Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer
File: NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer (raw, json)
Hash identifier: CH/pFyfCNevyF1z34IBKrzbcSBtLtW2UVQjtqbS+WRw=
Subject key identifier: 34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA50B92BAFB116D576DCEBE25DD9373
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:18:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57447
IP: 185.161.122.0/24
IP: 213.177.171.0/24
IP: 2a05:9440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:0b:92:ba:fb:11:6d:57:6d:ce:be:25:dd:93:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:2c:4d:fc:70:56:b8:8a:b3:fb:09:d6:36:
11:4b:c1:b5:ce:8b:8d:f7:7b:14:85:f3:f1:52:9a:
66:47:fb:1c:51:31:f1:2d:54:56:0f:81:65:f0:35:
ad:0f:92:73:13:9d:42:67:bb:f2:a3:c0:4f:8d:6e:
6c:44:88:8e:25:d4:2c:0b:9f:81:9d:8b:19:0d:52:
4e:af:50:cc:b6:20:5d:b9:a3:0d:71:78:be:61:c4:
96:70:f2:1e:20:37:de:e6:19:9c:bb:89:81:68:49:
d2:e5:9f:ec:81:19:b8:7e:33:53:e3:c0:0c:8e:89:
28:03:0e:fb:70:b0:d5:1f:9f:aa:8d:59:0e:28:60:
06:9c:40:a7:d4:30:6c:e2:29:56:4d:cd:ca:57:43:
84:e1:9b:9a:9c:fa:87:10:d8:ba:d0:c7:d3:a6:1b:
ad:7e:0b:00:47:8b:cf:f6:b0:9c:97:4b:d7:32:1a:
ae:d2:06:69:ef:38:45:bb:42:f8:10:73:2a:95:20:
94:5c:11:e7:8b:e5:6d:41:04:b8:32:49:76:69:47:
ff:57:2c:4a:1a:fa:1d:c0:f8:a1:75:37:01:5d:1f:
da:f4:15:63:e4:a1:63:99:8d:1e:96:bd:51:b5:e7:
ae:14:3b:52:61:2f:fe:10:14:c7:17:0e:b1:d6:cc:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.122.0/24
213.177.171.0/24
IPv6:
2a05:9440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57447
Signature Algorithm: sha256WithRSAEncryption
19:0f:87:91:80:ba:7e:02:e2:6d:e6:c6:91:58:dc:04:86:73:
29:93:00:ce:ff:c5:9e:2b:6b:f3:04:2c:27:c9:00:7c:75:bd:
27:27:b2:bb:c4:30:cc:74:70:c8:95:78:0f:52:38:3f:f3:8e:
dd:93:41:dd:63:3c:5e:ad:6d:74:55:95:04:83:03:e1:3b:73:
19:8b:67:1d:94:fb:a3:b0:09:cf:5c:d4:86:19:76:3f:bc:0e:
ec:50:05:1f:5b:92:14:fc:84:e9:e6:34:40:29:04:08:a6:84:
a0:f3:99:f7:c5:6b:62:22:e4:2f:bc:f9:54:e5:86:60:87:37:
7c:85:8d:11:26:a4:8e:bc:2a:e9:02:6d:00:53:e3:71:23:b4:
12:06:d8:17:1e:38:d0:a0:37:d4:9a:7d:eb:bd:1b:c5:8b:5a:
0d:a1:2a:56:2a:91:c0:aa:b9:47:b3:55:3b:c3:51:4b:5c:17:
4e:40:69:7c:47:a7:92:62:42:41:ae:19:cf:1b:5a:d1:c0:6e:
82:c9:49:ee:9c:46:fe:ba:78:b7:96:b4:b5:7f:22:8a:63:07:
fa:92:fa:f8:5b:58:9f:b5:80:36:6c:ae:02:ed:dd:59:54:cb:
c2:96:9c:2b:93:84:4d:3a:dc:e0:f5:03:f6:93:c3:d1:5b:ff:
91:8f:60:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:59:58 2026 by rpki-client