Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer (raw, json)
Hash identifier: j37qPMuBGr7jloEb/eaHfIRnUbTGicU9VeGsmJiMVkY=
Subject key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7910B1C83A96FC6F166A51DB118D2436
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:18:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 47271
IP: 91.198.11.0/24
IP: 91.209.3.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:b1:c8:3a:96:fc:6f:16:6a:51:db:11:8d:24:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:51:e2:87:77:25:e7:c3:aa:0c:b4:bf:f7:
ce:ee:16:d6:9a:59:b8:49:59:9e:0c:cf:3f:e6:43:
01:16:a0:4d:9a:41:13:40:db:ed:e2:f6:0c:ca:48:
65:93:20:b9:6f:29:70:3f:34:49:dc:e5:fd:b0:3c:
1e:9e:df:19:a5:c7:03:5a:f9:c9:9e:64:f3:97:92:
90:e8:6e:10:7c:74:7a:2c:c8:53:07:93:89:ca:6a:
ae:df:3c:1d:fd:0b:48:c5:fe:27:f6:a6:6c:88:5f:
34:7e:67:3e:ec:db:fa:39:ed:81:59:63:9a:a1:43:
9f:a6:df:43:de:d9:d5:ad:74:55:9e:e9:ab:c5:8a:
f3:5a:64:77:a7:10:0c:32:b1:f9:71:84:cd:d9:96:
c9:eb:ab:4d:36:f1:d5:57:c4:1b:11:d2:61:25:35:
54:33:2a:62:e4:b4:25:ac:42:e2:dd:e1:8b:15:2e:
4f:8c:b1:7d:bb:42:71:6d:7a:3c:03:10:ca:b3:fa:
18:d6:54:2a:25:63:27:f9:f7:98:07:bc:c9:c7:4c:
33:f6:86:e9:36:34:e2:48:74:b7:dd:90:23:bc:ea:
1a:bc:06:27:b8:b2:87:fd:df:ae:5a:e0:22:13:f1:
3e:40:05:71:2d:0d:84:33:23:1d:81:82:8c:63:d4:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.11.0/24
91.209.3.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47271
Signature Algorithm: sha256WithRSAEncryption
8d:1c:aa:8d:41:29:d0:f0:bf:f4:7f:81:d2:01:1c:ce:47:ff:
a0:99:72:98:6b:ce:70:79:33:28:65:ae:7f:ac:37:85:a6:52:
8a:6f:41:a6:82:af:ec:0c:9c:33:64:ef:97:ee:59:8c:7f:99:
6f:de:4c:ad:80:e8:77:4d:c2:0e:5c:09:22:2a:bf:f6:2b:6c:
f7:d9:0f:2a:13:5c:86:60:40:f3:43:4b:24:62:15:78:0b:56:
b7:4d:50:be:6c:96:5c:bb:f2:2e:c7:ab:f2:5c:e3:bf:a9:25:
e4:9b:ac:a1:b6:b1:f6:e0:34:35:72:ae:1e:f3:6f:74:c4:21:
09:f4:19:4b:7e:86:08:24:3c:28:84:26:43:58:ca:f6:ea:b4:
74:b9:0e:17:07:8e:c1:62:9d:75:ce:74:46:32:c9:05:b7:b1:
b0:36:90:75:66:c0:3f:99:ab:b5:05:fc:44:9c:45:47:69:05:
d4:8c:d0:06:e1:bb:f2:7f:83:c3:b1:fd:ed:23:43:1c:c0:99:
4c:90:b1:5c:e0:d1:7b:d8:79:8d:f8:a0:12:47:63:77:71:3b:
ed:5c:24:c0:39:3e:58:49:1a:6b:e8:9a:04:49:05:b0:34:f1:
e8:26:de:83:b9:15:26:b4:f6:33:b3:57:fe:97:ec:1b:d2:80:
b4:dc:bb:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:12:08 2026 by rpki-client