Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
File: nEbB13YgBThO2FJs-hx0llZPUNM.cer (raw, json)
Hash identifier: Pbj+Gz7gogljBsnHWENkYO+cYzHjwpAaxVAd3Tr0lb8=
Subject key identifier: 9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7758BB455E99FB72A94BA2DA15C15E4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:17:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197390
IP: 176.28.77.0 -- 176.28.78.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:bb:45:5e:99:fb:72:a9:4b:a2:da:15:c1:5e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:c8:58:04:86:1a:21:8d:4b:1d:d4:f5:7e:
b4:92:a1:a3:2a:67:7e:75:94:8b:f9:3c:a8:30:9d:
26:74:47:84:a5:11:21:1d:f3:f8:82:7e:34:b3:2f:
bb:41:8a:44:ca:62:a9:ee:db:07:1c:45:c7:70:1d:
d0:17:8c:d0:e0:91:11:5d:bd:0a:3f:98:f3:00:d3:
7d:ab:38:8c:e9:2b:df:47:cc:af:b1:af:6d:eb:e6:
a1:86:3c:9b:d8:41:95:df:03:70:1f:b0:b3:fa:80:
91:ab:23:36:b5:ce:6a:a9:cc:f7:5e:2d:e8:30:50:
50:39:67:a1:23:e1:c9:25:87:f5:90:00:5c:0f:cf:
40:33:13:7c:ac:a6:68:d8:e6:6a:94:ac:44:83:9c:
27:a8:82:f2:32:9a:41:3c:9c:5c:a2:e5:1f:ea:9f:
c7:3e:c9:4b:3d:54:18:81:b0:76:c3:2f:8a:1c:ef:
48:ea:8d:9a:84:b3:ae:63:4e:b5:cb:34:cc:ea:f8:
35:92:93:40:04:b0:0f:df:0e:8b:60:71:0e:e3:51:
97:b0:a5:22:b8:ea:8c:d9:11:1c:bb:47:fd:2d:7f:
0e:6d:86:de:07:a8:e7:f6:04:d3:60:58:58:43:a8:
5e:d9:fd:97:fb:9a:ff:ce:f5:a5:68:de:ee:05:ed:
62:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.28.77.0-176.28.78.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197390
Signature Algorithm: sha256WithRSAEncryption
5c:1e:b7:cc:b9:af:77:24:a2:79:c2:fa:ef:74:9d:7a:6a:a8:
60:3e:e5:60:ea:5f:34:7b:e1:31:9f:1d:89:1e:10:1b:f3:aa:
63:58:07:df:6e:71:de:9f:d6:4c:f3:f8:55:91:61:29:f3:3b:
89:1d:34:2a:ff:04:ae:c1:37:be:ca:29:87:8d:b4:8e:7e:da:
22:d1:20:4b:c8:a9:1a:ad:e7:39:f0:46:99:3c:ef:14:16:62:
56:96:b5:f1:a7:9e:a0:a7:f5:e1:57:2a:ae:0f:21:46:c7:c4:
c3:94:af:74:ef:f2:44:94:96:07:c7:97:17:61:6e:54:f4:9c:
bc:4e:fa:e9:b3:b5:a8:f9:17:18:2c:b5:ea:fd:b5:99:81:43:
91:3b:49:12:7c:7a:2f:d8:c0:c5:86:82:d4:68:ab:f0:7e:8d:
72:52:67:3e:e3:d8:31:47:ea:1c:1b:d3:8a:80:52:2d:32:f5:
da:1e:58:4f:b4:c2:dc:bf:a0:43:49:75:75:b1:b3:8a:f3:5c:
d2:e7:fa:c4:01:5e:33:1b:89:4d:ff:1f:00:0b:38:4f:2c:f2:
42:c3:86:6c:43:f8:26:f7:4b:e2:26:71:f4:f3:2f:e9:0c:2e:
a7:03:8b:73:04:76:46:26:1d:e7:5f:f9:1f:ec:da:70:92:97:
f8:7b:5a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:59:48 2026 by rpki-client