Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0NMMgTZ2LNz1VA8biC9gpASeN4k.cer
File: 0NMMgTZ2LNz1VA8biC9gpASeN4k.cer (raw, json)
Hash identifier: 8zCiUF3MKV5ILpYi1l0GhQilaaMdqYHMtu9byhC6ReU=
Subject key identifier: D0:D3:0C:81:36:76:2C:DC:F5:54:0F:1B:88:2F:60:A4:04:9E:37:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1A0EBC0222B081ADC60545C6D875FC785
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/cfe98f-ce26-47ca-b302-363a8d277e45/1/0NMMgTZ2LNz1VA8biC9gpASeN4k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/cfe98f-ce26-47ca-b302-363a8d277e45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 03 Nov 2026 10:19:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.22.166.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:eb:c0:22:2b:08:1a:dc:60:54:5c:6d:87:5f:c7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 3 10:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0d30c8136762cdcf5540f1b882f60a4049e3789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:10:4a:b2:cf:8f:b2:87:77:b3:ac:c8:54:3e:
60:ea:33:26:c9:a8:59:8c:bc:4b:dd:42:eb:b0:83:
c0:d2:3d:51:b8:7b:e1:a1:54:be:e4:8f:ca:39:47:
ca:8a:5d:1f:c8:53:89:72:8a:49:41:68:26:f3:af:
45:22:a9:6a:f0:3f:59:26:c3:3c:ee:81:1b:df:ad:
fc:18:34:f8:c2:52:3e:6f:c5:f6:a9:50:bb:6f:ee:
b9:a4:8b:d1:f8:fc:1f:ee:94:d9:ae:ac:35:b6:78:
ad:24:48:3f:16:31:75:c2:73:73:bf:ca:aa:c0:95:
52:15:79:b3:2f:72:2a:0b:b7:3d:d9:66:55:60:80:
02:bf:50:a7:b3:d1:3e:67:e8:e2:32:35:df:ff:31:
cb:99:b7:11:9f:4f:35:72:cc:61:69:0f:37:3a:3f:
8f:ae:91:ac:29:b0:68:0c:2d:d9:d5:c6:9f:30:76:
ad:07:52:25:20:b5:cd:f3:d5:ea:03:fe:71:2a:b5:
46:90:a8:22:5d:a1:08:f1:8b:78:4a:a2:9e:33:9f:
4f:7b:01:70:76:39:0e:7c:6d:77:9b:28:87:d8:51:
f3:ad:52:fa:a5:a6:57:86:60:c1:ae:08:77:f7:d0:
6a:81:6e:d4:94:78:c7:d4:48:a9:c7:24:11:55:96:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D3:0C:81:36:76:2C:DC:F5:54:0F:1B:88:2F:60:A4:04:9E:37:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cfe98f-ce26-47ca-b302-363a8d277e45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cfe98f-ce26-47ca-b302-363a8d277e45/1/0NMMgTZ2LNz1VA8biC9gpASeN4k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.166.0/24
Signature Algorithm: sha256WithRSAEncryption
83:83:16:d5:55:89:97:e1:bf:90:37:db:3c:7f:50:50:36:4b:
e1:4f:05:a3:6d:6f:8f:be:61:1c:40:b3:4e:9f:13:91:ea:8c:
a7:5c:a3:60:8a:ce:77:6f:fc:cf:c0:af:23:36:9c:76:41:55:
cf:3b:d3:a9:0c:67:a3:4b:91:4e:13:3d:a4:4e:d2:27:ba:07:
8f:9b:8b:66:47:b2:25:7e:4e:3e:74:6d:5b:ae:1e:05:78:07:
e7:ab:5d:3d:ab:cc:58:b3:45:eb:bd:73:05:72:a1:97:63:15:
df:d3:64:ae:17:6c:9c:0e:43:f7:c6:93:58:21:d6:88:c9:3e:
0b:c3:0c:be:5b:3a:a5:9e:9d:be:57:76:28:6f:1e:57:75:51:
30:ae:6d:ae:26:40:96:6b:dd:cd:57:e6:0f:19:f5:53:03:5a:
e5:fa:f6:45:83:5c:77:c6:58:a9:61:f3:11:ee:76:cf:fe:ea:
82:62:93:3a:08:92:ce:1a:24:39:b0:c2:26:27:2e:b1:87:b8:
1b:8e:30:7c:34:89:23:88:8a:3f:95:4a:6d:b2:96:5d:26:b0:
80:dd:a5:cc:b4:d0:6e:cc:cb:30:c2:37:43:2c:d3:ac:3f:b6:
6e:64:4f:47:73:aa:67:51:dd:c0:29:4f:a2:be:5a:65:cb:73:
ed:8d:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:16:21 2026 by rpki-client