Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
File: sNcTFlrGKE-0HV38gmV3_B2gtzA.cer (raw, json)
Hash identifier: oPkBr1GU8aPIzq+EbHMADdW/EWT9vp3lntR74p0rBBg=
Subject key identifier: B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C6EA6254261144A1ABA1827EF51F96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:18:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50855
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:ea:62:54:26:11:44:a1:ab:a1:82:7e:f5:1f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:98:54:d5:4a:8b:98:c8:89:71:10:aa:b8:
dd:23:30:ea:1e:51:fd:44:ae:7b:8d:a1:60:56:57:
2a:f7:9c:76:df:30:fe:34:cc:04:e1:60:d9:67:e8:
a9:ca:09:0c:ea:6d:31:8f:c1:f6:30:47:1a:22:49:
18:cd:0c:06:d3:6f:f3:af:dc:31:8d:29:03:ca:9c:
7a:7a:6b:35:e9:e9:6e:3e:ef:33:18:36:c3:ac:e2:
42:65:f3:98:77:fb:27:8e:4f:53:2d:5e:ea:87:4b:
db:c3:09:8c:84:58:82:c2:3f:ce:84:67:8d:bd:c2:
82:13:5f:d4:61:e1:51:a0:e3:20:d2:e3:23:21:c2:
90:ed:1d:f6:73:1f:b9:a6:a4:fb:c2:f9:8b:50:83:
70:43:1e:f4:80:22:c1:cc:f0:76:58:55:34:46:34:
29:96:cb:c8:f6:65:6d:f9:71:a6:1d:ad:72:15:b4:
ca:f8:c5:d1:98:69:51:08:f5:06:ab:6c:bc:29:08:
16:9d:d8:b6:41:67:f3:7f:0b:2b:8a:71:4c:e8:3d:
1e:ed:6f:70:41:d0:1f:58:23:39:33:07:62:c6:db:
05:49:8c:ae:b6:96:a1:46:73:de:23:9c:32:39:3c:
53:01:5d:be:f9:66:c3:7d:f8:da:f7:e0:af:ef:fe:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50855
Signature Algorithm: sha256WithRSAEncryption
8e:25:d8:65:56:89:e3:6d:a7:a9:61:b0:b1:8d:ae:71:6b:aa:
2a:a5:94:0a:19:44:f7:61:5d:11:a8:91:5a:14:4f:56:1b:5a:
75:39:a7:ee:60:84:fc:91:f5:6f:1f:8b:e4:8e:cd:10:75:5e:
7d:fb:a4:45:77:cf:63:ea:b3:70:c9:71:fb:e2:f6:76:62:0c:
3b:15:6d:b5:c0:85:8c:39:9a:bd:a7:13:23:4b:a5:29:d5:10:
e5:a6:5a:36:a4:96:af:dc:9a:b9:af:8c:b8:b2:31:bd:eb:1f:
2f:9c:ec:10:2b:80:52:86:20:81:ed:8d:f3:87:e8:a5:d2:b6:
33:12:d0:a4:ee:82:ad:77:ee:98:1d:6b:82:2b:e2:2b:53:3e:
19:96:a6:c4:45:10:c1:c1:24:a9:73:cd:92:76:0c:fe:eb:cc:
1b:a3:d3:a8:4b:44:29:f4:f8:ac:40:8d:9a:a5:19:d3:2e:cb:
c7:a9:01:a7:b1:93:02:48:d2:ab:6e:0d:56:79:f2:d7:80:6f:
08:fd:1f:fb:23:90:db:0d:40:4b:81:33:8c:13:fb:1c:a2:69:
59:0e:c0:07:50:70:1d:17:b2:ea:c8:47:98:f7:53:52:2c:52:
7c:f1:0b:3a:4d:1f:a4:76:6f:5e:c4:4a:fe:ff:b8:29:c2:b6:
ac:ab:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:53:26 2026 by rpki-client