Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer
File: pns_SmTNjc4m56QK9ue24E7tLWw.cer (raw, json)
Hash identifier: pf7/DDLKENnBh9o4bokh3KPRiv7P5Nw2v5iqpEr66mM=
Subject key identifier: A6:7B:3F:4A:64:CD:8D:CE:26:E7:A4:0A:F6:E7:B6:E0:4E:ED:2D:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EA76785DE681ECF6B4DA6DC7767900956
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 08 Jun 2026 13:24:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 130.75.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:67:85:de:68:1e:cf:6b:4d:a6:dc:77:67:90:09:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 8 13:24:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a67b3f4a64cd8dce26e7a40af6e7b6e04eed2d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:9f:2a:fb:95:18:79:82:6a:fc:78:16:31:
89:5d:e3:b0:9a:41:0d:00:27:ae:d8:40:e0:6d:f4:
76:44:5c:5e:b5:52:3b:e0:e8:04:57:29:cd:d9:d7:
f3:3e:d0:44:1e:5e:83:7e:17:c1:ab:8a:d8:f8:75:
2c:b3:3a:8e:fe:16:82:bc:cd:ac:9a:65:ea:6c:47:
54:02:e5:f0:aa:b2:2f:94:6d:c7:84:e7:39:22:2e:
4f:c2:41:74:fa:fc:27:2d:49:75:29:ee:a7:5d:c5:
14:5f:94:c5:18:33:bd:d9:c6:c3:e7:78:21:35:cf:
54:e9:75:ed:5d:1d:57:11:b4:a0:65:ff:cd:93:56:
a7:44:5f:a5:3b:b8:5b:68:7e:34:36:96:15:e7:fb:
ea:c0:34:fe:8b:6a:6f:79:5a:0e:5a:9c:23:38:10:
da:49:b8:29:2b:10:ef:fb:d8:34:ec:6e:dd:3e:f0:
8a:8f:f2:7d:33:9c:7c:ca:87:26:9a:39:07:bd:af:
82:2f:12:4c:50:64:b8:29:f5:06:27:37:b2:4f:f1:
bc:4e:7e:46:27:eb:78:3b:f8:9d:f9:94:84:d0:d8:
47:18:f5:3d:e8:13:a3:55:64:5d:54:9b:58:b8:9c:
6e:42:6a:74:10:86:3d:c0:e2:f2:d3:b5:2c:e3:0f:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7B:3F:4A:64:CD:8D:CE:26:E7:A4:0A:F6:E7:B6:E0:4E:ED:2D:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:73:ff:98:a3:e2:8a:bf:4d:86:ab:88:ac:0c:9f:52:9d:84:
a1:4a:06:8b:ab:a2:15:f7:ff:33:0c:30:e3:a3:68:f1:76:c3:
a7:7c:aa:b4:96:c4:9f:23:9a:be:4f:f8:5c:63:84:dd:bb:5f:
98:56:45:3e:73:9c:bb:b4:de:96:71:15:92:f2:f6:bd:08:54:
89:c0:b6:2b:26:b6:12:0e:dd:9f:c3:6a:11:ab:40:4b:a8:c2:
45:cb:63:6d:32:3f:41:53:48:5c:d1:fc:1f:32:ed:8d:4f:48:
e3:73:6d:28:d6:11:60:f9:ed:75:51:2e:92:21:a2:ee:e0:e0:
99:da:86:ee:50:6c:fc:9b:8f:28:c0:3c:0b:4b:f8:57:84:85:
7a:aa:ae:fb:d0:f7:64:bb:7c:86:76:2e:2b:f0:57:9e:d3:76:
27:e7:57:fd:89:cf:92:94:13:a6:86:8a:c7:75:8a:88:84:22:
50:f4:6a:22:d4:bc:30:ac:03:91:4d:93:5d:f1:41:4d:39:93:
f0:37:60:46:d3:8e:c9:36:5b:82:74:ed:14:71:5f:cb:1d:fb:
77:43:b1:44:3a:95:33:87:ad:57:3a:71:2b:3d:05:a7:e2:7a:
12:73:be:3f:12:56:c2:ba:3f:96:cd:c4:d2:11:5c:10:b9:6b:
da:66:0a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:33:14 2026 by rpki-client