Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nsQ-CkGrttFUutw3FiO00U2RhnU.cer
File: nsQ-CkGrttFUutw3FiO00U2RhnU.cer (raw, json)
Hash identifier: YY5m1qPQOGz3POBSjsz+dKu8VsN9hkw0NQc/osmL8hI=
Subject key identifier: 9E:C4:3E:0A:41:AB:B6:D1:54:BA:DC:37:16:23:B4:D1:4D:91:86:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CD7FD303A45A321D49CD17AFCAEA718F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/b8bf28-b410-4f33-a2e8-c29497291171/1/nsQ-CkGrttFUutw3FiO00U2RhnU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/b8bf28-b410-4f33-a2e8-c29497291171/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Mar 2026 13:43:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 15450
IP: 91.240.173.0/24
IP: 109.234.64.0/21
IP: 194.69.248.0/22
IP: 195.140.156.0/22
IP: 2a01:7d00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:fd:30:3a:45:a3:21:d4:9c:d1:7a:fc:ae:a7:18:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 10 13:43:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ec43e0a41abb6d154badc371623b4d14d918675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:0f:b2:13:35:e4:d4:22:9e:5f:18:1e:6b:
d0:60:d5:66:32:62:7d:6f:56:2a:76:c2:1a:03:2d:
95:06:57:c9:6e:8e:4b:b6:22:e1:a4:0e:27:0b:ce:
86:9d:b8:35:55:10:f1:c2:48:53:df:f3:eb:0f:fa:
1a:14:f7:92:8f:71:ad:3e:4c:66:68:d1:78:9c:7d:
ac:cb:a8:03:84:d2:75:04:75:f1:97:34:4a:c7:eb:
0c:5e:93:36:66:b0:4b:d6:7e:9a:aa:a3:6e:2f:62:
66:0b:28:40:6c:ab:c8:9c:cb:51:1a:d6:d2:c0:97:
ee:a5:9a:2d:75:f9:2d:d1:8a:b9:02:24:a5:d2:46:
3b:3a:30:54:53:a2:f9:d3:49:81:a1:06:5a:52:68:
ec:9f:bb:6c:56:8b:cc:39:e8:2d:e2:0e:be:27:0d:
95:81:6e:a4:95:84:94:9e:0a:a4:ca:67:d1:72:d7:
ea:e3:fe:f9:fe:ce:48:e3:99:1a:0c:53:50:20:2b:
f2:b8:3a:f4:be:3b:1c:8f:98:b7:79:b8:5b:a4:c8:
8f:d4:c7:95:29:73:5f:e7:36:6c:37:46:35:a2:30:
8b:8b:81:1f:53:ba:c1:3c:4a:81:99:c4:35:97:0d:
91:cf:0d:7e:27:88:92:5e:6f:88:a2:a5:3e:6e:d4:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C4:3E:0A:41:AB:B6:D1:54:BA:DC:37:16:23:B4:D1:4D:91:86:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b8bf28-b410-4f33-a2e8-c29497291171/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b8bf28-b410-4f33-a2e8-c29497291171/1/nsQ-CkGrttFUutw3FiO00U2RhnU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.173.0/24
109.234.64.0/21
194.69.248.0/22
195.140.156.0/22
IPv6:
2a01:7d00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15450
Signature Algorithm: sha256WithRSAEncryption
3b:d5:eb:fa:0a:26:7f:32:ac:0c:6d:1c:55:05:16:79:82:0f:
80:ee:f4:70:41:e0:34:06:29:45:90:10:f7:c5:2f:9d:13:50:
be:37:85:1f:57:c9:82:3e:ed:80:3a:64:02:f6:71:88:80:de:
e7:63:0a:fe:fa:de:a4:2b:be:a8:f9:87:0a:9f:d7:20:9d:63:
15:00:9f:9b:4b:0c:88:8b:82:cb:8a:7c:a1:80:b1:2c:9b:d5:
0d:02:1b:df:c1:e2:70:97:8a:b6:e0:0c:60:4c:ce:f5:ec:e4:
d5:a8:36:b5:34:09:ac:d0:fb:b4:36:0e:c7:c2:83:68:72:32:
b4:38:63:0c:68:c2:53:f8:60:7e:5e:90:3c:5b:c0:52:23:1b:
4e:89:77:ae:d4:a2:d6:bd:7f:91:02:00:99:a2:fe:36:83:82:
35:61:af:20:fa:ba:97:0b:a5:48:1a:79:9f:c8:ff:7b:d8:5c:
01:bb:cf:c6:ca:8d:92:a0:05:4f:71:35:d3:8e:54:ae:04:b1:
8a:f9:9e:84:73:5b:4b:70:22:24:d9:d3:df:13:95:cf:1f:2d:
ff:0e:47:cb:16:08:f5:57:25:8a:0c:0c:ea:d2:91:3c:84:a0:
b0:63:5b:1e:27:15:d3:85:04:65:06:6d:f1:0f:6e:fb:e5:f9:
bc:7c:73:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:19 2026 by rpki-client