Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/CkGiIV3WwNnh5XQbk4dYA7UTU3k.cer
File: CkGiIV3WwNnh5XQbk4dYA7UTU3k.cer (raw, json)
Hash identifier: /8E+Z7LKjvrg+qRC8zlJ4QlvoxLuBWeqfp3ekAafno8=
Subject key identifier: 0A:41:A2:21:5D:D6:C0:D9:E1:E5:74:1B:93:87:58:03:B5:13:53:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0A69D46BEDB8A89AA0009674950496D45
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/ea7021-4c0d-4e1a-aa6c-af77d5e560ac/1/CkGiIV3WwNnh5XQbk4dYA7UTU3k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/ea7021-4c0d-4e1a-aa6c-af77d5e560ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Sep 2026 19:48:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216089
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:9d:46:be:db:8a:89:aa:00:09:67:49:50:49:6d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 15 19:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a41a2215dd6c0d9e1e5741b93875803b5135379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:35:2d:48:a3:c5:1f:2f:cf:7f:c3:5e:ec:
06:0e:0d:82:b4:89:6d:0d:88:f9:20:fa:81:5a:95:
66:c1:9a:da:0b:20:b3:76:1d:6a:21:b2:45:1a:14:
43:86:d5:a1:6c:e1:df:23:db:78:cc:1c:de:f6:1d:
6a:5c:bf:79:88:79:b3:de:f3:3d:7e:f8:d1:e9:9a:
48:66:3c:b3:d6:05:48:db:0c:e2:cd:b2:64:54:05:
b5:51:20:c5:11:1f:75:32:49:4b:63:e4:7a:c0:11:
24:1e:3c:90:b6:02:63:f5:18:a4:03:2f:b2:78:45:
86:fd:7b:84:b9:40:86:77:b5:4c:1a:3a:0e:31:90:
e8:a9:36:55:34:f3:33:e4:7d:75:c6:4c:82:25:57:
e7:c4:7c:48:6a:35:7d:06:19:ef:d8:c5:19:b3:0b:
e5:a0:1e:46:b1:86:b0:e7:97:1a:85:5b:b5:44:8b:
c9:89:58:97:dd:62:f4:f5:9c:33:a5:49:b3:19:16:
1d:bd:26:fe:03:06:ac:4a:19:88:73:5f:a5:8e:02:
38:58:00:64:29:aa:c3:fe:46:92:fe:eb:9b:dc:a5:
57:47:fb:e9:27:da:86:7d:d3:42:47:18:30:58:5c:
73:48:33:2d:a5:ad:24:24:29:0d:ba:c4:d3:73:53:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:41:A2:21:5D:D6:C0:D9:E1:E5:74:1B:93:87:58:03:B5:13:53:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ea7021-4c0d-4e1a-aa6c-af77d5e560ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ea7021-4c0d-4e1a-aa6c-af77d5e560ac/1/CkGiIV3WwNnh5XQbk4dYA7UTU3k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216089
Signature Algorithm: sha256WithRSAEncryption
2b:17:9d:de:c8:6f:a4:1e:70:d8:e0:63:a7:ae:c8:91:e8:d0:
d6:fb:95:8d:ac:6b:32:0c:3e:bf:fa:a1:44:73:b9:d5:93:39:
25:af:37:2d:19:8b:00:f5:4c:c5:fa:b1:64:7d:7d:2b:94:76:
1a:42:0b:7b:4b:4d:a2:15:e6:54:27:48:93:51:4a:7f:73:7c:
56:84:96:4f:5f:59:1b:eb:5c:53:7f:da:2f:86:24:39:0b:30:
30:e5:6b:b9:97:a9:1f:76:54:f6:82:42:31:50:e5:d6:26:17:
b9:36:b2:85:76:54:b5:77:13:15:8a:eb:00:60:e4:28:70:7b:
5c:f0:53:83:03:62:20:79:24:85:9d:b4:9c:4d:b1:33:81:56:
2b:17:4d:94:2a:e8:e3:b5:d3:90:9a:8f:36:5d:56:f9:d4:94:
bf:c0:51:09:a2:7c:f8:a8:fc:e2:31:b6:98:6c:57:f7:4f:c1:
fa:57:0d:36:02:02:b6:97:ab:c0:fe:7f:b9:d6:8d:58:72:e7:
3a:c7:a0:33:94:ad:81:c1:4a:75:bb:c7:ca:02:6f:71:f9:6f:
4d:88:6d:4f:dc:37:14:e2:18:02:a9:41:96:4f:8a:54:79:a7:
db:4f:17:26:43:5c:18:e5:bb:60:62:a7:22:7f:63:8e:17:bb:
0c:1a:f1:3d
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAaCmnUa+24qJqgAJZ0lQSW1FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTE1MTk0ODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTQxYTIyMTVkZDZjMGQ5ZTFlNTc0MWI5Mzg3NTgwM2I1MTM1Mzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbs1LUijxR8vz3/DXuwGDg2CtIlt
DYj5IPqBWpVmwZraCyCzdh1qIbJFGhRDhtWhbOHfI9t4zBze9h1qXL95iHmz3vM9
fvjR6ZpIZjyz1gVI2wzizbJkVAW1USDFER91MklLY+R6wBEkHjyQtgJj9RikAy+y
eEWG/XuEuUCGd7VMGjoOMZDoqTZVNPMz5H11xkyCJVfnxHxIajV9Bhnv2MUZswvl
oB5GsYaw55cahVu1RIvJiViX3WL09ZwzpUmzGRYdvSb+AwasShmIc1+ljgI4WABk
KarD/kaS/uub3KVXR/vpJ9qGfdNCRxgwWFxzSDMtpa0kJCkNusTTc1PVcQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFApBoiFd1sDZ4eV0G5OHWAO1E1N5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkL2VhNzAy
MS00YzBkLTRlMWEtYWE2Yy1hZjc3ZDVlNTYwYWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvZWE3MDIx
LTRjMGQtNGUxYS1hYTZjLWFmNzdkNWU1NjBhYy8xL0NrR2lJVjNXd05uaDVYUWJr
NGRZQTdVVFUzay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNMGTANBgkqhkiG9w0BAQsFAAOCAQEAKxed3shvpB5w
2OBjp67IkejQ1vuVjaxrMgw+v/qhRHO51ZM5Ja83LRmLAPVMxfqxZH19K5R2GkIL
e0tNohXmVCdIk1FKf3N8VoSWT19ZG+tcU3/aL4YkOQswMOVruZepH3ZU9oJCMVDl
1iYXuTayhXZUtXcTFYrrAGDkKHB7XPBTgwNiIHkkhZ20nE2xM4FWKxdNlCro47XT
kJqPNl1W+dSUv8BRCaJ8+Kj84jG2mGxX90/B+lcNNgICtperwP5/udaNWHLnOseg
M5StgcFKdbvHygJvcflvTYhtT9w3FOIYAqlBlk+KVHmn208XJkNcGOW7YGKnIn9j
jhe7DBrxPQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:39:51 2026 by rpki-client