Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
File: NOFy8gusVmf_hcr_gLRTZ1jm2po.cer (raw, json)
Hash identifier: RAGHP77Qkb1gStbOZJS87pd7D+To59+Ckpvt7gNSVew=
Subject key identifier: 34:E1:72:F2:0B:AC:56:67:FF:85:CA:FF:80:B4:53:67:58:E6:DA:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE445B94ED4DAC0CFE120AC61D5692
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 61102
AS: 213391
IP: 89.33.28.0/23
IP: 107.150.178.0/23
IP: 176.223.65.0/24
IP: 185.18.204.0/22
IP: 185.37.148.0/22
IP: 185.217.96.0/22
IP: 188.210.255.0/24
IP: 193.201.147.0/26
IP: 2001:7f8:62::/48
IP: 2a03:ff40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:44:5b:94:ed:4d:ac:0c:fe:12:0a:c6:1d:56:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34e172f20bac5667ff85caff80b4536758e6da9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:ba:3b:c5:11:24:d0:a2:e2:d8:15:24:8d:
e5:67:02:16:0e:ec:a6:9f:ee:1f:4f:67:62:57:9a:
37:67:83:a5:24:78:05:37:62:db:67:10:4b:62:12:
c5:9f:71:4f:51:57:07:4c:10:df:cc:13:1f:ee:b9:
ea:73:ca:bb:69:75:f4:4b:37:e7:ad:42:01:c3:07:
ff:34:d1:19:d8:e0:7d:7f:44:20:0e:fe:e5:30:f4:
fb:3d:21:bb:28:6d:4a:76:35:cf:73:1e:63:dd:86:
79:32:ed:56:cb:e1:38:ac:04:05:0d:6a:23:84:ce:
c9:7b:6a:af:8d:10:09:e7:56:29:8f:21:38:df:d4:
c4:72:02:d4:a7:9a:97:b4:42:ce:46:43:aa:53:22:
c5:a6:a9:dd:5a:52:fb:cf:8b:96:31:94:9f:ed:90:
bb:7f:8b:b9:2c:37:be:5c:94:6e:2a:85:f6:7d:29:
53:f0:3a:4b:70:50:ce:9e:c7:80:9f:c3:13:62:ca:
50:ee:1f:88:b7:ff:d2:ec:19:04:11:6b:fb:00:97:
40:b0:02:39:f9:14:af:de:61:aa:76:b4:08:23:03:
78:d2:d1:8f:8c:c5:ba:a1:83:65:4c:8a:8c:92:64:
74:7b:6f:da:40:e3:10:b9:21:d1:fc:a2:b3:ea:e4:
1a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E1:72:F2:0B:AC:56:67:FF:85:CA:FF:80:B4:53:67:58:E6:DA:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.28.0/23
107.150.178.0/23
176.223.65.0/24
185.18.204.0/22
185.37.148.0/22
185.217.96.0/22
188.210.255.0/24
193.201.147.0/26
IPv6:
2001:7f8:62::/48
2a03:ff40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61102
213391
Signature Algorithm: sha256WithRSAEncryption
1a:e9:fb:df:5e:8a:a4:86:61:c5:03:83:ff:dd:10:84:5b:62:
86:5b:ca:31:b3:ba:08:db:7a:d6:74:53:9b:64:8d:04:3f:c0:
c9:ba:29:d3:66:bc:24:3b:c9:5d:a0:8a:b8:dc:31:0e:25:96:
76:79:2d:e6:32:8d:a2:78:14:a5:9c:2a:84:87:52:3c:2e:09:
ec:47:fc:f1:95:ba:f4:a5:43:f7:72:fc:7b:f7:10:9c:ed:47:
0b:52:cd:55:96:38:75:72:3a:b9:b0:fe:3a:d9:d2:51:ee:da:
f2:f9:92:35:02:db:b9:b3:54:40:a0:28:f5:99:47:1d:ee:6c:
60:f5:15:af:7f:b9:a6:91:de:87:1d:0f:8f:a4:91:2f:74:d6:
e0:32:d4:12:42:d5:6c:fe:63:f0:e5:47:2b:73:3a:8d:dc:51:
6a:58:a5:5e:8b:4a:d8:c1:0c:ec:df:e2:2c:95:e5:63:29:94:
d9:04:4c:5c:30:81:6b:35:dd:08:4d:b3:01:4b:9d:04:dc:74:
88:f5:a4:e6:de:e4:bd:11:d0:69:9a:c8:c2:9c:ca:aa:2b:d8:
e6:b6:e1:bb:2a:d9:8c:88:2f:98:42:0d:0c:f7:5f:de:4e:bb:
65:92:5d:ca:35:10:30:bd:de:b9:c4:ca:6f:df:2b:82:99:86:
20:f5:77:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:02 2026 by rpki-client