Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer
File: NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer (raw, json)
Hash identifier: Ue15FsNb2fQYalqpraBZVEuscy0zlslqJ+jx8+SQoZo=
Subject key identifier: 36:F6:EE:6D:32:79:0E:49:89:50:D6:38:77:B0:32:12:32:A7:F8:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D9554B00CA5C8067345F56D792F309886
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 Apr 2026 08:07:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200032
IP: 2a13:49c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:54:b0:0c:a5:c8:06:73:45:f5:6d:79:2f:30:98:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 16 08:07:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36f6ee6d32790e498950d63877b0321232a7f833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:6a:3f:6d:46:62:34:19:40:fe:7c:2b:b9:
72:97:24:e2:ea:7b:74:ab:0e:d2:86:2c:c0:a9:2e:
b8:65:e8:04:d0:b9:17:39:c1:82:68:ec:a8:f9:b9:
68:d9:a2:43:ff:a7:99:1b:41:2c:2e:51:d5:5b:18:
e2:4d:c7:5c:0d:b0:aa:69:39:c9:82:1b:a3:9c:90:
2b:fc:97:4a:40:ca:a7:7c:11:ff:5c:6b:e0:62:76:
da:d8:57:01:be:2a:c6:57:f7:c6:8e:db:fa:de:55:
c2:c0:63:cd:6d:df:83:44:28:dc:54:cc:bc:61:7d:
3e:a7:29:7e:c5:30:4d:c9:65:ac:fb:cb:3d:bb:03:
25:39:f0:48:a5:db:11:c5:38:bb:53:07:d2:6c:8e:
6c:cf:7d:bb:a7:3a:2d:59:e2:fa:6f:3f:5e:26:88:
9e:e3:a7:b5:41:a0:cd:75:67:8e:97:75:55:c7:05:
98:57:2d:1a:ba:eb:73:be:57:64:7d:7f:0e:a8:18:
46:ce:d1:e7:8a:8f:99:a4:e7:c2:47:c2:ad:95:73:
bf:b1:69:83:95:d5:49:9e:c1:8c:d3:b4:62:80:02:
63:da:d5:5b:42:9a:86:90:2e:ec:dd:a1:5a:13:43:
ea:90:6f:06:9a:f9:7d:92:bb:5a:0e:aa:a5:27:2f:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F6:EE:6D:32:79:0E:49:89:50:D6:38:77:B0:32:12:32:A7:F8:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:49c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200032
Signature Algorithm: sha256WithRSAEncryption
89:8e:96:c2:0a:a8:97:10:72:3d:fc:1b:c5:64:ee:ca:43:a5:
86:c3:26:88:75:da:83:70:b7:f7:5f:d8:47:3a:8c:32:a7:dc:
2d:6e:6b:34:2c:d8:a5:81:32:74:af:df:d2:e8:80:b5:54:5c:
3d:3a:72:4a:e4:1c:1c:a4:f3:15:e4:fc:f0:42:cd:60:e8:46:
46:43:12:f4:0d:82:7f:6d:49:3d:fa:6a:ed:11:e2:4b:bb:28:
5e:d0:bb:21:68:b5:21:17:67:81:10:4e:ed:d3:8c:b0:5e:fd:
56:11:4e:de:ab:e0:65:ac:86:de:73:d6:ed:36:7c:29:ac:f6:
8c:d1:c4:48:c5:39:58:ba:41:1e:cd:ef:f5:71:16:4d:70:fa:
a7:9f:ba:55:e5:ba:63:76:db:c3:52:f9:bc:45:26:29:fe:9b:
3f:00:2b:68:94:ac:09:5e:37:fb:71:aa:af:a8:7e:cb:31:45:
d1:72:d4:a0:07:ca:5b:2d:b2:da:b5:a0:bc:9a:43:15:0d:38:
c9:1c:d9:c5:0e:cf:14:fb:2b:88:e1:ee:86:99:ed:5b:a3:d5:
2f:b7:a7:f0:3d:bc:89:86:0e:fe:ae:e1:9a:27:29:03:7c:fb:
38:b9:72:6a:36:61:3d:b7:0d:30:1a:79:3d:8f:ee:1d:01:7c:
74:ec:a2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:55 2026 by rpki-client