Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
File: N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer (raw, json)
Hash identifier: rDbtYZeBBMO9qaGaI5GTCTeSHez7XZimAkuHL8w+1Wc=
Subject key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F26D5DFA64D8466B5004A2D5CAA6DA514
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 Jul 2026 07:16:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203971
IP: 185.118.48.0/22
IP: 185.222.92.0/22
IP: 217.179.126.0/24
IP: 2a06:91c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:d5:df:a6:4d:84:66:b5:00:4a:2d:5c:aa:6d:a5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 3 07:16:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37778681361b1fff87ce398402efa63869e5bfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fb:ee:2f:b5:2c:0c:6c:68:1a:34:b4:82:f5:
74:6a:5e:3d:6f:c7:84:0d:37:63:1f:b8:76:13:34:
2a:be:11:55:94:b0:51:fc:88:95:4b:d9:df:d7:27:
06:93:eb:49:de:cc:9c:75:20:cd:37:6d:ce:27:a8:
3b:08:4e:78:80:76:02:43:15:88:fb:64:af:4b:3d:
4b:48:73:73:66:d9:23:09:51:5b:e5:a1:49:cc:3e:
3c:20:84:6e:8e:81:1f:f9:24:90:f4:f1:e7:86:9c:
67:5e:d4:2a:1f:29:4c:71:cb:ad:b3:53:6b:05:77:
43:d6:7f:1f:83:a7:b8:5a:53:ca:ff:c8:ce:7c:1a:
48:74:e2:de:c1:91:f1:a5:25:3a:95:0e:27:e4:c7:
2c:5d:9b:c6:bb:5e:cf:f9:3f:a5:12:86:04:b9:a5:
95:1b:d5:5e:08:0f:66:0c:ef:d7:12:a0:33:70:06:
a6:be:0e:39:c2:ae:04:40:53:25:0b:cd:08:f4:98:
0d:cc:11:db:28:6d:34:28:35:38:0a:b4:36:28:55:
48:5b:4b:6b:48:4f:55:99:19:f7:82:ff:6d:82:22:
a3:d6:9e:c1:8f:85:c0:5d:38:f1:b4:73:c8:c7:df:
f5:3f:ef:a5:ae:24:5e:bd:a4:b5:df:8d:46:4d:d2:
8c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.48.0/22
185.222.92.0/22
217.179.126.0/24
IPv6:
2a06:91c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203971
Signature Algorithm: sha256WithRSAEncryption
71:c6:71:29:03:c4:06:67:d1:d8:bd:69:04:92:78:58:b2:ef:
c1:6d:23:4d:16:8e:50:bf:c0:91:e5:c3:b8:43:cc:68:6b:d5:
49:3c:47:4e:35:1f:c1:6f:39:d1:e1:dc:ec:13:ad:d8:5a:b7:
e2:68:70:d7:de:64:85:f1:35:e9:8f:88:df:7f:06:a9:49:ed:
60:17:b2:b4:62:52:a5:f9:4d:41:e8:89:5c:50:1c:21:91:2a:
7c:23:a7:36:b4:40:c5:3b:98:a3:cb:69:be:33:13:63:19:ff:
1e:23:a6:08:2d:ef:4d:b2:ed:2f:bc:d1:b2:1b:ed:d9:f5:99:
7b:fc:e7:ec:49:db:a5:b7:2f:b8:15:a4:01:f1:08:2f:b0:a2:
be:bf:f1:48:86:b3:a3:9c:6e:80:9b:04:f0:f7:79:4c:b6:07:
25:97:e9:6c:ed:25:b8:19:15:b9:c2:ae:98:76:3f:39:14:b3:
30:d8:c6:cc:8e:68:bf:9a:bb:33:6e:fd:fb:f2:11:57:97:02:
d3:fb:5e:ff:c6:af:8b:ca:d0:7d:3d:40:79:e4:df:98:35:4f:
67:a2:0f:41:b0:6c:f8:1f:8e:7d:0e:6c:c4:79:34:fc:8c:51:
35:93:81:a6:f3:7d:91:97:e5:8b:57:38:c0:f1:59:d6:81:8c:
6d:8e:6f:1c
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZ8m1d+mTYRmtQBKLVyqbaUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNzAzMDcxNjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzc3ODY4MTM2MWIxZmZmODdjZTM5ODQwMmVmYTYzODY5ZTViZmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PvuL7UsDGxoGjS0gvV0al49b8eE
DTdjH7h2EzQqvhFVlLBR/IiVS9nf1ycGk+tJ3sycdSDNN23OJ6g7CE54gHYCQxWI
+2SvSz1LSHNzZtkjCVFb5aFJzD48IIRujoEf+SSQ9PHnhpxnXtQqHylMccuts1Nr
BXdD1n8fg6e4WlPK/8jOfBpIdOLewZHxpSU6lQ4n5McsXZvGu17P+T+lEoYEuaWV
G9VeCA9mDO/XEqAzcAamvg45wq4EQFMlC80I9JgNzBHbKG00KDU4CrQ2KFVIW0tr
SE9VmRn3gv9tgiKj1p7Bj4XAXTjxtHPIx9/1P++lriRevaS1341GTdKM6wIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFDd3hoE2Gx//h845hALvpjhp5b/RMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0LzY2MGNj
YS1jMWFhLTQ1NTgtYWQxZS1lNTNmOTA0YTFmNTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvNjYwY2Nh
LWMxYWEtNDU1OC1hZDFlLWU1M2Y5MDRhMWY1OC8xL04zZUdnVFliSF8tSHpqbUVB
dS1tT0dubHY5RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQCuXYwAwQCud5cAwQA2bN+MA0EAgACMAcDBQMq
BpHAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMcwzANBgkqhkiG9w0BAQsFAAOC
AQEAccZxKQPEBmfR2L1pBJJ4WLLvwW0jTRaOUL/AkeXDuEPMaGvVSTxHTjUfwW85
0eHc7BOt2Fq34mhw195khfE16Y+I338GqUntYBeytGJSpflNQeiJXFAcIZEqfCOn
NrRAxTuYo8tpvjMTYxn/HiOmCC3vTbLtL7zRshvt2fWZe/zn7EnbpbcvuBWkAfEI
L7Civr/xSIazo5xugJsE8Pd5TLYHJZfpbO0luBkVucKumHY/ORSzMNjGzI5ov5q7
M279+/IRV5cC0/te/8avi8rQfT1AeeTfmDVPZ6IPQbBs+B+OfQ5sxHk0/IxRNZOB
pvN9kZfli1c4wPFZ1oGMbY5vHA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:54 2026 by rpki-client