Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
File: oikngd9NLEc3PD_fY_u8mSdL2ds.cer (raw, json)
Hash identifier: ZZveRr3HRqWm5KtvrWwvMQ0joINF0rK7/kx/t9Lgqzw=
Subject key identifier: A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C9E8850E613DAFD7B9DC17DFE1D7F8BB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 27 Feb 2026 09:57:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a0a:c7c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:88:50:e6:13:da:fd:7b:9d:c1:7d:fe:1d:7f:8b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 09:57:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:64:56:c2:36:c0:df:7b:ca:28:33:1b:70:97:
22:7a:bd:69:e1:83:d1:71:dd:ef:c2:55:9f:38:b3:
3d:65:eb:45:98:d9:62:5a:6b:32:c4:a7:f7:02:d8:
0c:28:45:1a:45:b6:25:9e:1c:ab:e1:d7:fb:b9:22:
e3:e0:42:74:c1:c9:3e:90:65:ab:3d:01:d0:02:ae:
e2:42:f7:ca:a1:3d:34:ab:62:67:ee:a8:b6:a3:24:
a0:3b:5d:3c:2f:53:7b:fa:b4:ab:e8:23:05:7f:97:
ab:92:af:20:c2:f5:93:e0:f3:69:66:d9:19:52:3b:
c9:bb:82:59:31:db:38:fe:e2:b2:8d:ac:fa:c2:e8:
f1:60:a9:c4:e5:85:de:99:5e:15:15:32:40:2f:96:
2f:cf:1a:0f:b7:dc:f6:15:bb:d3:fb:dd:07:79:0b:
12:13:ec:31:36:5d:1c:ff:b1:61:6b:1a:d3:9a:25:
bf:4c:cb:74:d0:df:a7:2c:04:75:08:8e:6e:9d:8e:
77:eb:42:fd:28:3f:45:fa:00:d2:ea:52:49:f6:eb:
84:ed:5f:9c:1f:7d:c2:3f:5b:cc:73:d0:c0:c5:86:
c7:a3:66:7f:64:d1:2c:0c:0f:67:2d:88:4a:f7:88:
4c:62:77:f2:71:69:f6:48:6d:72:6d:c0:54:b6:db:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:c7c0::/29
Signature Algorithm: sha256WithRSAEncryption
a5:38:b1:29:70:b7:f1:00:51:63:be:78:d3:12:7a:79:f3:16:
e6:a4:0d:47:33:c5:bd:6e:38:52:f6:1d:53:6e:e3:2d:a7:c4:
0b:0f:37:ee:85:9e:f6:c8:95:fc:a8:8b:9d:1c:cb:b2:d9:ed:
0a:c1:fc:53:88:22:af:5d:4c:0a:27:a3:37:02:62:19:49:45:
68:da:9a:7b:c7:a8:c5:86:b8:b9:f0:78:42:09:3c:81:7d:a9:
98:a7:f5:0b:8f:34:f4:7f:32:c5:83:95:9c:1d:2a:3b:a9:30:
0f:89:89:9c:9f:95:57:ac:9f:13:4b:f0:62:25:86:50:d7:6e:
50:0d:45:d3:44:7a:9d:81:76:b7:59:85:f7:03:39:cf:9b:67:
50:03:d3:89:0f:00:4e:b5:f7:ba:33:9e:b3:d1:15:df:23:4c:
3d:ce:b6:27:6e:22:25:fa:f8:dc:10:a8:f9:41:b7:93:b7:a6:
a6:0f:9f:6f:54:9f:9c:80:ae:8c:32:18:34:78:b7:0c:c4:87:
ae:ad:a5:86:e3:ce:9f:af:10:19:c6:6e:2c:71:21:f0:f5:6d:
20:68:b4:6a:98:e3:fe:75:cd:2f:b3:09:d5:35:9b:c4:9c:52:
90:36:e7:41:69:ed:3a:14:dd:70:f3:90:52:ff:49:61:34:3f:
7d:de:68:a7
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZyeiFDmE9r9e53Bff4df4uzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjI3MDk1NzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjI5Mjc4MWRmNGQyYzQ3MzczYzNmZGY2M2ZiYmM5OTI3NGJkOWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GRWwjbA33vKKDMbcJcier1p4YPR
cd3vwlWfOLM9ZetFmNliWmsyxKf3AtgMKEUaRbYlnhyr4df7uSLj4EJ0wck+kGWr
PQHQAq7iQvfKoT00q2Jn7qi2oySgO108L1N7+rSr6CMFf5erkq8gwvWT4PNpZtkZ
UjvJu4JZMds4/uKyjaz6wujxYKnE5YXemV4VFTJAL5YvzxoPt9z2FbvT+90HeQsS
E+wxNl0c/7FhaxrTmiW/TMt00N+nLAR1CI5unY5360L9KD9F+gDS6lJJ9uuE7V+c
H33CP1vMc9DAxYbHo2Z/ZNEsDA9nLYhK94hMYnfycWn2SG1ybcBUttsSNwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFKIpJ4HfTSxHNzw/32P7vJknS9nbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1Lzc2NjU3
Zi0wZDE1LTQyMTEtYTMyOC02OWVhODE0NTk1OGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNzY2NTdm
LTBkMTUtNDIxMS1hMzI4LTY5ZWE4MTQ1OTU4Yi8xL29pa25nZDlOTEVjM1BEX2ZZ
X3U4bVNkTDJkcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgrHwDANBgkqhkiG9w0BAQsFAAOCAQEApTix
KXC38QBRY7540xJ6efMW5qQNRzPFvW44UvYdU27jLafECw837oWe9siV/KiLnRzL
stntCsH8U4gir11MCiejNwJiGUlFaNqae8eoxYa4ufB4Qgk8gX2pmKf1C4809H8y
xYOVnB0qO6kwD4mJnJ+VV6yfE0vwYiWGUNduUA1F00R6nYF2t1mF9wM5z5tnUAPT
iQ8ATrX3ujOes9EV3yNMPc62J24iJfr43BCo+UG3k7empg+fb1SfnICujDIYNHi3
DMSHrq2lhuPOn68QGcZuLHEh8PVtIGi0apjj/nXNL7MJ1TWbxJxSkDbnQWntOhTd
cPOQUv9JYTQ/fd5opw==
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:10:55 2026 by rpki-client