Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
File: bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer (raw, json)
Hash identifier: KUsLfK2PmtrYLOYWludA7YxaKKCCBgVPZFUwq9nJp/g=
Subject key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A306E9DB15E177067303D60BB0E4EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44879
IP: 193.47.168.0 -- 193.47.183.255
IP: 194.124.0.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:06:e9:db:15:e1:77:06:73:03:d6:0b:b0:e4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:73:8f:9e:fb:cd:4a:ce:78:5c:b6:9c:d1:
b1:87:e3:a4:70:9a:df:d0:33:3a:f2:8e:20:2f:77:
cf:91:ae:fa:1b:74:12:41:d4:d1:53:19:03:1a:3e:
ee:56:b4:b4:97:09:cb:bb:cb:f7:d2:8f:e7:5a:98:
ed:55:64:d8:e2:c0:cc:6e:a1:9a:f4:7e:f8:0b:9b:
d7:e8:f8:ce:1a:c0:44:cf:13:c6:6b:e6:ac:2c:21:
b5:4e:7a:b2:d1:3e:04:4b:e6:48:61:7a:bd:5c:36:
d3:e8:4f:5a:35:cc:39:da:82:83:a7:ba:5a:a8:ff:
ee:ca:1a:30:77:d5:de:4b:bb:3f:31:84:28:77:86:
bc:fc:db:5c:60:46:6d:77:2f:c1:45:50:92:eb:f5:
e3:98:32:01:de:7d:6c:f0:1c:37:b4:a0:57:83:f0:
d8:32:b0:9d:d2:ad:ba:a3:49:b7:45:be:1b:44:21:
3e:52:62:e9:5b:f9:51:ee:95:21:f6:3f:8c:57:66:
10:e0:9e:c3:66:cd:e1:3b:c3:9f:be:57:e2:7f:f1:
2c:05:fa:8b:74:fd:a8:64:44:6f:3c:31:b1:83:95:
74:13:fa:2a:9a:91:fa:fa:b8:31:4e:f7:f7:12:4d:
67:6c:6d:a0:1b:40:03:32:5d:44:95:8c:d1:d7:d6:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.168.0-193.47.183.255
194.124.0.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44879
Signature Algorithm: sha256WithRSAEncryption
4e:ad:08:0d:c7:e0:4d:9a:8d:fd:c7:d9:ef:ef:a7:ca:e4:24:
6f:e9:dd:19:22:fc:46:25:5b:83:d8:fc:d7:6c:0e:e9:b2:09:
a4:23:a1:85:9f:d6:6b:ac:28:65:87:42:ee:80:1d:3e:cc:1e:
f4:46:1f:6c:29:9c:6e:97:78:d7:3e:7f:0e:d3:3f:6e:a9:16:
d3:02:42:e2:8b:a3:fb:d6:06:86:78:52:73:db:23:b3:55:a8:
28:8b:43:50:a7:4b:df:96:24:0b:84:21:04:76:86:b7:d7:db:
32:9a:13:16:36:95:bf:72:36:20:7a:b6:f1:58:46:d2:88:7a:
e6:99:eb:b3:83:39:35:15:a8:71:7a:ae:19:97:17:95:eb:96:
c9:9b:81:e5:db:a8:79:94:0f:bd:18:9d:30:25:3e:21:33:51:
d3:33:11:82:5e:7c:86:14:00:b8:8f:23:af:66:1c:90:c7:6f:
77:b9:27:f1:d6:05:0b:fc:e8:c9:7b:c1:88:a7:57:9c:c8:0c:
b4:cc:76:f8:66:7c:48:d8:0c:03:c0:fd:3b:2d:c3:98:29:d8:
38:d6:82:52:89:7f:33:fd:d5:80:4f:86:0e:45:f7:40:aa:ba:
9e:c0:74:b7:56:18:ac:88:5e:d4:8e:49:23:dc:e0:45:37:0c:
81:0e:84:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:09:50 2026 by rpki-client