Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/NJEkbsPhvlIZ4V8QebsSFIYJB1w.cer
File: NJEkbsPhvlIZ4V8QebsSFIYJB1w.cer (raw, json)
Hash identifier: JoabSRlQ0r4okarMaeYccLfsoHZew3hiUmwq7Er8wNw=
Subject key identifier: 34:91:24:6E:C3:E1:BE:52:19:E1:5F:10:79:BB:12:14:86:09:07:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A08DF8A4392EA3FD4F5E6EB1B7E05AE9D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 11 Sep 2026 00:57:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219157
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:f8:a4:39:2e:a3:fd:4f:5e:6e:b1:b7:e0:5a:e9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 11 00:57:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3491246ec3e1be5219e15f1079bb12148609075c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:38:ae:88:c2:4e:9f:d1:e9:41:89:18:23:
6d:d7:08:f9:0e:82:83:40:0f:df:56:55:60:2c:86:
7a:49:76:4d:c1:f9:be:55:af:a7:62:ee:b0:1f:b2:
30:27:f0:31:3b:25:fa:ef:05:76:67:92:7f:55:17:
87:fa:3a:97:51:cd:0e:20:75:c2:49:36:d6:0f:9f:
3b:cf:12:41:db:99:ba:9d:4d:b6:bc:0d:67:90:c3:
17:17:e8:90:1e:04:e9:ec:c1:b0:cf:6c:a2:b5:fd:
48:d2:f2:a0:74:93:b6:75:43:94:2f:02:27:02:87:
6d:9c:07:2e:97:ef:74:c8:30:17:11:a0:c0:27:1b:
22:41:53:48:79:62:35:b7:39:14:31:18:aa:0a:7a:
47:48:33:3b:cf:e7:d1:82:25:c7:88:f3:8d:d7:a2:
c6:0a:b9:93:92:14:5f:42:e7:e8:9f:2b:5f:69:a8:
2f:7a:7c:62:33:3b:a9:25:ca:e5:e7:a0:c0:75:dc:
01:2b:cb:c3:92:6d:9d:ec:79:c2:e2:80:c7:5c:21:
77:e2:5e:2f:2d:b4:8a:eb:81:0e:61:7a:5c:13:d6:
f5:25:4c:e9:6e:8e:87:76:9f:13:b0:a5:5f:3a:46:
60:70:64:b5:e9:52:f9:2d:4e:a9:ab:ad:1e:0c:3d:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:91:24:6E:C3:E1:BE:52:19:E1:5F:10:79:BB:12:14:86:09:07:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219157
Signature Algorithm: sha256WithRSAEncryption
ab:ff:ee:88:28:49:6a:b0:75:4e:fa:a5:57:b9:77:e8:a1:4d:
78:13:15:54:41:48:ba:9a:1d:c6:25:bf:fc:a9:38:39:1d:e8:
69:43:e6:c2:28:eb:bd:6b:6a:2d:53:43:17:62:3d:50:29:36:
f8:fb:c7:8c:f3:38:18:65:39:1a:92:6a:a8:ff:07:fc:8a:bd:
83:91:1d:60:5d:c9:37:67:51:4b:71:c5:45:b9:0c:df:91:af:
38:62:d1:fe:9c:c4:80:d4:ab:ec:5a:cc:fa:75:86:47:d2:0a:
e9:03:f5:90:c0:32:42:02:89:5f:a8:86:a6:bb:fd:ed:de:46:
1c:30:5f:a6:b2:77:6c:b3:ba:00:f5:ea:32:84:81:86:77:a5:
4b:a6:f5:a1:2e:af:58:af:58:9b:80:2d:2e:0f:4f:4c:94:df:
cd:e8:b2:f6:21:0d:d0:3a:72:36:fa:65:b1:c9:b1:fc:22:a2:
46:ce:84:2c:e9:86:8a:bb:f3:50:0f:82:ab:d4:e6:6b:ab:9d:
78:7f:53:a7:21:10:e6:b0:84:d7:e1:2f:90:26:c3:db:0a:ce:
ab:01:82:e5:6b:57:98:84:29:e7:55:3e:6d:2f:1e:d3:5f:b2:
61:f3:2e:45:f8:a0:55:9a:08:2d:0a:0d:4b:23:0d:1d:93:7d:
67:4b:e5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:54:05 2026 by rpki-client