Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nypoaxwl1Ex9vU1KMf4Mev0CoS4.cer
File: nypoaxwl1Ex9vU1KMf4Mev0CoS4.cer (raw, json)
Hash identifier: gWE+iyfvDXyuPfrD9f8DuOOJOyvEdj7ZOe2HQSID0Kc=
Subject key identifier: 9F:2A:68:6B:1C:25:D4:4C:7D:BD:4D:4A:31:FE:0C:7A:FD:02:A1:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D0C5AFE8EFB23A737E831EAC4567E5B05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/nypoaxwl1Ex9vU1KMf4Mev0CoS4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 20 Mar 2026 17:46:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.165.144.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:5a:fe:8e:fb:23:a7:37:e8:31:ea:c4:56:7e:5b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 20 17:46:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f2a686b1c25d44c7dbd4d4a31fe0c7afd02a12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f5:7c:41:1b:92:9b:b1:18:a6:f7:ae:cf:8e:
b8:a6:b6:ae:aa:14:64:6f:bc:7e:e8:43:54:08:5d:
2f:6b:47:18:33:f0:1d:91:6f:bb:63:d3:d3:e2:66:
93:88:8a:13:59:b0:33:b1:9c:e2:00:3d:77:66:05:
e7:e8:88:95:70:ee:1e:82:50:1d:2d:f3:ae:6e:cf:
e4:e6:e9:33:c0:7e:2c:6f:d5:4f:99:78:d1:5a:58:
82:c1:5b:d1:48:9e:74:e0:32:23:b8:0b:93:0c:54:
07:74:1b:24:e1:0e:0f:8b:65:34:9f:e2:93:a0:02:
68:8e:aa:ff:31:31:45:4f:5b:88:e9:13:f5:43:17:
97:14:e6:8a:62:79:d9:df:fc:a2:65:3d:91:be:42:
44:4d:c9:2e:ea:06:f6:87:93:4c:20:9e:aa:32:38:
d6:ca:33:1c:6e:e0:60:7e:7a:de:dc:85:d2:a8:9e:
13:f8:f2:fd:99:42:db:45:eb:4b:fa:c8:55:a0:84:
11:5a:cb:89:83:dd:08:0e:bf:b1:12:ec:88:89:97:
fc:a7:2d:2c:f8:ed:59:ee:58:08:56:d3:5b:1a:7c:
95:ff:ec:20:1e:59:40:bb:96:ca:a8:1b:a3:fb:75:
e9:df:f7:df:a7:27:ba:26:51:1b:08:74:e3:0c:c9:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2A:68:6B:1C:25:D4:4C:7D:BD:4D:4A:31:FE:0C:7A:FD:02:A1:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/nypoaxwl1Ex9vU1KMf4Mev0CoS4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.144.0/22
Signature Algorithm: sha256WithRSAEncryption
98:59:2e:20:08:92:3a:e1:16:30:96:d5:02:9e:3b:0b:07:56:
48:76:84:3e:11:63:88:8e:11:fd:33:d0:d5:11:4d:1c:bc:37:
f4:46:eb:9c:71:b2:ce:0c:50:20:e6:17:1a:33:cc:2a:97:25:
95:05:61:b5:6f:80:5c:3c:64:3d:03:34:cc:b0:65:48:b5:3a:
03:b2:77:d7:9b:9e:16:07:ec:93:48:49:a2:9a:2a:6e:29:bc:
15:ad:5a:9e:21:72:63:1e:de:8c:2c:fe:95:7f:f2:ac:30:e8:
de:6c:e1:1c:0a:de:d9:98:34:d3:b4:e6:32:89:17:68:c3:de:
a2:4b:a0:fe:fe:22:de:f9:0b:d7:8b:eb:56:b0:59:32:cc:c5:
ba:dd:15:e5:5c:89:21:2d:7e:7a:3f:ba:f5:f9:ae:4a:dd:26:
72:a5:67:f9:57:79:6a:7c:b5:ee:e2:1e:89:16:03:ee:c8:3f:
87:09:57:7b:7c:11:81:bb:83:22:18:99:85:83:84:62:f0:28:
e9:8b:60:64:35:0f:8a:c9:86:47:77:74:d8:cd:20:23:d9:c6:
77:ac:1b:66:a3:b9:13:43:a5:5b:0e:5a:b8:94:bb:ed:26:19:
64:cd:ba:1d:2c:9e:0b:25:d6:e1:45:e1:b8:07:87:89:40:21:
bf:34:29:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:23:04 2026 by rpki-client