Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
File: NU4AcK29MqLk-NniLbYOXexmRYU.cer (raw, json)
Hash identifier: EEsaZ2fTyT5STFf+nqoVmo5UvJNXQTBmzCS0jCkD+bc=
Subject key identifier: 35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C8A79B7150C02FDAE6773135799AEDE86
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
caRepository: rsync://rrdp.as214749.net/repo/as214749-paw/4/
Notify URL: https://rrdp.as214749.net/rrdp/notification.xml
Certificate not before: Mon 23 Feb 2026 12:29:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214749
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:79:b7:15:0c:02:fd:ae:67:73:13:57:99:ae:de:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 23 12:29:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:a0:34:19:a4:81:94:cc:41:0d:7a:83:50:
3c:6d:c1:f9:41:dd:e9:55:c2:a2:40:1b:d7:7b:b4:
66:16:ae:7d:de:a7:62:d7:c6:a3:38:f2:72:d2:28:
f8:4c:8b:32:8e:04:88:cf:cd:c2:0d:08:92:52:36:
ad:c0:97:ec:89:c4:74:14:55:61:3e:92:d0:ab:58:
e0:b5:cc:55:7d:9c:42:23:b7:f9:fc:5a:3d:bd:6b:
19:d3:46:31:91:1c:76:e0:44:ff:43:0d:f5:48:ff:
4d:cb:38:6e:24:fe:46:e7:ec:e3:95:21:25:c8:bf:
dd:12:22:87:01:a8:db:0f:c3:d4:2f:e1:1f:80:65:
bb:bc:e0:73:08:31:57:d7:34:2b:52:eb:ab:b0:7c:
3a:d5:16:ef:35:45:68:b4:9e:40:3a:b0:1b:21:ee:
88:4a:17:05:11:d2:1b:77:84:08:27:2d:0f:46:6e:
1c:db:18:41:ee:4b:d2:2d:d9:ef:7a:39:e6:34:63:
09:02:36:e5:91:4d:73:ba:cc:d2:e7:e0:9c:2e:92:
8e:71:35:29:88:78:60:e3:d2:72:50:93:6f:62:d2:
32:ca:72:87:64:55:7b:00:74:f0:6f:0a:ba:58:bc:
a5:da:b1:64:a5:f6:08:f1:19:03:a8:98:5b:78:fd:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/
RPKI Manifest - URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
RPKI Notify - URI:https://rrdp.as214749.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214749
Signature Algorithm: sha256WithRSAEncryption
15:f5:82:65:30:eb:29:52:05:c0:b7:89:9d:50:52:e3:c1:d4:
f7:65:c2:24:d0:2c:1b:ee:5b:27:88:1a:cb:37:3a:cd:f2:44:
f9:21:68:db:46:2d:66:d1:42:8f:66:bd:4e:b6:71:18:91:ca:
68:11:f4:86:3a:d3:c3:fd:49:71:d6:c7:c6:26:ba:55:ef:b3:
e2:3b:0e:02:50:cb:81:f9:c7:09:55:2e:e4:f6:a3:bb:56:8b:
4a:6a:bd:89:dc:7d:10:46:28:aa:39:9e:f5:a1:e7:3d:d8:90:
98:f5:81:f9:a5:23:bb:44:38:e5:a1:31:3b:47:95:b4:08:b5:
a5:f2:26:e2:50:f5:7d:d0:76:b8:19:6b:29:a7:96:ef:84:4b:
03:8e:ca:21:c1:ee:83:44:f3:10:82:0d:1e:e5:4e:a0:c8:1f:
ed:98:86:84:a1:44:90:e4:20:dd:9b:68:74:4a:75:c1:09:7f:
f8:a9:f1:b1:e9:17:15:45:6c:c1:1c:be:e4:50:fb:55:06:de:
ee:e1:6d:6b:88:40:06:f4:61:71:93:3c:9b:15:96:bf:17:ba:
9a:d0:a4:3b:7b:32:2a:cc:98:99:e0:21:14:24:aa:96:64:7d:
bd:56:cc:95:ea:88:95:ec:09:82:4e:35:7a:23:32:44:c2:43:
3d:1e:b1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:41:00 2026 by rpki-client