Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
File: NgHDzOanHKshpLut8KuE3ePyurI.cer (raw, json)
Hash identifier: IaaM/TdcOtyUHMbTbolbHC5RJW18kwwNUOvbzZCEfsE=
Subject key identifier: 36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C11D107711102699100659EFEE81D1C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:18:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 52143
IP: 188.94.0.0/22
IP: 2a02:f280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:d1:07:71:11:02:69:91:00:65:9e:fe:e8:1d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3601c3cce6a71cab21a4bbadf0ab84dde3f2bab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:ca:b1:3d:b0:87:47:4e:8d:31:b8:97:98:
e6:0f:6f:b3:3e:41:fb:60:58:32:ff:f7:9f:6b:60:
10:5a:17:6a:7b:31:ae:b2:55:a3:57:a1:66:d6:3e:
db:a7:fa:5d:0d:b1:49:54:09:6c:6c:f1:23:02:42:
29:1e:8f:76:78:dc:02:80:6d:d5:14:db:10:26:26:
85:43:0b:bb:bd:51:97:ff:82:91:89:04:7e:a7:d0:
af:6d:b0:3b:cf:72:24:dc:02:66:6e:9a:03:04:73:
b1:fb:38:c2:9a:37:ba:c0:a1:06:f7:74:58:89:41:
80:bc:6f:91:1f:1f:44:6e:f5:a9:30:87:ac:a3:e1:
7f:6d:0a:f4:c3:5a:bb:47:69:a5:f9:9c:5d:e4:52:
8d:f4:bd:65:84:4e:16:b9:fd:2e:6d:39:76:27:78:
c0:67:5d:5f:fe:96:ee:ef:b7:70:d2:6a:49:31:44:
9a:45:b6:b6:61:48:3a:8c:84:c8:b1:46:cb:0c:2d:
87:b0:df:00:aa:1f:c8:00:19:3a:c0:b6:b1:3d:a4:
b3:af:43:aa:81:81:32:08:2c:dc:78:26:65:c8:b9:
a7:df:77:95:cf:96:78:c1:ed:19:a2:4b:7b:8e:49:
58:7b:5e:2f:92:47:2d:ea:18:25:0d:01:b8:d2:f6:
55:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.0.0/22
IPv6:
2a02:f280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52143
Signature Algorithm: sha256WithRSAEncryption
50:b7:f9:9e:91:58:02:45:b7:85:99:88:34:cd:d9:f0:0c:b1:
3b:e5:64:9c:f3:1a:ce:02:33:a2:42:87:98:53:66:3a:24:cf:
bc:18:53:51:c9:f4:e0:9f:61:44:9a:bf:cd:8c:c5:d4:ed:0b:
10:42:67:32:c5:b7:76:14:b8:58:87:0d:d6:30:4d:6a:9c:d4:
b3:ff:3a:f4:e8:73:ec:8c:b6:30:4a:8a:7a:1d:24:69:6b:eb:
7f:14:c6:d3:0b:c1:14:e5:d6:ce:91:14:82:81:d8:ac:01:30:
d9:9b:e0:7c:57:a2:c3:6d:e1:a2:c6:24:af:a4:a0:6a:55:7e:
40:2c:36:07:6d:ab:50:74:da:f8:a1:32:4a:2e:e1:11:b0:96:
71:49:2b:7c:8a:d4:fe:d6:5a:6e:9e:cc:24:49:c3:75:2b:79:
00:55:74:a4:ad:d2:bb:37:14:2e:a0:88:5f:6f:a4:37:06:8b:
41:8d:7e:f5:e8:c1:dc:21:69:8c:12:cd:56:b3:17:6d:a3:70:
3f:bd:0f:b5:a2:41:f3:af:d1:b4:cc:a5:af:7e:62:25:bc:68:
16:00:d8:ff:c3:c9:12:77:7b:51:b4:0e:17:8e:d1:93:66:55:
d3:2c:70:97:d8:6f:bc:d6:a9:5e:8e:48:19:dc:e4:33:29:58:
0e:de:3b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:59:18 2026 by rpki-client