Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
File: NtYESWbFdDmq9SAxCIX4HUUnWyo.cer (raw, json)
Hash identifier: I541qadOdq2Etm/xIJa0F95uaa8/eXj+denAnEeeKOk=
Subject key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DD450E89F993197EDF456AA785F9E7057
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Apr 2026 13:39:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202034
IP: 134.168.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:50:e8:9f:99:31:97:ed:f4:56:aa:78:5f:9e:70:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 13:39:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36d6044966c57439aaf520310885f81d45275b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8a:ef:ad:4f:1f:c0:ac:e8:d7:91:82:dc:57:
30:71:c6:65:31:9a:00:3c:85:07:ca:0e:1f:ff:c8:
42:2a:74:bf:70:63:8f:3a:59:4d:15:76:23:01:28:
1d:4b:d1:23:73:24:ab:b4:67:c8:45:48:1f:06:ca:
7b:5b:2a:6f:8f:ac:ca:bd:f3:c9:86:59:70:09:89:
94:e6:52:e1:9c:cb:5f:90:1f:c2:14:56:78:53:68:
c2:ed:16:92:6b:f6:b9:a2:35:c5:65:c7:e0:63:62:
c0:6c:24:bd:9a:5d:38:78:99:a2:af:d9:49:a0:b0:
0b:56:19:f3:a5:3b:51:b4:8a:3b:fc:b6:d2:4b:8c:
34:52:b2:7c:52:e1:b8:f3:70:46:8c:80:28:c6:c6:
95:8f:f6:6e:f8:e0:02:4a:22:a7:c7:3a:ee:63:f3:
66:8f:13:3e:15:1f:22:ec:72:e2:62:c6:73:1e:52:
42:b9:50:6c:5d:c0:9d:0f:4e:01:41:5d:3f:b3:82:
17:15:53:a3:b1:5a:81:a1:8c:ce:58:ed:79:6c:a8:
b2:90:56:1d:ea:05:3f:dd:61:dd:b7:d9:ec:e3:04:
9b:62:4c:bf:03:9b:fb:39:66:35:e4:35:ac:d0:32:
b7:24:f6:e1:b3:71:25:da:98:ed:5f:6e:85:74:ee:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.168.0.0/16
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202034
Signature Algorithm: sha256WithRSAEncryption
37:47:85:1e:19:8f:6c:66:61:c3:96:45:5e:16:f8:f3:5d:2a:
27:88:ed:2a:6a:08:c0:46:f3:9b:ec:db:e8:45:c4:00:b6:47:
70:17:87:bc:27:0d:22:e0:27:72:a7:30:02:0c:9e:8c:11:4d:
5f:81:de:b3:56:c2:36:7a:e5:8b:2b:8a:e0:66:c4:6e:d8:5d:
e2:6f:8d:df:f4:1d:e2:1e:e9:a3:e7:45:d1:40:35:d7:f6:99:
16:91:9b:a2:20:79:69:c2:86:c6:dc:79:3a:96:af:49:b0:53:
43:b0:b2:7f:91:06:2f:70:2f:b9:d9:1f:e0:ed:25:ce:d0:b1:
d7:55:57:bc:04:73:53:71:b0:6c:a8:09:84:ae:69:ce:ae:12:
0d:ea:d2:74:b7:42:86:72:d9:b7:3c:71:05:f6:97:8c:6d:80:
c1:c4:be:34:81:24:c5:b1:50:f9:41:a9:1e:0f:a3:dc:9f:8f:
2a:74:2c:72:8a:f3:41:bc:51:a0:4d:72:41:7b:0e:10:59:a4:
c2:03:45:76:3a:ec:f2:ae:ef:be:a9:9e:d2:ee:e3:ea:e0:9c:
ec:2b:85:ad:ea:dd:6c:fa:50:99:2f:38:77:91:11:1b:49:7d:
b2:c1:a8:d5:da:74:61:d1:65:27:a8:23:0e:42:59:c5:79:82:
2f:c1:7d:57
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZ3UUOifmTGX7fRWqnhfnnBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDI4MTMzOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmQ2MDQ0OTY2YzU3NDM5YWFmNTIwMzEwODg1ZjgxZDQ1Mjc1YjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64rvrU8fwKzo15GC3FcwccZlMZoA
PIUHyg4f/8hCKnS/cGOPOllNFXYjASgdS9EjcySrtGfIRUgfBsp7Wypvj6zKvfPJ
hllwCYmU5lLhnMtfkB/CFFZ4U2jC7RaSa/a5ojXFZcfgY2LAbCS9ml04eJmir9lJ
oLALVhnzpTtRtIo7/LbSS4w0UrJ8UuG483BGjIAoxsaVj/Zu+OACSiKnxzruY/Nm
jxM+FR8i7HLiYsZzHlJCuVBsXcCdD04BQV0/s4IXFVOjsVqBoYzOWO15bKiykFYd
6gU/3WHdt9ns4wSbYky/A5v7OWY15DWs0DK3JPbhs3El2pjtX26FdO4bjwIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFDbWBElmxXQ5qvUgMQiF+B1FJ1sqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzA1NDNl
My0xYmYwLTRkYjMtYjAxZS1hMWQ2MDU0MzUwZDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvMDU0M2Uz
LTFiZjAtNGRiMy1iMDFlLWExZDYwNTQzNTBkMi8xL050WUVTV2JGZERtcTlTQXhD
SVg0SFVVbld5by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAhqgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
AxUyMA0GCSqGSIb3DQEBCwUAA4IBAQA3R4UeGY9sZmHDlkVeFvjzXSoniO0qagjA
RvOb7NvoRcQAtkdwF4e8Jw0i4CdypzACDJ6MEU1fgd6zVsI2euWLK4rgZsRu2F3i
b43f9B3iHumj50XRQDXX9pkWkZuiIHlpwobG3Hk6lq9JsFNDsLJ/kQYvcC+52R/g
7SXO0LHXVVe8BHNTcbBsqAmErmnOrhIN6tJ0t0KGctm3PHEF9peMbYDBxL40gSTF
sVD5QakeD6Pcn48qdCxyivNBvFGgTXJBew4QWaTCA0V2Ouzyru++qZ7S7uPq4Jzs
K4Wt6t1s+lCZLzh3kREbSX2ywajV2nRh0WUnqCMOQlnFeYIvwX1X
-----END CERTIFICATE-----
Generated at Wed May 13 06:04:58 2026 by rpki-client