Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
File: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer (raw, json)
Hash identifier: w2waOa1vyliADow+0rlJQ4ckw7j46jLwLnUyvMUtDEI=
Subject key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78351E4B1AE120DAD22A9665BE615875
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43066
IP: 93.184.128.0/20
IP: 2a05:d880::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:1e:4b:1a:e1:20:da:d2:2a:96:65:be:61:58:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:7b:30:ca:00:4a:32:79:d4:bc:fa:1e:d0:
b7:78:28:99:d4:8f:51:5d:4a:51:d8:3a:5f:f3:46:
7f:e9:7c:ac:5c:1d:b1:29:7c:ec:f3:bd:69:8f:2b:
ed:46:02:d1:7a:4b:93:e8:1b:9f:fc:ec:c9:41:88:
09:5f:c8:b5:6c:ba:fb:f2:f6:d2:79:68:c2:99:dc:
6d:9b:4c:77:c4:7b:92:a8:27:d7:94:4f:64:27:c1:
aa:f0:96:ee:22:9e:62:19:97:57:b2:94:fc:15:eb:
77:f1:64:19:ad:2f:8f:9b:01:ed:e2:6b:38:3d:99:
fa:cd:85:fb:d8:6f:4e:99:3a:c8:71:e7:d8:32:1d:
0b:dd:ef:7b:52:64:cd:12:e4:bf:39:a9:18:8a:e6:
d1:49:fb:31:fd:86:f9:95:25:7c:91:a2:a5:38:eb:
2e:91:ec:fa:49:42:27:dd:95:43:d9:ca:48:a0:ea:
b5:24:39:da:1e:01:2c:9a:9a:95:cd:23:95:e0:b8:
5f:85:79:45:9f:c4:e4:b9:91:cd:83:68:e8:e2:d2:
84:25:da:53:4f:a9:fa:58:e9:44:e9:0b:50:46:41:
40:df:61:12:02:10:3a:7f:85:ca:db:62:a4:50:51:
ac:af:f6:d5:ea:7c:0e:33:c2:98:70:0a:d0:75:5e:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.184.128.0/20
IPv6:
2a05:d880::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43066
Signature Algorithm: sha256WithRSAEncryption
7a:48:7e:ba:9a:64:c2:1b:ea:8b:7d:8b:6f:c0:b4:79:6f:88:
ef:76:9b:51:c1:0a:1c:46:f4:5a:c1:db:f6:f6:f9:69:bc:b9:
7c:cc:ea:de:49:46:07:ea:f6:4d:57:6b:b0:cf:29:90:35:31:
8c:c3:8f:08:5d:9d:38:96:5b:21:3b:af:b8:02:0b:af:f1:8a:
bf:c3:aa:3a:8d:d2:c2:e7:46:d7:1c:d6:f2:7e:f2:46:48:4f:
36:97:0d:29:ee:9c:ff:91:d3:ec:aa:79:47:c8:f9:bf:52:15:
a2:24:4e:42:cb:17:e0:8c:91:b5:3f:a5:0c:06:c3:8a:6b:84:
9d:5e:52:b6:35:c2:7f:d4:ed:d2:42:da:45:64:0b:1b:86:06:
92:58:ed:69:83:87:87:dc:0a:13:e0:0e:52:76:c6:d8:24:39:
77:e0:a5:58:f7:0b:d9:ce:08:ac:64:d1:c6:c7:0e:83:39:bb:
5c:2b:ea:44:1b:03:f3:ea:fc:31:57:62:72:6e:4a:43:85:56:
d3:ed:24:1e:50:45:9f:5f:d9:60:96:3d:b3:32:ba:46:32:8a:
58:05:98:a6:f9:81:c2:41:6d:c0:62:07:0f:5e:e0:8a:42:0f:
81:e8:6d:14:eb:e6:e7:ba:74:4d:79:7b:68:5a:d5:dd:28:0d:
94:ca:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:19:27 2026 by rpki-client