Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
File: nyHqqnvQ7mfKYwLj16quZNcpQC0.cer (raw, json)
Hash identifier: vtl7TnBTdJe9oM1xh2XCWJr+fjrWFFiQyopYwQyhcjw=
Subject key identifier: 9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7FF2457FE1D60125DC37ED576F94BD28
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 18:22:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 62.124.0.0 -- 62.126.255.255
IP: 62.188.0.0/16
IP: 213.116.0.0/15
IP: 2a02:2a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:45:7f:e1:d6:01:25:dc:37:ed:57:6f:94:bd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 18:22:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:cf:a4:6a:19:9d:77:21:20:82:6a:bf:25:
a4:88:fb:0c:32:91:15:96:1b:74:9a:93:63:bc:c3:
ac:c4:39:ed:d2:8b:3e:3b:6d:63:76:87:26:f5:15:
e1:cf:a1:99:05:89:9c:e1:d9:4d:75:02:f5:60:6b:
f4:d3:6c:86:29:bd:9f:2f:87:a9:6a:b1:a3:11:65:
b6:c1:0f:03:12:ed:7b:ef:9d:e9:e9:07:b2:a8:9f:
3c:b4:17:83:47:a8:d2:c8:a2:e7:b4:d5:ff:c1:3a:
e6:d6:f1:80:8f:fb:9d:56:67:04:7a:f5:98:c9:06:
46:3f:8d:8c:bf:30:ff:1e:00:9f:36:b6:7d:c1:ac:
cb:40:61:ef:b4:fe:bd:d4:df:b3:ca:63:d8:f8:ea:
a9:c5:7d:f6:e1:3f:c2:fd:f4:60:33:a4:02:19:30:
ce:fe:df:f8:ed:ba:0b:a0:3b:ce:af:bb:ad:04:fc:
4b:20:a9:d4:71:ea:e2:1a:6f:76:c6:2b:93:e1:90:
d4:6d:76:23:23:81:1d:01:34:b0:5b:04:ad:8c:e0:
f6:30:98:d6:4f:a2:59:4f:89:fd:94:a7:83:32:f0:
55:f4:e6:c1:41:b7:c6:7a:e6:90:84:59:65:3b:d1:
a6:ea:a1:23:db:9c:73:e3:96:26:c6:d0:e7:fd:72:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.124.0.0-62.126.255.255
62.188.0.0/16
213.116.0.0/15
IPv6:
2a02:2a80::/29
Signature Algorithm: sha256WithRSAEncryption
2a:c0:34:1e:98:8c:36:72:8d:8a:f0:c1:3f:59:dd:fd:bf:c5:
23:15:17:9c:37:e9:ef:73:e8:73:1b:33:55:eb:48:5c:2a:05:
30:3e:31:24:95:1a:b1:dc:a3:ce:2e:3f:53:e3:98:56:c0:01:
81:03:86:6f:7b:36:71:1b:d6:ba:b3:c7:b7:68:89:0b:fc:2c:
72:3e:c0:08:83:eb:df:97:2b:20:4e:67:2b:8f:fc:df:56:54:
a0:3f:e6:e9:09:ca:5d:29:75:42:ab:75:77:d4:11:0f:ca:53:
5b:da:d2:a7:ef:db:a7:e0:f1:b9:88:22:26:94:b9:69:c8:19:
67:0e:66:e9:3b:d5:d1:d3:fc:89:e0:e0:d3:5b:80:69:8e:44:
8d:d4:11:91:18:38:7d:ad:7b:7a:47:fc:f1:cb:c3:91:dd:af:
66:ce:43:d4:36:2d:52:f5:46:2b:2b:6e:e7:06:9e:2b:95:54:
ad:3e:ac:fd:78:e6:19:c5:28:f9:29:a8:ac:e7:e7:1b:58:37:
d4:eb:e9:4a:d0:9e:cc:68:9b:5f:23:60:00:29:92:6b:9a:9b:
9b:c8:19:a0:f4:c3:8c:41:e4:e7:9e:7c:de:c5:b6:fc:65:f8:
1e:1b:71:f0:7c:27:41:36:17:85:3b:d8:81:82:cc:2b:92:2a:
99:17:09:17
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZt/8kV/4dYBJdw37VdvlL0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTgyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjIxZWFhYTdiZDBlZTY3Y2E2MzAyZTNkN2FhYWU2NGQ3Mjk0MDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNnPpGoZnXchIIJqvyWkiPsMMpEV
lht0mpNjvMOsxDnt0os+O21jdocm9RXhz6GZBYmc4dlNdQL1YGv002yGKb2fL4ep
arGjEWW2wQ8DEu17753p6QeyqJ88tBeDR6jSyKLntNX/wTrm1vGAj/udVmcEevWY
yQZGP42MvzD/HgCfNrZ9wazLQGHvtP691N+zymPY+OqpxX324T/C/fRgM6QCGTDO
/t/47boLoDvOr7utBPxLIKnUceriGm92xiuT4ZDUbXYjI4EdATSwWwStjOD2MJjW
T6JZT4n9lKeDMvBV9ObBQbfGeuaQhFllO9Gm6qEj25xz45YmxtDn/XLeJwIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFJ8h6qp70O5nymMC49eqrmTXKUAtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4Lzc2ZjQ2
Mi1hZDgxLTRmMDItODk4Yi1hOTZmNjFjMGMxZGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvNzZmNDYy
LWFkODEtNGYwMi04OThiLWE5NmY2MWMwYzFkYS8xL255SHFxbnZRN21mS1l3TGox
NnF1Wk5jcFFDMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD4GCCsGAQUF
BwEHAQH/BC8wLTAcBAIAATAWMAoDAwI+fAMDAD5+AwMAPrwDAwHVdDANBAIAAjAH
AwUDKgIqgDANBgkqhkiG9w0BAQsFAAOCAQEAKsA0HpiMNnKNivDBP1nd/b/FIxUX
nDfp73PocxszVetIXCoFMD4xJJUasdyjzi4/U+OYVsABgQOGb3s2cRvWurPHt2iJ
C/wscj7ACIPr35crIE5nK4/831ZUoD/m6QnKXSl1Qqt1d9QRD8pTW9rSp+/bp+Dx
uYgiJpS5acgZZw5m6TvV0dP8ieDg01uAaY5EjdQRkRg4fa17ekf88cvDkd2vZs5D
1DYtUvVGKytu5waeK5VUrT6s/XjmGcUo+SmorOfnG1g31OvpStCezGibXyNgACmS
a5qbm8gZoPTDjEHk55583sW2/GX4Hhtx8HwnQTYXhTvYgYLMK5IqmRcJFw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:08:55 2026 by rpki-client