Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
File: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer (raw, json)
Hash identifier: t++zqql9yifnDwkhE9wiKXR2p2mLlWsLxvjOj3Or9rM=
Subject key identifier: FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D9BE66D34366B6CFC4E1557FFC20E70FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 Apr 2026 14:44:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198739
AS: 207152
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:e6:6d:34:36:6b:6c:fc:4e:15:57:ff:c2:0e:70:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 17 14:44:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:87:ff:c6:96:8c:7d:c2:97:15:16:cb:8f:
8b:b5:26:65:74:07:28:3d:ad:de:be:4e:2e:b1:94:
1f:80:af:70:6f:cd:2f:3f:7b:7f:1b:15:45:9c:aa:
22:1d:35:0a:18:ee:1d:d6:76:e3:63:34:b9:99:8d:
fe:b1:75:c3:39:00:d2:3e:23:64:5e:cb:0c:21:45:
74:51:58:27:0d:c6:d2:4a:f4:d0:b3:77:3f:c0:d5:
c2:36:69:d2:19:cc:46:03:c0:3e:ee:aa:fa:de:d7:
76:69:6a:a7:a5:96:fd:66:c5:2a:3f:cc:50:f1:5b:
21:bb:32:d4:c9:09:3e:79:29:9a:5a:83:86:4b:3f:
1c:27:eb:6c:b8:04:12:7c:4f:7b:46:9d:ae:c1:24:
67:12:a7:c6:ec:83:f4:c7:e6:e8:45:89:a7:23:c1:
be:93:90:f7:83:80:a1:43:d8:d8:a2:91:79:bd:a3:
fa:27:94:a1:53:6f:1f:22:98:b6:31:e4:6a:14:2d:
15:aa:66:a1:12:38:70:06:01:56:4c:9a:c0:3b:a9:
c9:52:f8:cd:1c:37:2f:bc:08:63:88:1e:3a:2f:6e:
4b:f3:66:bf:b4:a6:67:87:7f:d5:72:f8:b6:f6:c2:
03:75:1d:75:89:bf:8d:77:db:84:39:9f:4c:c6:5d:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198739
207152
Signature Algorithm: sha256WithRSAEncryption
1c:1e:65:5b:62:06:73:a4:8f:2e:11:9d:1f:3c:36:ad:40:f6:
6c:8c:dd:51:09:8b:58:8e:f0:c4:d7:38:ed:49:a2:13:9f:17:
0c:48:56:39:d2:ea:7e:b5:88:6c:b8:06:0f:88:f0:e0:4a:1a:
4f:92:63:da:98:4c:9a:b8:75:d4:e0:27:23:c1:4c:fd:69:19:
de:59:dd:cb:2a:a1:36:43:05:49:57:f1:e1:62:72:3a:39:df:
29:bf:ce:1d:30:6f:a8:05:e4:05:d4:d3:88:52:ab:d9:bb:f9:
9b:a6:a8:43:b3:77:eb:3b:7a:7f:64:c0:97:d3:07:f8:df:da:
2a:10:de:d8:39:1b:f9:14:ca:05:94:16:5e:4f:b4:2f:9c:54:
88:d3:87:4b:35:81:a1:dd:22:33:a8:b9:95:da:8f:69:e4:93:
14:27:18:a4:61:dc:95:46:db:93:8f:9e:76:02:d7:10:58:31:
ca:79:cf:01:42:f5:05:18:a2:fb:37:ce:b5:56:b8:32:bf:b1:
0f:7a:a9:ed:67:76:3d:0e:01:3f:6e:af:78:c0:b8:1f:8b:b2:
ca:0e:3d:fe:43:74:e1:c1:2e:df:5a:9d:24:51:91:a0:41:86:
ec:5d:e2:3e:de:05:33:85:d1:4d:f6:cd:7e:b6:65:89:58:86:
2c:48:6c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:57:13 2026 by rpki-client