Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
File: NoEciv-vsKwfX39v97ZLtwNGRX0.cer (raw, json)
Hash identifier: 4f2fkHgATJPMkM/j4xlhRi0zmliycARZqXiuOMA4d/s=
Subject key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA4BCA9F58F6A70E64E744243344546
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:18:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205446
IP: 91.216.210.0/24
IP: 2a12:d440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a4:bc:a9:f5:8f:6a:70:e6:4e:74:42:43:34:45:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:62:89:2b:12:e0:2c:e1:cc:c4:1b:68:b9:
c2:c4:2c:83:90:d4:8c:5c:e2:bc:70:46:c7:03:dc:
45:86:f5:25:a3:93:8a:04:46:57:16:f3:28:f8:f9:
f0:c7:59:64:d1:f2:4e:d9:45:61:05:7e:4c:ec:d2:
52:db:b3:cd:78:9a:04:37:88:02:d5:6f:b9:de:fa:
8d:e9:ed:9e:af:53:f3:b9:64:12:c3:04:8b:34:ba:
3f:4d:ca:60:30:ad:34:f2:83:13:f4:cd:e8:68:67:
97:b2:90:1b:20:19:7f:66:d7:94:b0:28:cc:2a:0a:
68:ff:75:89:73:a3:58:dc:8b:ef:04:f3:e6:fc:f7:
7f:a4:21:8d:cc:07:5a:e7:6b:69:d6:56:40:60:94:
01:4a:bb:2b:26:4f:7c:19:1e:5c:ac:0a:a2:23:a2:
2c:77:32:91:d7:a8:d2:ea:fd:1e:d5:b4:fb:1d:38:
66:fd:2a:47:f9:24:e5:e8:70:29:40:32:20:09:cf:
39:75:74:47:a5:f6:04:a5:9c:f1:b9:ca:7d:67:40:
ad:cd:f7:31:11:29:2e:c5:7e:a6:36:db:20:89:f9:
e5:0d:34:51:15:7f:3f:3a:4e:09:b6:59:6a:c4:92:
73:c6:74:ce:95:f2:2a:d8:48:81:be:3e:de:cc:a7:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.210.0/24
IPv6:
2a12:d440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205446
Signature Algorithm: sha256WithRSAEncryption
7b:84:12:03:a6:a3:62:5a:c6:5b:32:94:92:f5:99:e0:30:ff:
ca:e8:f2:52:e3:57:7b:cc:09:32:60:28:9e:8e:16:b1:5a:5c:
30:18:b9:c1:f2:30:2c:4c:5a:e5:d5:c2:9a:75:b4:cb:d4:7d:
47:9a:7a:10:0b:e0:77:10:3a:a7:1b:8e:cd:7b:0f:19:78:14:
f0:c7:13:cf:eb:04:20:4a:e4:12:e3:60:d1:19:4b:b0:b7:e3:
e8:40:cc:0a:9e:3b:3c:4d:c9:8b:88:c8:44:43:6a:cc:88:9a:
6c:df:21:c6:3e:69:30:22:5d:1b:91:ee:80:f2:a8:3e:9b:e8:
e3:15:ab:73:91:cf:48:91:eb:8c:ad:c3:cd:b1:e4:2a:45:04:
4b:c8:91:a3:cf:29:b4:32:55:c0:18:cf:6f:c8:0f:de:e7:27:
e9:b6:b5:d6:cd:78:1e:fd:e9:e7:4b:a4:60:69:d2:16:6c:06:
e0:db:0b:86:d9:46:21:33:a7:56:be:14:e9:11:3b:ad:6b:bb:
b7:20:f9:25:ed:3c:28:20:b4:73:cd:bc:f1:d4:ee:20:db:a2:
e4:fc:b8:d2:5b:de:3d:3f:5e:b4:ea:bf:5c:da:5a:fb:c7:96:
02:1a:36:25:e8:2a:8d:5f:6c:a0:fb:7a:88:f5:60:22:3e:10:
09:6f:d4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:19:15 2026 by rpki-client