Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.cer
File: k5ZDXlb-x6vQKL3Dwlho0vuOcb0.cer (raw, json)
Hash identifier: IOZ390h9Ms1luv3LhnOhevN0qY2hirKP5m62aQJ9Y08=
Subject key identifier: 93:96:43:5E:56:FE:C7:AB:D0:28:BD:C3:C2:58:68:D2:FB:8E:71:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1826DB0CE642E8DC9AA16481D004F6A38
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 Oct 2026 12:13:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 192.129.2.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:6d:b0:ce:64:2e:8d:c9:aa:16:48:1d:00:4f:6a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 28 12:13:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9396435e56fec7abd028bdc3c25868d2fb8e71bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:e0:04:eb:21:63:01:71:8f:19:06:b8:9f:
f7:33:ef:03:d9:71:51:5c:ed:24:36:00:f7:69:f8:
46:bd:f5:09:81:34:cc:9b:dd:3d:93:92:08:b4:85:
6b:98:40:05:18:2c:d5:32:2e:ba:99:17:7d:b4:6f:
35:1e:36:66:a6:1e:fc:58:e2:a9:3a:72:3e:f2:9d:
1d:8b:3e:80:34:c8:e5:12:c5:c3:5b:62:3a:8e:8e:
ad:f4:06:8a:13:e8:ba:5a:85:b2:f2:2c:6d:33:b3:
b0:b1:25:ae:e3:b5:3a:cf:71:b0:6e:2a:81:cb:30:
5f:bc:86:6b:0f:7c:72:e6:61:67:e5:44:93:5e:31:
e3:65:67:a1:27:f1:c6:d5:43:36:94:58:e9:22:e2:
22:d0:13:db:43:8a:af:dc:47:c0:b2:5f:22:d5:70:
fd:6c:6f:7e:9c:51:bf:d5:94:79:51:cd:88:f0:4b:
7d:62:41:37:24:b8:0a:c8:b6:20:6c:38:9e:9d:23:
f8:0d:20:ef:ac:e8:ec:af:14:bd:64:68:3a:6e:ef:
a9:ce:1e:50:f3:67:91:55:42:64:3b:17:85:32:43:
9c:a0:23:62:0c:88:25:ff:3b:3f:0f:d1:07:06:16:
9b:8d:e4:86:a0:5d:02:cd:bd:e3:c2:9a:02:0b:8a:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:96:43:5E:56:FE:C7:AB:D0:28:BD:C3:C2:58:68:D2:FB:8E:71:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5de4fa-dcbf-489b-ad84-6ab32044c651/1/k5ZDXlb-x6vQKL3Dwlho0vuOcb0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.129.2.0/24
Signature Algorithm: sha256WithRSAEncryption
af:e6:c2:cc:03:28:76:eb:b5:6b:34:e2:c1:2e:bb:51:dd:66:
7f:6e:8b:dd:95:e6:84:48:24:53:dd:05:69:4a:24:b2:6c:35:
af:6e:1f:58:f9:97:91:30:7a:d2:5a:af:01:36:0e:58:20:14:
be:14:3e:e1:d2:46:18:03:bb:8a:9f:36:df:07:b2:a5:84:37:
8c:eb:86:f8:df:66:42:e1:68:fa:69:b6:83:ee:4f:1f:e9:dd:
77:fe:72:92:df:87:0e:54:7f:3c:c6:ea:35:53:cd:4b:79:b1:
60:38:2b:19:7b:20:80:73:a8:d0:ad:8a:e9:7a:a8:9c:41:81:
7b:82:c7:ce:dd:73:e2:26:f8:65:ce:dc:e3:67:ab:1d:a4:d7:
44:df:83:39:ea:b0:c8:d2:61:c5:5e:51:8f:a9:ed:12:64:3a:
fd:7a:ed:cb:57:94:be:33:3d:e6:dc:28:1d:5c:f0:ca:14:ff:
55:96:2d:2b:01:8a:33:fb:a6:93:2c:21:ee:80:57:f0:13:20:
e1:c9:74:81:0f:fa:8b:3b:02:00:67:e0:53:ec:56:02:da:2e:
78:7e:4a:80:64:47:81:b9:2a:b3:ef:f0:42:a6:d2:d4:ec:b2:
3f:77:17:ec:99:88:6a:88:a2:32:4c:34:65:92:17:49:9d:a1:
c2:b6:03:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:33:12 2026 by rpki-client