Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer (raw, json)
Hash identifier: MmC4HMY9KDhWjPloDI2qISBFceTY5sdjBsKW7azmCqY=
Subject key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CED1C96DDF54AEB8A8CBADD004DB4CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:17:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208272
IP: 2a0b:7980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:1c:96:dd:f5:4a:eb:8a:8c:ba:dd:00:4d:b4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:e2:90:76:39:12:8f:72:72:34:5b:27:b0:
e7:04:03:f5:ca:40:27:7a:86:c9:25:b0:64:f2:60:
88:5c:12:13:b0:20:d1:2f:ba:ff:fc:bf:58:82:4e:
00:b4:31:a6:f6:ae:4c:0f:8c:30:ea:fe:2d:04:89:
8a:20:7d:b8:e8:57:66:33:27:ef:56:48:b0:ca:28:
3d:41:ea:42:3d:db:b5:0f:91:28:5e:ae:ca:c5:82:
0d:e6:62:e3:f4:18:ca:d0:6a:11:2e:25:2f:d8:95:
08:90:8f:1a:71:78:89:d2:0e:e1:90:82:ac:59:ee:
74:74:a4:23:c4:f1:e9:b1:f2:29:cc:67:ee:56:61:
60:54:ae:29:5b:7b:92:ae:d0:e6:41:ef:a5:30:45:
65:63:a3:68:9a:dc:45:15:57:a5:fc:fc:41:a9:a0:
28:83:f3:23:da:e1:ee:2c:d8:91:0b:41:bd:13:6d:
ad:0a:25:4c:9f:94:57:4a:15:e8:f7:82:e4:6b:db:
23:02:88:96:0a:ba:a5:05:a1:38:04:54:36:26:76:
e8:bf:56:80:ea:ae:ab:b9:5c:46:c7:ad:2a:28:23:
e7:5b:79:e6:a1:81:cc:6b:24:12:ad:83:73:70:93:
8d:d7:73:b5:51:97:78:6c:f1:92:db:51:49:b1:9d:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:7980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208272
Signature Algorithm: sha256WithRSAEncryption
74:5e:23:20:c4:ef:a2:77:34:c9:85:56:f1:17:b4:62:3d:92:
0d:ba:35:68:6b:4b:91:ee:7d:48:16:dd:19:79:7b:1d:bf:de:
f4:3e:97:59:22:93:43:f6:e2:9d:20:77:0e:65:1f:91:22:9d:
ac:40:a0:34:17:d1:82:73:64:56:cc:ca:70:8b:c5:8c:fc:7d:
70:a9:50:0c:42:2f:1f:e8:93:f4:c8:e4:64:45:f6:3e:80:76:
f0:72:cf:87:34:3a:06:32:45:01:b3:ea:c2:9e:92:9c:5e:95:
04:40:4f:64:50:63:6a:1d:de:8f:72:64:6f:b1:5b:e5:80:fa:
ad:f8:10:54:0a:32:2f:38:1f:6c:52:f2:eb:8a:73:96:ed:03:
06:07:0e:ec:03:15:aa:1c:71:9e:77:75:4d:18:47:6b:ad:50:
b2:df:f3:a3:66:fa:91:d9:26:94:7d:3e:4e:6c:1a:e8:5d:82:
3c:a2:f2:50:25:44:8a:06:ef:45:d4:b2:b6:fd:8d:dc:a5:23:
96:d7:cc:38:e7:2b:37:98:af:b5:d9:4a:02:e8:9b:0b:99:f5:
e7:72:92:9b:c8:37:58:60:68:89:10:c6:3b:57:96:b0:02:f7:
82:47:71:2e:aa:08:f0:24:9c:16:d7:6c:a4:a6:d5:74:1d:0b:
98:7b:e0:d3
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZt87RyW3fVK64qMut0ATbTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTIzZTJmMGIwNjQwODdmZDg0ZjA0OGIxZmE5OTk3MDIzZDU5OWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowjikHY5Eo9ycjRbJ7DnBAP1ykAn
eobJJbBk8mCIXBITsCDRL7r//L9Ygk4AtDGm9q5MD4ww6v4tBImKIH246FdmMyfv
Vkiwyig9QepCPdu1D5EoXq7KxYIN5mLj9BjK0GoRLiUv2JUIkI8acXiJ0g7hkIKs
We50dKQjxPHpsfIpzGfuVmFgVK4pW3uSrtDmQe+lMEVlY6NomtxFFVel/PxBqaAo
g/Mj2uHuLNiRC0G9E22tCiVMn5RXShXo94Lka9sjAoiWCrqlBaE4BFQ2Jnbov1aA
6q6ruVxGx60qKCPnW3nmoYHMayQSrYNzcJON13O1UZd4bPGS21FJsZ2RZwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFAoj4vCwZAh/2E8Eix+pmXAj1ZnhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2M5ODNh
YS1iNjFlLTRlZDgtOGU4MS1iYzFlNTVjNjk3NTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYzk4M2Fh
LWI2MWUtNGVkOC04ZTgxLWJjMWU1NWM2OTc1NS8xL0NpUGk4TEJrQ0hfWVR3U0xI
Nm1aY0NQVm1lRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgt5gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDLZAwDQYJKoZIhvcNAQELBQADggEBAHReIyDE76J3NMmFVvEXtGI9kg26NWhr
S5HufUgW3Rl5ex2/3vQ+l1kik0P24p0gdw5lH5EinaxAoDQX0YJzZFbMynCLxYz8
fXCpUAxCLx/ok/TI5GRF9j6AdvByz4c0OgYyRQGz6sKekpxelQRAT2RQY2od3o9y
ZG+xW+WA+q34EFQKMi84H2xS8uuKc5btAwYHDuwDFaoccZ53dU0YR2utULLf86Nm
+pHZJpR9Pk5sGuhdgjyi8lAlRIoG70XUsrb9jdylI5bXzDjnKzeYr7XZSgLomwuZ
9edykpvIN1hgaIkQxjtXlrAC94JHcS6qCPAknBbXbKSm1XQdC5h74NM=
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:59:31 2026 by rpki-client