Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
File: NBSgbayFTb7mCYRYjex7MoS1qlA.cer (raw, json)
Hash identifier: FjOtBaoFTbKh+P+Yf3+U/qXfFrADVl2/b/jDLzB4KQI=
Subject key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B3616D0B1FA41C3946689EE4FED9714
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:18:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.104.99.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:16:d0:b1:fa:41:c3:94:66:89:ee:4f:ed:97:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:46:76:03:76:78:c6:a5:46:af:ee:15:23:03:
59:03:b3:ad:19:77:eb:66:4a:56:b9:f9:a4:2e:3a:
96:a1:82:e3:62:67:76:ca:e1:7d:1d:32:4b:30:d3:
29:49:83:c8:aa:9a:27:df:5e:7c:c1:2d:17:01:5c:
83:27:f1:1e:ab:55:67:2d:15:8d:ed:7e:b0:d7:ba:
12:2d:e9:67:d7:5a:58:0b:35:e0:45:1f:ac:51:a5:
d7:a2:7b:a9:82:dc:89:95:53:c4:8c:4a:78:87:2c:
f7:e8:d6:7d:ca:25:2e:9d:26:08:be:14:60:26:2f:
9b:0c:1c:8a:9e:d0:a2:bf:66:57:42:f3:58:50:94:
1b:a4:18:79:86:fa:98:7d:1a:dc:1a:a0:41:f3:c5:
3c:bd:a9:44:99:16:df:66:10:9c:b9:72:cd:15:3e:
b2:77:99:d3:0f:e7:75:f8:cf:f6:76:d5:0a:12:2c:
c9:dc:1e:9b:f7:7a:95:60:79:6e:a2:f3:c8:40:41:
22:66:4f:15:b5:34:a4:d2:a1:f2:9f:13:c4:9d:54:
7f:05:8a:57:0b:fa:ee:6a:4d:34:5d:e7:73:52:61:
88:eb:1e:4f:d6:c9:44:0c:8a:1c:40:90:14:fe:5c:
75:d5:77:d6:da:6a:f1:f1:9b:13:a1:2e:ee:c1:dd:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.99.0/24
Signature Algorithm: sha256WithRSAEncryption
71:61:11:27:1f:53:c1:85:eb:dd:41:83:d0:9a:7c:70:54:67:
b5:96:36:80:66:7b:53:d2:69:a8:6e:02:a1:5b:4d:11:7c:cc:
f8:8c:5d:c4:88:7c:d6:43:b6:08:5f:3f:14:ec:42:cf:4d:d8:
7c:cd:e0:a4:b3:2b:49:2f:54:48:f5:42:bf:b9:c2:e1:bd:05:
15:f8:1c:4c:21:37:ce:73:2d:97:54:df:db:24:4b:f7:98:6a:
ee:d5:66:ee:72:f6:2e:b8:85:f1:f4:12:02:77:c3:3e:be:8c:
ff:b2:b7:e5:e1:d5:10:29:38:13:1e:c3:89:a6:c4:ad:71:1a:
42:7d:c9:8f:e2:2d:ba:d7:97:13:83:36:44:1e:ed:ca:12:6b:
57:ca:34:0c:37:81:91:6f:a8:1c:a5:0f:7f:6c:d9:b5:ca:72:
6b:47:76:88:ee:3b:cf:84:a8:7d:10:34:eb:c2:e1:3a:cf:3a:
5a:07:01:b3:d4:67:d5:e5:da:58:96:9a:22:8c:04:2f:7c:9a:
20:40:98:62:e6:c0:70:0d:4d:7c:3f:9a:76:cf:6a:96:9f:ff:
7d:13:e1:8a:40:05:e2:60:09:37:10:fa:d2:ba:26:c5:2f:6f:
7e:56:96:ad:5f:a0:8a:ea:41:7a:c9:b3:24:0d:b8:04:7e:cc:
0a:2d:8f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:22:38 2026 by rpki-client