Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
File: N28vTtsjIwxkt5O0GVfvSjI-PFM.cer (raw, json)
Hash identifier: uHRJCpbmR8o9NNngqU04bbBMeebogPArvrxzDmQjoFc=
Subject key identifier: 37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C6DBAF8A411EBA1A1D6B7C6903D70E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:17:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.162.1.0/24
IP: 193.162.8.0 -- 193.162.12.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:db:af:8a:41:1e:ba:1a:1d:6b:7c:69:03:d7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:9d:75:fc:00:65:09:6a:e5:8c:f8:98:15:
99:b9:f2:ce:4d:2f:1c:72:9e:1e:47:d3:4f:97:47:
1f:f9:36:f4:aa:e0:7e:ee:f4:63:e1:66:8a:fa:c8:
ee:de:29:f9:da:1e:b7:98:50:23:9c:ce:53:32:6c:
1c:5a:ff:2e:ec:80:3a:8b:fd:85:60:bb:ef:72:68:
fc:3b:7e:9f:c1:1d:53:d6:ee:8e:04:a5:d4:25:7a:
e3:2c:28:24:fd:01:ad:b2:e5:f2:15:e6:e7:e4:db:
f1:8a:6b:fb:ac:82:1f:08:d6:2f:9a:d9:de:f2:7e:
fb:ea:d3:c0:4a:a9:05:1f:b2:69:71:aa:40:af:92:
41:3c:bb:68:26:59:42:8d:f3:80:12:11:80:30:87:
09:ee:61:91:18:6a:89:93:97:75:60:cb:0f:7b:4e:
26:31:0e:9f:ed:bd:be:f1:a3:c1:fd:9a:8e:7f:5d:
48:4a:8e:20:60:dc:d6:03:94:42:d6:b6:25:01:ea:
7d:e6:0d:70:fc:b5:c4:19:d3:89:5a:f0:6f:6b:0c:
fe:8b:ad:52:3b:ea:a5:c5:05:cf:58:0f:73:be:7a:
ff:a8:3b:7a:11:fd:dc:81:08:9d:01:05:47:34:d9:
5d:ca:a9:4b:11:78:63:55:d3:fa:e7:06:1e:f2:39:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.1.0/24
193.162.8.0-193.162.12.255
Signature Algorithm: sha256WithRSAEncryption
60:73:02:06:c4:61:88:e2:3a:94:da:df:a7:b2:eb:c5:ca:34:
fb:3b:51:c7:ef:e2:13:d4:da:cf:ea:6d:cd:c3:bc:3e:aa:47:
14:cf:ba:5d:7d:7c:c5:ea:85:ae:5c:a5:ad:bd:52:f4:fa:a8:
19:6b:a9:cf:c7:20:96:0c:85:8f:05:10:ff:b7:f8:3d:99:bd:
96:cf:88:7b:83:24:6b:84:09:9f:b9:61:f7:ec:33:12:35:74:
35:37:11:7a:18:97:60:65:f1:50:a5:48:5f:2f:73:a3:e2:d7:
e8:9c:04:54:4f:12:bd:d2:84:01:17:49:4e:2b:43:99:b4:09:
99:b5:e0:85:b3:1c:68:01:bd:86:86:47:84:6e:dc:fe:39:8b:
81:f3:28:1a:5b:9c:88:2d:6d:03:8e:ca:6e:49:72:e4:4b:a2:
04:7c:f7:3e:78:69:26:8a:9a:8a:7f:0d:75:40:f2:b7:11:6e:
1d:ee:37:d2:14:8c:84:6c:e3:06:1e:bd:fe:19:28:e9:08:23:
e4:38:7c:4c:1f:6d:00:7e:49:01:c8:3f:b1:f7:c2:7e:57:1f:
5d:e0:16:16:1f:39:cc:c3:bc:37:b2:e0:48:76:14:ed:94:c9:
e0:c8:c2:90:3d:d2:1e:cb:9d:6e:7b:40:20:2c:85:11:e3:f4:
ad:70:10:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:58:35 2026 by rpki-client