:60:56:69:69:b2:14:88:3e:3f:5e:9c:d0:78:ff:99:
73:a9:d5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:42:35 2026 by rpki-client