Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer
File: NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer (raw, json)
Hash identifier: 9yBAWCoXXeis5g/MbzexHO9l2lBPhg6tMO6aLAbX6U8=
Subject key identifier: 36:F6:EE:6D:32:79:0E:49:89:50:D6:38:77:B0:32:12:32:A7:F8:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E2A72AB702149BE812C9F665B84BBC1C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 15 May 2026 07:03:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200032
IP: 137.44.120.0/21
IP: 2a13:49c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:72:ab:70:21:49:be:81:2c:9f:66:5b:84:bb:c1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 15 07:03:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36f6ee6d32790e498950d63877b0321232a7f833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:6a:3f:6d:46:62:34:19:40:fe:7c:2b:b9:
72:97:24:e2:ea:7b:74:ab:0e:d2:86:2c:c0:a9:2e:
b8:65:e8:04:d0:b9:17:39:c1:82:68:ec:a8:f9:b9:
68:d9:a2:43:ff:a7:99:1b:41:2c:2e:51:d5:5b:18:
e2:4d:c7:5c:0d:b0:aa:69:39:c9:82:1b:a3:9c:90:
2b:fc:97:4a:40:ca:a7:7c:11:ff:5c:6b:e0:62:76:
da:d8:57:01:be:2a:c6:57:f7:c6:8e:db:fa:de:55:
c2:c0:63:cd:6d:df:83:44:28:dc:54:cc:bc:61:7d:
3e:a7:29:7e:c5:30:4d:c9:65:ac:fb:cb:3d:bb:03:
25:39:f0:48:a5:db:11:c5:38:bb:53:07:d2:6c:8e:
6c:cf:7d:bb:a7:3a:2d:59:e2:fa:6f:3f:5e:26:88:
9e:e3:a7:b5:41:a0:cd:75:67:8e:97:75:55:c7:05:
98:57:2d:1a:ba:eb:73:be:57:64:7d:7f:0e:a8:18:
46:ce:d1:e7:8a:8f:99:a4:e7:c2:47:c2:ad:95:73:
bf:b1:69:83:95:d5:49:9e:c1:8c:d3:b4:62:80:02:
63:da:d5:5b:42:9a:86:90:2e:ec:dd:a1:5a:13:43:
ea:90:6f:06:9a:f9:7d:92:bb:5a:0e:aa:a5:27:2f:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F6:EE:6D:32:79:0E:49:89:50:D6:38:77:B0:32:12:32:A7:F8:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.44.120.0/21
IPv6:
2a13:49c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200032
Signature Algorithm: sha256WithRSAEncryption
68:04:d0:8d:53:63:b6:bf:68:12:63:bf:be:f0:f4:97:71:56:
96:6b:23:25:65:02:89:3d:98:aa:4c:63:dd:33:e1:ae:0c:b9:
15:19:d8:eb:47:c7:a8:55:5d:48:c3:40:4b:94:6e:d1:c2:10:
21:ff:08:fe:a6:5a:1b:86:dd:89:7f:68:bf:de:6f:69:e9:ea:
f3:2d:c5:d2:cb:15:e2:55:86:47:d2:fe:d4:ec:df:0e:21:b0:
da:3a:25:5e:9e:cb:78:be:20:a4:c1:f6:af:bf:45:26:e4:b9:
c1:84:7d:4a:04:2b:e8:c0:ed:dc:e7:0b:d0:08:3b:e7:31:44:
cf:4b:54:e5:6f:cb:fd:7b:7b:3f:c9:16:b7:18:7f:98:f5:c7:
80:d4:25:fc:7c:57:ba:1c:56:b8:ba:0b:5d:95:af:66:bf:6c:
81:5d:78:f4:88:6b:c6:1a:d5:f8:2e:93:bb:30:fd:e0:e9:63:
9f:df:65:e0:ce:57:48:c2:7f:0a:3e:51:1e:e8:26:78:02:a2:
9d:15:97:86:05:41:89:a8:28:72:1d:15:79:9a:b1:e5:59:72:
e4:18:eb:ba:45:59:49:63:b1:e2:ff:22:75:6f:d6:71:03:ed:
9e:e1:cf:27:ce:09:b2:29:a3:a0:8d:7a:c5:84:1f:eb:f2:55:
bf:d9:46:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:58:59 2026 by rpki-client