Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
File: CvPkI70elzal9deE7JKZ1QgnJ9w.cer (raw, json)
Hash identifier: zCruCGJpjhOPnORMTfEgfXvymsOtP6Eqe+XHDYCc+b4=
Subject key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC8B27B9D602857E20891A589B2CA78
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:18:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 83.242.0.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:b2:7b:9d:60:28:57:e2:08:91:a5:89:b2:ca:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:38:26:b6:76:08:2c:11:6c:d1:d3:8e:56:ec:
bd:dd:58:14:29:10:bc:4b:c2:eb:91:a4:0e:b4:12:
b8:72:a0:9c:c2:14:3b:16:75:84:94:d4:bd:17:97:
88:b2:b9:76:81:90:0a:e8:b3:68:f8:5c:79:3d:92:
ec:59:75:a9:e5:c9:dd:3e:e6:44:51:bd:5d:5f:24:
d0:da:f8:57:ff:92:6a:aa:33:d9:03:77:2f:44:d9:
d4:b8:b7:77:5a:9e:7f:d2:4d:9d:01:ea:ff:f6:03:
68:ef:67:30:04:31:10:7a:19:9e:39:d4:d3:64:f6:
17:fc:ec:27:1e:fb:7a:e5:97:86:bf:a2:b6:f6:15:
65:8e:7c:5d:c0:e7:a8:fd:fb:df:05:ee:5f:79:f9:
eb:74:42:62:dd:8c:64:91:a5:76:80:42:6e:3f:ed:
2d:12:71:0f:5b:b8:ac:99:2e:20:56:f5:86:b3:70:
ee:0b:9c:7d:fb:97:1f:60:36:7d:3d:72:66:5e:fe:
f9:d1:38:1b:60:b3:fb:53:02:2f:27:91:c8:29:e6:
d8:89:94:e9:00:25:b2:09:92:31:51:12:a4:3d:10:
8e:5f:32:54:5c:e6:eb:ae:8e:a7:c6:a2:d3:12:26:
44:44:76:20:07:a3:78:14:b5:db:b3:89:f8:14:7c:
c0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.242.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:a2:d4:89:40:e8:86:e0:a4:89:2e:72:a5:63:e9:5d:26:dc:
d0:ee:9b:db:27:39:bd:ba:75:25:e2:6a:89:9d:1b:e9:aa:39:
09:79:d0:4d:39:c7:1e:d1:c0:e4:fa:f7:c2:22:9f:ba:19:df:
67:db:3f:ec:05:52:30:17:fc:97:fb:24:43:49:42:01:d4:c1:
7d:a1:de:86:a2:28:40:85:f0:33:2f:e1:14:61:10:67:0a:ed:
3a:58:42:18:2f:e7:37:5d:af:38:ee:d2:04:ac:6b:2a:78:06:
1c:70:b3:84:5b:8e:ea:fa:83:d6:0e:a4:6d:89:32:90:4d:82:
41:48:5d:72:00:20:11:3c:05:0e:71:61:92:af:87:3f:ce:ad:
b2:46:e1:18:be:25:b7:0e:4b:6b:49:8b:14:e3:6e:5a:80:79:
04:51:39:bf:ec:40:40:43:0c:c3:4d:fc:2a:17:0d:b2:f0:03:
75:d3:91:81:fc:00:aa:ba:21:e1:0a:72:ee:b2:67:ce:0b:75:
4d:d0:eb:1f:d1:fc:a2:4c:a8:c0:62:f7:a2:11:68:f3:60:d3:
84:8e:b8:47:2a:a9:b8:f7:d9:1f:6b:40:03:a7:70:22:1d:37:
7e:b2:f3:3c:a4:85:57:61:f3:2c:ec:03:6a:0a:79:8c:05:79:
da:58:7d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:08:17 2026 by rpki-client