Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer
File: nRNTyAuINe6erTfvfp9kIQp3O_s.cer (raw, json)
Hash identifier: kauBrgF2mk0klipZTiM9nfUxd7ij7YWtPbTb8DZjc08=
Subject key identifier: 9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7834FA0A55CD9E53B820CF8F352D2AD6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203893
IP: 185.217.217.0 -- 185.217.219.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:fa:0a:55:cd:9e:53:b8:20:cf:8f:35:2d:2a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d1353c80b8835ee9ead37ef7e9f64210a773bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:04:d5:5c:65:93:a8:42:f2:61:80:05:c4:
81:25:cc:a8:61:ed:39:53:f8:ff:56:c8:c6:c4:97:
35:99:5e:1a:31:a0:88:a5:e5:1e:9a:c7:15:08:c5:
42:e4:23:14:b5:9b:fa:a7:43:11:c5:2c:5a:09:16:
04:47:d5:0b:0d:27:dc:39:69:54:6e:0f:d0:a6:97:
c8:c7:cf:98:2f:ab:31:52:68:bb:37:a3:42:04:e4:
98:60:9b:04:af:24:f0:9e:af:08:11:74:64:d8:e6:
6d:1e:c0:25:1d:75:3a:18:dc:63:f9:ea:78:4f:af:
4d:c6:d3:4e:b1:a8:7c:f2:d2:79:12:0e:1d:87:59:
9b:1d:31:79:d8:0f:5a:d8:80:bb:42:64:00:88:59:
e6:ad:17:95:41:f9:43:d2:a7:72:37:e4:f8:8b:93:
d2:4e:57:92:48:14:15:3a:f7:dd:be:c4:7d:63:49:
41:1c:1c:93:83:85:04:d6:b4:d0:37:1c:12:ca:bb:
42:85:aa:28:33:05:a4:4f:0d:71:3c:88:fc:32:59:
88:ba:55:d4:54:bf:74:3a:82:3a:a5:e6:70:d8:6b:
f4:8c:e1:e7:a0:50:d3:22:d9:9f:50:0e:97:21:fa:
5b:0a:3e:e2:b7:cd:72:76:50:a4:53:cb:14:25:0b:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.217.0-185.217.219.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203893
Signature Algorithm: sha256WithRSAEncryption
02:d5:c2:1b:89:0a:08:6d:69:1f:2b:04:9f:88:0d:ac:63:21:
4d:e1:91:0a:a8:9c:ac:ff:1b:cd:df:7d:c4:88:9b:bf:ed:b4:
cd:b0:27:32:29:70:ee:b6:14:4d:ef:b8:6a:03:a1:68:59:b0:
69:69:9d:c1:17:ae:e8:b6:32:48:3e:a0:10:4d:24:f5:c0:56:
f2:b0:37:c5:77:87:25:60:80:87:9e:83:66:3d:67:87:e4:01:
d9:d6:92:fa:02:eb:18:09:f1:3e:e9:ac:de:10:90:64:51:ac:
0f:c5:19:81:0c:15:74:98:96:81:06:98:94:7c:e0:70:b5:86:
36:74:5f:2d:1d:c7:74:a2:87:46:40:35:eb:e8:51:97:d3:87:
a7:fd:81:ed:ea:75:3a:37:cb:dc:18:93:fa:b5:12:81:ec:d7:
19:ec:53:03:f4:73:66:5e:cb:6b:11:f6:eb:01:c7:ea:77:d1:
7b:6f:90:22:f5:b6:24:58:79:3b:7f:41:56:9a:f6:2c:1d:47:
fa:fa:68:99:5b:d4:6a:fd:29:bc:82:f2:0f:16:a7:75:95:90:
6d:bd:95:83:e2:2b:86:5f:bc:dc:8d:86:2d:ab:71:2b:73:d4:
a9:f4:23:99:c6:20:d8:59:ce:91:37:5f:ed:28:4f:da:a0:a8:
38:28:76:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 00:59:50 2026 by rpki-client