Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
File: NHjAigY6wtNKGxkeJDY4m77tXpc.cer (raw, json)
Hash identifier: Tr4fx45GmvOYmr5VbRnkY1199VBh4s7vCBJdixz33gg=
Subject key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E38669C32F0430D1ADA9CB0AB693304
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:19:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50774
IP: 193.108.142.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:66:9c:32:f0:43:0d:1a:da:9c:b0:ab:69:33:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:0c:b3:b5:16:8e:4a:6a:e4:4a:95:9b:20:
fd:38:78:2b:4c:9b:75:96:69:0b:de:3f:68:06:b3:
31:08:1f:a0:e2:27:c7:5e:a0:da:26:f1:15:8a:f4:
36:1e:90:ab:94:44:13:51:0d:d0:43:b3:95:8d:0e:
28:47:89:2f:c1:18:37:57:50:25:6d:76:6b:66:9c:
3e:81:b5:39:1b:04:94:6c:31:4d:3e:c8:8f:58:8f:
ad:7f:63:77:aa:03:60:9d:ce:f9:bc:b4:26:e0:0a:
28:98:d0:08:17:c9:28:25:41:7e:c0:c9:0d:36:4b:
b1:ce:3c:cc:e5:ae:61:5c:c1:e3:30:b1:26:99:13:
0d:cc:93:88:c0:89:bb:bb:22:26:43:27:b8:8b:d5:
07:35:b9:c7:5b:69:a6:6f:0d:4d:b6:ed:4f:b3:c3:
57:29:d2:07:fa:68:37:aa:db:35:67:45:24:69:e8:
72:86:81:fb:40:f5:e0:6d:0a:41:73:0c:46:9a:3c:
7b:13:d8:24:6d:06:41:33:17:f7:8f:1d:53:90:3b:
84:54:ef:87:69:33:f9:90:50:4b:ea:10:fb:a6:4d:
52:21:a8:ca:06:8d:41:45:7e:f7:6a:3f:af:67:ad:
42:23:bd:9c:43:6b:ef:f5:8d:d3:39:99:c7:12:79:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.142.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50774
Signature Algorithm: sha256WithRSAEncryption
51:73:f9:0c:a7:fa:f7:c7:0d:da:5c:cf:82:75:82:ed:4a:c0:
90:0d:bc:83:13:3e:bd:a6:a9:8a:85:aa:c9:56:a3:99:68:d0:
ea:64:47:85:36:b9:1e:de:14:82:f6:95:9d:a4:69:46:6e:7b:
e4:18:53:2a:9a:7f:54:41:1a:ca:67:23:9a:92:ae:32:66:5b:
1e:47:96:70:3e:43:44:85:db:03:ce:c1:75:e7:6f:60:cc:6a:
80:3b:c1:5f:1c:34:93:dc:ef:24:8d:26:f7:cc:34:19:d4:46:
0b:25:2a:7d:6e:58:ba:5a:59:1e:6f:85:a9:13:3d:79:20:6f:
27:4a:4a:c8:7a:0b:e7:f2:ab:06:37:b1:c1:fb:a0:47:2e:58:
c2:e1:51:be:34:3b:39:b9:70:5f:74:f7:cf:88:05:5f:15:cc:
60:e0:a0:83:1d:eb:c8:be:aa:fc:6a:ec:2b:cf:e1:7d:64:a1:
3f:f4:73:d5:85:d6:2b:39:66:46:90:2a:bd:e7:5d:21:9e:ab:
71:4f:23:f7:de:3f:f8:b3:7a:4d:4e:69:38:c2:8b:f7:88:2c:
4e:05:72:48:66:6c:e8:0e:dd:f3:f4:dc:23:f3:1f:1b:d2:07:
a2:4e:7c:22:b4:70:43:d0:ce:ad:f2:c5:37:29:f8:d6:b5:15:
75:64:3d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:59:22 2026 by rpki-client