Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nCyytL7GAbPppHQCFeHe0hFyLWQ.cer
File: nCyytL7GAbPppHQCFeHe0hFyLWQ.cer (raw, json)
Hash identifier: 9OojkhpH9lUsYOzIDNv6ps5NebYchrRoWLezCTVJngs=
Subject key identifier: 9C:2C:B2:B4:BE:C6:01:B3:E9:A4:74:02:15:E1:DE:D2:11:72:2D:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199E8ADEE39C6C0494D18553151139170C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 15 Oct 2025 16:22:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204871
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:ad:ee:39:c6:c0:49:4d:18:55:31:51:13:91:70:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 15 16:22:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c2cb2b4bec601b3e9a4740215e1ded211722d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:99:5f:56:7e:dc:f0:c4:fc:12:46:9b:7d:
9c:b0:ed:2d:92:8d:f5:2e:2f:47:2f:19:f8:18:e0:
78:37:55:9f:bb:17:85:ea:e9:4e:c9:71:44:ba:2e:
37:0a:86:80:d5:05:07:7c:29:53:d5:76:37:af:fd:
c2:f3:c8:3b:4f:52:d1:03:c2:b4:79:08:88:81:e0:
41:55:17:bb:34:7f:2d:84:8b:4e:1a:77:51:72:8e:
ea:51:bc:ea:bd:cd:9f:e0:7b:25:7d:56:36:6b:bb:
12:29:cf:49:a3:58:d4:62:58:d6:89:9c:25:a2:fb:
25:9a:d0:d5:c4:67:cc:e0:9a:97:a2:7b:0b:d3:c7:
49:4f:74:0a:80:b8:7f:27:e6:d2:e9:28:a1:ba:bb:
0d:38:27:a3:90:be:7f:13:bb:2d:79:47:bb:65:ae:
a5:95:d0:03:93:fb:2e:ae:9e:18:92:8b:ae:1c:77:
1a:cb:1a:c8:67:00:c4:5c:b9:91:42:71:66:53:6a:
50:3b:f4:ac:ac:de:d5:bc:60:02:bd:a8:7c:c3:61:
46:59:e1:64:fa:af:63:60:c3:80:75:62:3b:ce:d3:
76:4d:ac:93:b4:05:6c:14:b5:12:72:b2:29:11:f5:
b4:92:64:9a:8f:28:a3:57:17:f3:8e:78:c9:c1:65:
01:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2C:B2:B4:BE:C6:01:B3:E9:A4:74:02:15:E1:DE:D2:11:72:2D:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204871
Signature Algorithm: sha256WithRSAEncryption
30:3a:6e:55:28:a0:a1:97:6f:cd:08:db:6f:2e:96:f1:38:e3:
1a:43:08:09:b0:a9:cd:4c:5f:94:a0:66:a1:73:72:3c:67:b4:
c5:c7:31:e0:11:f1:f1:91:7d:23:81:bd:a6:59:c5:eb:00:d6:
65:e2:27:0d:e8:bc:8f:90:d7:e9:fb:c0:71:b4:86:fd:75:2a:
e3:8e:cb:4c:25:7a:ca:22:24:63:43:b5:40:c1:8f:fc:00:3b:
9d:fc:41:c4:6c:16:02:97:b5:30:eb:6b:7d:4c:b5:ba:8f:64:
30:21:e0:ee:d8:78:6b:f6:0c:02:55:84:49:5d:1c:d2:28:76:
df:ff:ca:1b:e9:3e:37:76:4f:9a:db:63:26:8e:89:50:0f:cd:
de:da:5f:36:f8:0b:64:d5:6a:81:d3:40:c2:3e:07:fd:88:1c:
e1:23:e6:9a:06:ed:65:97:bc:c9:44:e8:fb:8b:f5:49:b5:bd:
e8:d5:88:75:43:1a:7d:4e:62:c0:c8:23:a3:14:39:ee:f2:dd:
2f:53:57:87:e8:97:00:3e:36:39:d4:b8:34:75:a5:a9:78:71:
74:21:81:cd:ed:31:66:9a:4e:c3:01:5d:29:64:8a:3f:ad:b8:
dd:cb:2a:2c:09:82:7e:b2:24:c8:61:fc:95:7a:ea:12:6f:78:
a0:d9:7f:9f
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZnore45xsBJTRhVMVETkXDHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMDE1MTYyMjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzJjYjJiNGJlYzYwMWIzZTlhNDc0MDIxNWUxZGVkMjExNzIyZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2qZX1Z+3PDE/BJGm32csO0tko31
Li9HLxn4GOB4N1WfuxeF6ulOyXFEui43CoaA1QUHfClT1XY3r/3C88g7T1LRA8K0
eQiIgeBBVRe7NH8thItOGndRco7qUbzqvc2f4HslfVY2a7sSKc9Jo1jUYljWiZwl
ovslmtDVxGfM4JqXonsL08dJT3QKgLh/J+bS6SihursNOCejkL5/E7steUe7Za6l
ldADk/surp4YkouuHHcayxrIZwDEXLmRQnFmU2pQO/SsrN7VvGACvah8w2FGWeFk
+q9jYMOAdWI7ztN2TayTtAVsFLUScrIpEfW0kmSajyijVxfzjnjJwWUB1wIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFJwssrS+xgGz6aR0AhXh3tIRci1kMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ViYjY4
OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8xLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWJi
Njg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2FlNjRkLzEvOUMyQ0IyQjRCRUM2
MDFCM0U5QTQ3NDAyMTVFMURFRDIxMTcyMkQ2NC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDIEcw
DQYJKoZIhvcNAQELBQADggEBADA6blUooKGXb80I228ulvE44xpDCAmwqc1MX5Sg
ZqFzcjxntMXHMeAR8fGRfSOBvaZZxesA1mXiJw3ovI+Q1+n7wHG0hv11KuOOy0wl
esoiJGNDtUDBj/wAO538QcRsFgKXtTDra31MtbqPZDAh4O7YeGv2DAJVhEldHNIo
dt//yhvpPjd2T5rbYyaOiVAPzd7aXzb4C2TVaoHTQMI+B/2IHOEj5poG7WWXvMlE
6PuL9Um1vejViHVDGn1OYsDII6MUOe7y3S9TV4folwA+NjnUuDR1pal4cXQhgc3t
MWaaTsMBXSlkij+tuN3LKiwJgn6yJMhh/JV66hJveKDZf58=
-----END CERTIFICATE-----
Generated at Sun Oct 19 10:31:09 2025 by rpki-client