Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
File: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer (raw, json)
Hash identifier: g+rriMypJcnWxbkIoGc612vpnhK6N3I2act1/6T5Hds=
Subject key identifier: 36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DD9BAC608FF06DA13391DD2DEE4886974
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 29 Apr 2026 14:53:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198276
IP: 2001:67c:16ec::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:ba:c6:08:ff:06:da:13:39:1d:d2:de:e4:88:69:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 29 14:53:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:d4:10:35:ad:4d:1a:62:86:fe:2e:aa:16:
20:c5:d1:17:4f:62:12:fb:08:7c:83:f3:fd:af:7e:
df:dd:40:4f:91:19:bc:20:c2:09:0e:5d:a1:f2:d2:
c9:82:df:9a:36:de:bb:2a:bc:cd:5e:7b:dc:26:aa:
9f:66:71:a3:5a:7a:b9:4f:6c:ee:de:79:a7:e8:78:
3c:c8:02:a5:c8:ba:c7:97:45:85:3e:4e:de:67:cb:
22:a7:33:31:ab:cf:ab:66:47:7c:48:d6:bc:d3:f3:
c0:7b:bf:14:c8:65:8f:d6:1e:6e:fa:2f:34:68:fb:
c4:03:12:02:ba:15:c5:e8:ab:02:86:d5:31:fe:22:
7e:9c:c0:96:79:f2:a1:93:5f:f0:97:5b:fa:cf:fd:
0d:47:1a:86:d9:c1:83:90:7e:1b:72:66:73:aa:82:
4d:7c:0e:ec:0a:74:3e:28:da:d5:49:bf:0a:95:ee:
06:6c:8b:c1:ac:70:e8:e9:3f:73:5c:49:e1:ec:9f:
d0:7a:77:46:04:7c:ad:ef:12:80:cd:43:95:c8:28:
c6:74:d3:22:4a:f1:b9:8c:88:87:d7:bf:18:cf:fe:
e3:38:96:d3:00:4a:15:24:35:ea:19:4c:fc:c3:09:
16:18:77:29:46:24:69:e5:8e:cb:fd:5c:ee:4d:81:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:16ec::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198276
Signature Algorithm: sha256WithRSAEncryption
09:84:c9:9b:c1:f2:84:0c:f8:86:01:16:5b:38:90:1b:91:23:
c9:63:7f:bf:ae:a4:d3:bb:29:a2:e8:98:3d:e9:57:fb:e8:bc:
82:d5:05:af:23:dc:27:3c:ab:9b:d5:04:b5:be:e2:51:19:ce:
bd:c5:8d:ac:34:62:b0:a8:c1:c2:e5:47:40:57:ab:a6:e0:0b:
b0:1e:0a:c9:be:36:d8:03:e5:83:3d:b5:bd:81:5c:a3:8f:2c:
76:bb:cf:f3:53:51:e9:16:93:43:0c:5e:ca:b4:66:4e:c3:a0:
57:ec:57:ce:0f:47:3b:9c:37:7d:f5:95:d7:8a:49:f9:25:db:
eb:a3:18:14:f2:fa:4b:48:c9:af:ee:42:35:ed:2e:e5:18:5d:
74:14:28:02:c0:fa:a6:60:7e:b0:e1:6f:75:94:7f:0c:5e:77:
8b:c1:52:d3:e0:ad:c7:78:58:a8:8d:db:7c:6b:98:31:c4:25:
f8:5d:f8:cd:2f:0a:d4:4b:65:3c:87:b1:54:05:55:55:3a:35:
c0:07:ba:a4:6b:bb:c7:9f:f0:50:4a:04:e5:30:aa:94:85:3f:
80:38:1e:c8:62:63:e3:fc:d3:5c:36:8c:90:e4:d9:bd:af:1a:
81:7a:fb:f2:b4:c0:ec:42:a7:87:04:ec:83:06:ae:7f:d2:45:
51:bc:64:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:58 2026 by rpki-client