Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
File: pNFmKbDakg__Ob-1rSmmjYR4BcY.cer (raw, json)
Hash identifier: 5LYXpx6aX+X+oPrKfddb0Hc3TO+S9wWHIkv6y0E4Ofw=
Subject key identifier: A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA792F5B8B968D6EA5F97D47581A3A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214946
AS: 215017
AS: 219310
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:79:2f:5b:8b:96:8d:6e:a5:f9:7d:47:58:1a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4d16629b0da920fff39bfb5ad29a68d847805c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:2f:f4:a2:45:24:79:1f:49:da:4b:35:c5:
2e:75:85:33:4b:09:71:3a:9e:32:6a:33:c0:df:35:
09:fd:be:33:c1:67:b7:d9:f4:18:32:fe:24:53:0e:
c8:87:dd:d9:86:ae:2b:b2:cc:12:b2:15:6d:b1:f8:
00:33:13:38:08:5f:63:ca:09:f6:ab:ed:6b:f7:44:
d2:83:fc:36:3b:a2:d7:6c:c7:17:8b:30:ed:98:f8:
15:4d:9e:8b:83:20:d3:45:9a:32:11:9b:d5:7d:71:
03:a2:a2:2c:fd:8e:ae:b7:df:e5:d6:ca:de:75:26:
1f:4d:0f:37:8d:d2:fb:6f:8b:71:7d:6a:8e:f5:0b:
39:a9:4d:b2:bb:e7:91:a6:22:04:1c:94:e7:2f:c6:
f2:f8:56:fe:10:1a:c4:8b:b7:e5:a8:d1:ab:1f:71:
d7:14:d6:26:65:fe:09:0f:00:ff:a9:64:f4:29:d1:
9a:2d:30:41:db:b2:8a:30:8a:14:98:93:74:dc:91:
9e:6c:fb:63:78:7a:a7:2e:a1:e4:66:e1:6b:a3:9e:
7f:60:a8:20:32:57:1a:ce:3b:6c:96:7d:e2:e4:02:
3e:70:cb:74:37:0a:fd:56:aa:be:34:be:80:c4:ff:
d8:a1:31:a6:d2:cb:f2:63:13:37:4c:2c:0c:e7:75:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214946
215017
219310
Signature Algorithm: sha256WithRSAEncryption
18:fe:a9:34:a1:5b:f3:40:80:59:68:cf:b1:72:67:2e:b9:67:
78:72:5c:a4:35:3c:cb:5a:e4:a8:3f:d0:3c:bf:91:8b:6f:d4:
56:e6:46:f9:ea:ed:5a:68:cf:5b:f1:a9:40:db:45:7e:ad:8e:
4d:e9:90:75:3f:d9:99:61:88:a5:83:d7:2f:f4:61:39:f7:53:
50:2f:3a:c6:cc:6d:d2:6d:da:19:3c:0f:d6:a6:ea:79:6e:5b:
0f:eb:d3:a6:75:02:ae:98:2d:27:b7:0f:57:49:c2:d5:53:94:
31:bb:2a:4a:97:2a:b8:67:b3:7c:41:c3:7b:43:85:d2:f0:37:
6c:cf:f9:a6:ab:4f:66:d5:82:4d:c3:4f:f5:e3:ff:92:cc:8b:
bc:bd:ea:3e:29:86:02:46:16:c6:48:9e:54:05:19:ca:34:05:
74:7d:9d:43:4f:bc:a8:5d:a0:48:2f:9c:22:36:fc:f8:1c:b4:
ba:56:7b:c7:14:53:06:7d:76:77:79:b4:c6:dc:d4:4d:31:89:
3a:75:15:a5:43:de:67:1f:ad:52:b1:45:c8:2f:b8:d0:e1:16:
f0:9e:dc:63:48:04:7e:ec:4e:24:0d:1b:48:e4:b6:26:f5:f1:
6d:d7:55:ce:61:e1:76:36:f3:73:6e:ed:2d:bd:1e:79:8d:d9:
b7:50:d4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:38 2026 by rpki-client