Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ndTrefSC_obHVL6IQ22Xv2qMgNc.cer
File: ndTrefSC_obHVL6IQ22Xv2qMgNc.cer (raw, json)
Hash identifier: XhJdjUbAihE+RHm+e3EMwspRZ3eSuPBI0ozYaW4bwBw=
Subject key identifier: 9D:D4:EB:79:F4:82:FE:86:C7:54:BE:88:43:6D:97:BF:6A:8C:80:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A141D0919D71328CFE83D506C90ED28782
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/ndTrefSC_obHVL6IQ22Xv2qMgNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 Oct 2026 23:05:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218916
IP: 2001:678:12f8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:d0:91:9d:71:32:8c:fe:83:d5:06:c9:0e:d2:87:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 15 23:05:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dd4eb79f482fe86c754be88436d97bf6a8c80d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:28:6c:74:69:c7:ee:87:9b:99:93:f9:ff:
83:ff:bb:89:85:49:7c:ca:36:77:78:d6:68:ce:19:
be:1c:b9:ad:54:bf:d4:19:1f:ed:1a:3a:66:35:b2:
53:50:a0:78:e1:9d:87:43:e6:af:14:61:e3:a9:40:
ba:f2:74:52:4b:43:bf:fe:93:4b:07:cb:96:84:80:
7f:b7:c1:e4:3c:bd:62:8e:03:7c:c9:79:c1:bf:fe:
8d:a4:f3:15:a3:65:c9:dd:ab:3f:de:fe:e3:06:8d:
3c:51:27:42:b1:6f:a5:de:37:31:cb:60:6d:f5:58:
6c:14:74:f8:f8:db:16:01:74:41:b5:bf:65:96:06:
da:5a:bc:58:57:57:fa:d0:5b:30:d2:ad:83:c2:e1:
ba:ab:34:6d:6c:e0:78:32:3a:d4:a9:15:0a:9b:8d:
86:be:2a:88:8e:16:b3:33:58:e3:23:6d:25:21:7d:
54:a2:96:82:98:34:7c:17:28:25:2b:96:99:c1:59:
1d:0f:e5:22:e5:09:80:76:5a:72:90:ae:98:35:9d:
e1:10:f3:5f:02:a7:d1:f8:5f:c7:d2:3d:94:dc:9c:
bf:70:63:61:23:21:32:2d:e5:74:1c:b1:82:6e:cd:
bd:57:e0:64:99:ba:08:7c:77:33:29:2e:33:d6:64:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D4:EB:79:F4:82:FE:86:C7:54:BE:88:43:6D:97:BF:6A:8C:80:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/ndTrefSC_obHVL6IQ22Xv2qMgNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:12f8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218916
Signature Algorithm: sha256WithRSAEncryption
06:c3:09:df:7e:73:50:a8:c7:b2:2b:31:9b:99:86:0f:38:23:
57:4e:88:48:b6:6f:0e:ac:4f:a8:86:83:f4:cd:14:44:c2:b3:
b9:a4:86:db:70:55:79:9b:ae:9f:b4:10:77:62:fa:d8:16:f1:
05:87:32:cc:e6:0a:79:6d:cb:fb:ee:13:80:c9:6c:7f:5f:b0:
35:5c:eb:9b:99:ce:f6:44:69:7a:00:3e:1d:6e:12:92:d0:9d:
e2:01:2e:d4:c7:d7:1a:29:32:a9:1d:3e:7c:00:25:14:c2:53:
8d:92:4b:4b:d1:0e:5a:e7:52:03:de:fa:af:53:d6:8d:c7:e6:
69:de:01:a0:71:fc:03:96:a6:ca:24:5a:8e:80:55:ca:17:a8:
18:b2:82:ec:08:e3:b8:0d:7d:70:f3:be:27:c5:4d:e8:14:af:
b1:a8:5e:5a:7a:7d:44:7d:1b:b6:8a:57:39:d2:6e:75:72:e0:
59:6b:85:09:24:14:40:e7:ce:b9:34:ea:4e:67:58:44:52:f3:
10:90:f7:a2:fa:bd:33:b3:e3:d4:cc:22:bb:d0:7a:6d:89:69:
67:33:c9:ef:c7:df:0e:d0:49:68:36:29:5a:7c:66:fe:03:d5:
b9:eb:fc:ae:9a:0f:6c:a2:e7:41:26:5b:c8:dc:46:d5:5b:3a:
0f:6e:47:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:01:50 2026 by rpki-client