Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nN3tdbQwkYCFNbSuvXq-X2oTveE.cer
File: nN3tdbQwkYCFNbSuvXq-X2oTveE.cer (raw, json)
Hash identifier: sdR8UTpqH5K1QoH66mmB/4b2O56XKB+XXbNMXPgkSJg=
Subject key identifier: 9C:DD:ED:75:B4:30:91:80:85:35:B4:AE:BD:7A:BE:5F:6A:13:BD:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F93D4C7CC5832E0CF2888C4282916F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203637
IP: 185.127.188.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:3d:4c:7c:c5:83:2e:0c:f2:88:8c:42:82:91:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cdded75b43091808535b4aebd7abe5f6a13bde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:df:81:05:d5:7c:92:85:51:19:41:25:ae:9f:
fa:c8:7e:af:fd:2b:c4:25:00:2c:6c:2e:2e:65:7c:
9a:db:db:d7:f7:36:92:c7:a5:f0:44:71:0d:ff:f0:
a9:7e:15:66:e8:73:55:48:b9:14:ef:ed:c7:d7:30:
8e:7c:c2:7a:66:66:96:ff:7b:6c:a8:28:6e:5f:5a:
ac:42:df:f3:d7:fd:64:aa:e4:d1:d8:63:a2:13:70:
9b:95:90:3d:b1:1e:bd:f6:6b:9a:04:44:1e:d4:36:
29:71:11:10:d1:46:71:91:ee:b6:86:61:4b:cd:6a:
e2:c6:75:fa:b0:f7:ba:25:4a:30:13:f1:f9:14:12:
fb:f8:03:37:7f:ea:ba:f7:cd:a4:8b:61:7a:36:d0:
bd:44:20:51:c1:c1:72:b0:e4:aa:aa:0c:95:05:64:
48:81:d5:b9:65:3a:11:c7:82:88:f6:29:65:b6:c6:
e2:23:ac:93:37:3e:2e:68:fc:c5:e7:69:a1:5a:a5:
94:e7:d5:78:5f:62:2d:d0:26:bf:16:bc:d9:45:4a:
48:8f:2d:b8:49:07:75:11:76:e9:b6:16:63:0b:55:
ca:64:3e:00:6a:94:95:a2:cd:40:26:a9:5d:f5:5e:
c9:47:46:2c:db:29:38:c4:c9:7e:5d:38:b0:ee:fb:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DD:ED:75:B4:30:91:80:85:35:B4:AE:BD:7A:BE:5F:6A:13:BD:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.188.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203637
Signature Algorithm: sha256WithRSAEncryption
62:b3:23:ae:f5:72:4d:cb:70:57:4f:9a:d1:db:d0:26:13:20:
da:9c:95:77:69:65:b0:19:55:6f:83:7c:47:fb:61:79:09:cc:
0c:11:ad:ff:54:4f:d4:b0:5e:4d:07:87:92:e3:0c:f1:bd:36:
9f:8c:ca:1e:1d:12:2b:9a:e8:d5:41:d0:82:0d:84:ad:c9:af:
5c:c6:23:49:fb:bd:b0:62:9a:14:6d:49:59:97:90:ef:25:40:
34:41:0a:bc:7d:2e:fa:68:97:11:d9:94:15:ce:43:54:86:b0:
50:c9:12:66:7a:9d:22:ac:fd:73:26:5d:4e:9a:15:24:b1:8a:
50:4c:0e:6b:a0:ff:83:e0:3d:1a:e2:2c:77:2e:f6:89:59:af:
ef:16:22:98:a6:93:47:00:9c:f0:c1:5f:0e:f4:0f:ab:49:3a:
74:32:e7:f5:09:4e:60:57:95:e0:a0:e7:0d:21:36:9a:84:fb:
7a:e8:a7:28:19:ff:3e:39:0f:e6:71:d1:0c:6f:8d:24:f6:eb:
52:19:d1:20:8d:7b:f7:e5:a9:c3:45:da:15:61:fd:d7:99:ae:
3a:bc:76:58:be:7c:00:06:bc:ed:1f:94:c7:fa:d4:a9:ed:77:
65:eb:1a:6b:32:1d:23:1d:04:f7:c1:a3:5c:e4:dc:8c:ae:3c:
0d:5b:be:11
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZ8Y+T1MfMWDLgzyiIxCgpFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2RkZWQ3NWI0MzA5MTgwODUzNWI0YWViZDdhYmU1ZjZhMTNiZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7t+BBdV8koVRGUElrp/6yH6v/SvE
JQAsbC4uZXya29vX9zaSx6XwRHEN//CpfhVm6HNVSLkU7+3H1zCOfMJ6ZmaW/3ts
qChuX1qsQt/z1/1kquTR2GOiE3CblZA9sR699muaBEQe1DYpcREQ0UZxke62hmFL
zWrixnX6sPe6JUowE/H5FBL7+AM3f+q6982ki2F6NtC9RCBRwcFysOSqqgyVBWRI
gdW5ZToRx4KI9illtsbiI6yTNz4uaPzF52mhWqWU59V4X2It0Ca/FrzZRUpIjy24
SQd1EXbpthZjC1XKZD4AapSVos1AJqld9V7JR0Ys2yk4xMl+XTiw7vumZwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFJzd7XW0MJGAhTW0rr16vl9qE73hMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5LzQzZDUw
OC1kMTllLTRmNjYtYWU4NS1mODA1YWIzYTMyN2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvNDNkNTA4
LWQxOWUtNGY2Ni1hZTg1LWY4MDVhYjNhMzI3ZS8xL25OM3RkYlF3a1lDRk5iU3V2
WHEtWDJvVHZlRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuX+8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMbdTANBgkqhkiG9w0BAQsFAAOCAQEAYrMjrvVyTctwV0+a0dvQJhMg2pyVd2ll
sBlVb4N8R/theQnMDBGt/1RP1LBeTQeHkuMM8b02n4zKHh0SK5ro1UHQgg2Ercmv
XMYjSfu9sGKaFG1JWZeQ7yVANEEKvH0u+miXEdmUFc5DVIawUMkSZnqdIqz9cyZd
TpoVJLGKUEwOa6D/g+A9GuIsdy72iVmv7xYimKaTRwCc8MFfDvQPq0k6dDLn9QlO
YFeV4KDnDSE2moT7euinKBn/PjkP5nHRDG+NJPbrUhnRII179+Wpw0XaFWH915mu
Orx2WL58AAa87R+Ux/rUqe13ZesaazIdIx0E98GjXOTcjK48DVu+EQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 19:15:22 2026 by rpki-client