Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer
File: njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer (raw, json)
Hash identifier: F391vzmosTGcoVWE1pQPo1uoeCAO4tMWBw9ISfEkgZg=
Subject key identifier: 9E:31:50:18:E5:60:00:0D:94:71:8D:85:EE:4E:13:20:C3:A5:E4:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA1CE61B5E66C43D01830F819C67F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 88.218.84.0/22
IP: 185.72.200.0/22
IP: 2a05:3bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:1c:e6:1b:5e:66:c4:3d:01:83:0f:81:9c:67:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e315018e560000d94718d85ee4e1320c3a5e457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c1:52:93:85:70:9d:b4:d8:e2:bd:3b:ac:36:
dc:eb:a4:69:7d:be:88:ed:03:ae:8c:c9:a1:d9:cd:
37:54:05:e6:c8:74:cb:58:8f:f2:fd:07:2e:0f:83:
00:d2:0c:82:b7:0f:bb:8f:63:9d:65:df:da:fe:ac:
19:de:7a:1e:eb:fa:a3:1a:f5:3d:a8:3a:42:b6:66:
41:99:29:a7:13:c8:60:58:9f:78:5a:90:6d:d4:5f:
da:1b:1c:49:b3:8d:06:c8:6e:b1:7d:b0:88:0f:f5:
b9:b8:ff:f9:14:69:06:92:55:62:df:27:e2:f2:eb:
2d:dc:fe:d7:c7:16:6d:9b:cb:cf:5c:6e:5f:c9:a4:
53:30:ae:02:72:41:d8:5e:4f:fa:41:5d:e6:98:d3:
c0:ea:0f:30:b6:1e:f1:7d:ce:a2:6b:2f:04:2a:b3:
f1:9a:45:0d:a9:d0:3e:bd:b1:03:11:33:8c:bb:c4:
62:62:14:e4:99:80:1e:8a:a5:50:eb:07:fa:df:05:
bc:e1:25:f9:ec:85:57:38:99:14:db:a5:02:56:48:
e0:d6:d0:c8:4b:f1:11:1d:2c:22:09:ac:02:fc:f5:
1c:2b:93:53:f7:a5:57:e3:1a:48:33:cc:48:53:b0:
e6:57:d7:37:6e:78:4a:d3:e0:33:f0:e7:d9:c9:e0:
32:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:31:50:18:E5:60:00:0D:94:71:8D:85:EE:4E:13:20:C3:A5:E4:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.84.0/22
185.72.200.0/22
IPv6:
2a05:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
10:8b:63:45:4e:3d:b5:b0:e3:cd:6c:9f:b7:26:3e:1e:a1:11:
ce:10:c9:1b:a2:8d:c4:b4:c4:61:b9:2f:49:55:d8:16:dc:be:
94:38:8a:64:44:7c:fd:67:43:32:c8:02:8e:98:02:32:0d:4e:
5d:15:dd:60:8c:38:a9:ed:62:25:69:88:0a:86:ab:1b:83:42:
84:7e:ad:e1:6e:d2:7a:c2:c9:57:08:2a:10:29:2c:73:09:38:
c4:95:9a:02:e4:e4:1d:20:96:49:a6:6c:bf:64:56:f3:91:99:
84:31:cf:70:6c:fc:6d:2e:7f:bd:3a:b4:bd:88:36:7d:78:28:
9c:dd:78:9c:6c:c1:a6:32:a0:f8:e9:94:1a:fe:15:6f:66:76:
28:9e:11:39:00:d8:0c:a1:72:ed:5b:38:45:45:53:49:06:6c:
1b:bc:87:ba:d7:25:30:40:9d:a0:c8:41:9b:5a:47:bf:71:c0:
4f:6b:c5:7c:ed:ff:92:8a:b4:a4:96:dd:5f:a0:e2:c1:bc:b2:
6d:f2:2e:4d:fc:28:72:22:05:15:5b:a2:37:ff:c5:79:cd:7b:
66:87:6b:3c:83:81:d4:d6:9d:69:ec:dc:79:a9:87:90:07:a9:
aa:d4:d4:73:e4:2b:53:f5:0c:ea:2e:9f:5b:5c:ad:ab:83:8c:
b1:43:3f:e7
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZ8Y+hzmG15mxD0Bgw+BnGf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTMxNTAxOGU1NjAwMDBkOTQ3MThkODVlZTRlMTMyMGMzYTVlNDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MFSk4VwnbTY4r07rDbc66Rpfb6I
7QOujMmh2c03VAXmyHTLWI/y/QcuD4MA0gyCtw+7j2OdZd/a/qwZ3noe6/qjGvU9
qDpCtmZBmSmnE8hgWJ94WpBt1F/aGxxJs40GyG6xfbCID/W5uP/5FGkGklVi3yfi
8ust3P7XxxZtm8vPXG5fyaRTMK4CckHYXk/6QV3mmNPA6g8wth7xfc6iay8EKrPx
mkUNqdA+vbEDETOMu8RiYhTkmYAeiqVQ6wf63wW84SX57IVXOJkU26UCVkjg1tDI
S/ERHSwiCawC/PUcK5NT96VX4xpIM8xIU7DmV9c3bnhK0+Az8OfZyeAy6QIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFJ4xUBjlYAANlHGNhe5OEyDDpeRXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkL2YxOWM5
ZS1jNTQxLTQzNjMtYjI1Yi1hODA2MTYzZWMyOTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvZjE5Yzll
LWM1NDEtNDM2My1iMjViLWE4MDYxNjNlYzI5NC8xL25qRlFHT1ZnQUEyVWNZMkY3
azRUSU1PbDVGYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCWNpUAwQCuUjIMA0EAgACMAcDBQMqBTvAMA0G
CSqGSIb3DQEBCwUAA4IBAQAQi2NFTj21sOPNbJ+3Jj4eoRHOEMkboo3EtMRhuS9J
VdgW3L6UOIpkRHz9Z0MyyAKOmAIyDU5dFd1gjDip7WIlaYgKhqsbg0KEfq3hbtJ6
wslXCCoQKSxzCTjElZoC5OQdIJZJpmy/ZFbzkZmEMc9wbPxtLn+9OrS9iDZ9eCic
3XicbMGmMqD46ZQa/hVvZnYonhE5ANgMoXLtWzhFRVNJBmwbvIe61yUwQJ2gyEGb
Wke/ccBPa8V87f+SirSklt1foOLBvLJt8i5N/ChyIgUVW6I3/8V5zXtmh2s8g4HU
1p1p7Nx5qYeQB6mq1NRz5CtT9QzqLp9bXK2rg4yxQz/n
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:47 2026 by rpki-client