Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
File: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer (raw, json)
Hash identifier: CYM92oyAfJbu5+L1+Kw3q4FkGvqs1ChGfy2kiQC4w8U=
Subject key identifier: 36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EDAB2E26837E4E8DD96AD6511AC7E35DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 18 Jun 2026 12:26:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198276
IP: 2001:678:b50::/48
IP: 2001:67c:16ec::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:b2:e2:68:37:e4:e8:dd:96:ad:65:11:ac:7e:35:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 18 12:26:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:d4:10:35:ad:4d:1a:62:86:fe:2e:aa:16:
20:c5:d1:17:4f:62:12:fb:08:7c:83:f3:fd:af:7e:
df:dd:40:4f:91:19:bc:20:c2:09:0e:5d:a1:f2:d2:
c9:82:df:9a:36:de:bb:2a:bc:cd:5e:7b:dc:26:aa:
9f:66:71:a3:5a:7a:b9:4f:6c:ee:de:79:a7:e8:78:
3c:c8:02:a5:c8:ba:c7:97:45:85:3e:4e:de:67:cb:
22:a7:33:31:ab:cf:ab:66:47:7c:48:d6:bc:d3:f3:
c0:7b:bf:14:c8:65:8f:d6:1e:6e:fa:2f:34:68:fb:
c4:03:12:02:ba:15:c5:e8:ab:02:86:d5:31:fe:22:
7e:9c:c0:96:79:f2:a1:93:5f:f0:97:5b:fa:cf:fd:
0d:47:1a:86:d9:c1:83:90:7e:1b:72:66:73:aa:82:
4d:7c:0e:ec:0a:74:3e:28:da:d5:49:bf:0a:95:ee:
06:6c:8b:c1:ac:70:e8:e9:3f:73:5c:49:e1:ec:9f:
d0:7a:77:46:04:7c:ad:ef:12:80:cd:43:95:c8:28:
c6:74:d3:22:4a:f1:b9:8c:88:87:d7:bf:18:cf:fe:
e3:38:96:d3:00:4a:15:24:35:ea:19:4c:fc:c3:09:
16:18:77:29:46:24:69:e5:8e:cb:fd:5c:ee:4d:81:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b50::/48
2001:67c:16ec::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198276
Signature Algorithm: sha256WithRSAEncryption
13:a3:60:fb:32:e4:0b:bf:3b:84:cb:2b:ec:13:fb:1a:24:93:
fe:27:47:96:d2:87:6e:e4:8a:96:2d:8c:0d:c7:b9:dd:d2:51:
18:e0:25:5b:cc:a6:f2:87:0d:3d:81:b8:06:a0:22:e1:ec:5b:
6f:f6:27:c8:a6:4a:a5:4d:2c:aa:ca:8b:3a:f1:15:08:7b:d7:
09:b0:c1:ff:89:23:84:1a:a2:84:a5:39:c9:55:8e:37:fa:99:
20:51:2c:65:ae:2a:7e:16:a8:20:c0:2c:b3:82:cd:ef:16:43:
63:b2:10:9e:12:17:06:03:39:2c:44:03:71:a7:9e:fd:09:b2:
b5:9c:68:2f:e5:64:4f:e5:7e:71:71:58:5e:4b:06:86:b1:21:
59:f3:d9:49:e7:01:ba:91:c6:fa:b2:82:9a:51:71:7f:11:e8:
ea:34:ec:0a:3b:51:de:a2:50:23:9f:04:a4:7e:4e:7f:08:3d:
31:99:cb:db:dc:6b:8e:d1:7e:6c:c0:32:f9:37:ba:d8:1d:1b:
47:c4:74:11:eb:f8:5f:a0:92:bb:d7:70:1a:46:e4:82:da:c5:
b4:9b:75:39:c3:00:ff:24:13:66:45:04:eb:11:7f:ce:24:f6:
57:4d:97:63:df:d3:60:d8:7c:2d:c8:ed:bb:b5:46:90:06:4b:
e0:7a:c9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:36:16 2026 by rpki-client