Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NdNdrWLFWYRuok4UUAv-RePXUfI.cer
File: NdNdrWLFWYRuok4UUAv-RePXUfI.cer (raw, json)
Hash identifier: p1UOVXB4KTn6Q3qU5FpTaLUiMVoxpon0JH7xhEd48Oc=
Subject key identifier: 35:D3:5D:AD:62:C5:59:84:6E:A2:4E:14:50:0B:FE:45:E3:D7:51:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CD992E7DD9C7AB0914ADB63A6D1D1AE3F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/NdNdrWLFWYRuok4UUAv-RePXUfI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Mar 2026 21:06:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 196843
IP: 109.73.208.0/20
IP: 185.122.40.0/22
IP: 2a00:1808::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d9:92:e7:dd:9c:7a:b0:91:4a:db:63:a6:d1:d1:ae:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 10 21:06:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35d35dad62c559846ea24e14500bfe45e3d751f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:60:64:4d:66:87:37:eb:ca:88:a0:fa:d9:26:
b7:3b:2c:97:d3:80:79:3d:2c:e3:b0:ef:b5:b7:31:
29:69:8f:d2:94:89:49:10:8d:d7:ad:db:4c:21:10:
fb:96:39:5b:4c:22:49:1c:4c:10:13:f5:a9:a7:77:
e4:42:2c:c8:de:0a:21:b2:01:df:96:35:4c:31:9d:
b1:76:0e:d4:01:47:9e:04:0e:97:41:69:04:63:69:
f3:77:3a:01:57:8b:84:e5:eb:3f:63:66:d5:0b:5b:
bc:5f:10:05:e7:3a:4f:a3:4f:d9:ab:5f:5e:b5:ef:
3b:03:5f:c8:ce:8c:83:d5:cf:f0:95:4a:cf:0c:27:
19:b5:2c:55:c6:d8:d2:39:74:83:e3:39:86:3f:64:
eb:0d:40:49:e6:fe:c9:4a:a0:44:d4:0e:4a:2e:65:
e9:d6:a2:7c:d6:55:06:1e:74:2e:74:cc:35:f1:4d:
53:23:a6:17:39:d2:4e:fb:9c:c0:84:7b:72:78:8e:
1e:75:f1:46:58:9f:f4:d1:69:5f:68:8b:c5:7c:ee:
43:c9:67:8b:cd:7b:7f:b0:1a:34:0d:88:be:fc:25:
69:15:38:c8:c0:73:17:c0:27:54:11:3f:e9:d6:e3:
64:7f:82:d3:5b:50:eb:01:7c:16:01:da:c2:8f:a8:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D3:5D:AD:62:C5:59:84:6E:A2:4E:14:50:0B:FE:45:E3:D7:51:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/NdNdrWLFWYRuok4UUAv-RePXUfI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.73.208.0/20
185.122.40.0/22
IPv6:
2a00:1808::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196843
Signature Algorithm: sha256WithRSAEncryption
66:d8:75:1d:2a:87:ad:1c:0d:e7:51:bc:f0:1e:aa:53:36:bf:
b0:ed:21:02:d7:ae:c4:83:b7:92:a3:28:25:ff:04:3f:b4:62:
34:d9:8d:d8:24:dc:22:24:6a:70:72:66:89:5a:ea:ca:aa:48:
99:4b:9c:d9:c9:4a:4e:52:37:5e:49:c3:c4:f1:e2:3e:74:f5:
4d:75:94:69:d7:10:c0:be:64:2a:44:ec:a0:9d:47:eb:57:89:
3c:57:60:c3:24:3c:71:4b:54:95:0e:b0:a7:73:9c:87:77:f7:
3e:12:eb:2f:1e:c6:f7:48:2f:85:da:56:98:cb:bc:0b:cc:b8:
c9:40:01:83:02:44:02:4f:81:82:a4:c0:18:b5:3f:37:5f:2c:
9d:fa:7c:20:72:27:3f:e0:d5:46:d6:1e:64:2a:7f:8c:9b:18:
36:9c:82:06:e6:46:5e:4d:02:44:e5:ff:f5:37:76:8e:1f:f3:
b9:99:26:40:33:70:c3:b7:b9:7c:70:45:b8:82:6e:b5:70:a8:
5e:af:74:61:8d:c5:96:63:ec:28:2d:c9:fb:03:3a:28:d2:d9:
43:ef:dd:0c:da:bf:2d:42:43:20:68:c2:4c:48:85:8f:34:94:
26:bb:4c:01:fd:4f:06:b2:74:97:c4:15:85:dd:37:7f:d3:de:
37:2a:63:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:30:16 2026 by rpki-client