Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
File: nmh1g4EMwAZO207-QFf1phpV5ws.cer (raw, json)
Hash identifier: H4gDCWoX19vbJsik6FwuA0FXmkMN5Z/Ej5qDP18GJkw=
Subject key identifier: 9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEE5C3C124BBC2A0778F1E1A3C87FE4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:19:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197550
IP: 46.173.192.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:5c:3c:12:4b:bc:2a:07:78:f1:e1:a3:c8:7f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5c:6d:a3:60:ff:15:15:1e:fa:96:17:fa:f1:
3b:0a:09:da:f1:c4:46:19:28:17:fd:ac:bf:bb:f9:
73:fa:b9:d2:01:a4:c1:b8:a7:af:1e:13:bc:9b:69:
05:1e:b7:4d:ea:51:f6:81:47:d1:a3:e2:48:9b:19:
8d:b1:0f:a6:a1:2e:7e:74:e4:7b:f6:ed:a7:1e:12:
cb:be:50:7f:4f:29:55:2e:70:52:75:42:2a:08:ee:
c4:03:04:a9:25:4e:15:29:24:f5:ec:13:ad:eb:48:
61:95:c2:76:ff:b8:71:e9:fc:36:47:ad:99:02:16:
01:2d:b1:e7:97:27:49:ed:a6:15:0b:99:da:9b:c2:
13:ec:5a:77:a6:bb:2b:a8:99:82:d3:a2:b1:dd:ef:
93:f2:a8:55:b2:4a:99:26:e8:4a:bd:d0:8c:dc:f0:
7e:7b:d7:4f:f3:ef:ed:a5:62:16:f3:30:ae:4d:52:
22:da:57:b3:6e:49:99:9c:26:2b:6b:67:17:b9:78:
1b:6a:e0:6c:2c:01:c4:45:8d:5e:ef:72:31:f7:54:
21:0e:7a:97:f5:81:cb:9b:d6:2c:8a:77:29:dd:01:
d3:a8:29:a1:c1:bf:67:10:76:eb:9e:58:f3:0e:06:
35:b2:a0:c2:cf:22:49:75:b8:53:e7:0f:d8:b1:fe:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.192.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197550
Signature Algorithm: sha256WithRSAEncryption
19:be:27:da:6d:97:19:29:59:94:5d:0b:51:c1:16:3e:70:c9:
e1:c3:8f:d9:de:eb:b7:cd:68:88:e9:42:b5:f2:48:33:aa:f6:
ad:8b:ed:a4:3a:10:d2:ee:31:83:73:2f:f9:a9:cb:e6:49:64:
7c:79:65:03:04:5c:57:00:6d:fc:98:d9:58:21:af:8f:63:18:
0b:69:a4:56:82:40:84:fa:8f:dd:3a:88:92:31:b6:33:71:4c:
8f:6d:5c:8e:db:70:df:9b:9a:17:e3:cd:b1:00:d1:f0:17:7e:
91:fc:85:f5:18:60:b4:bd:9e:c3:5e:95:d7:61:f8:81:9a:ed:
0e:85:7e:35:ff:1f:07:81:8d:1a:21:54:74:a6:3d:bf:ee:8f:
d9:92:2c:c7:ae:a7:a6:06:9d:69:26:88:83:e9:88:64:97:a3:
eb:d1:b8:81:bf:c9:63:ce:31:6d:a6:d8:fc:ee:0b:cd:c3:92:
47:ec:7c:b3:37:fc:da:d8:b2:f2:f2:cc:2c:59:1b:22:f7:6c:
14:af:60:39:bb:13:70:84:a1:29:da:30:8f:a2:7e:14:6b:ec:
e3:d7:64:ba:f0:d4:00:74:15:cb:12:69:2e:40:a0:36:77:8e:
a6:e8:59:63:d2:78:5e:45:e1:2b:c4:fe:ab:6d:70:9a:7a:91:
a4:c3:44:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:26:09 2026 by rpki-client