Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4Mxbbak5Zm35XEkAYpGP-RYkmWE.cer
File: 4Mxbbak5Zm35XEkAYpGP-RYkmWE.cer (raw, json)
Hash identifier: h70LXQQ9MehV/B0nOBnCw+q5Ul0uD8GodWMPZvJoGRM=
Subject key identifier: E0:CC:5B:6D:A9:39:66:6D:F9:5C:49:00:62:91:8F:F9:16:24:99:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A11DAD5A364ED17C8D766FC79F205F20E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/4Mxbbak5Zm35XEkAYpGP-RYkmWE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 Oct 2026 22:41:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206804
IP: 45.128.132.0/22
IP: 2a0e:4940::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:ad:5a:36:4e:d1:7c:8d:76:6f:c7:9f:20:5f:20:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 8 22:41:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0cc5b6da939666df95c490062918ff916249961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:3b:b7:50:aa:6b:40:22:d3:01:bc:b4:23:
7e:b2:d8:6a:41:84:6a:a7:75:ba:ce:e7:0b:95:2d:
a0:89:ac:6f:28:5d:13:4c:9e:13:bb:2c:6c:91:84:
11:4e:cd:7a:3d:f9:7c:b7:41:41:36:2d:00:4b:b9:
db:a2:21:11:33:b4:45:14:67:eb:ee:73:8d:03:37:
bf:44:2b:23:ff:56:8e:ce:bc:b6:1c:9b:b5:2f:b2:
1d:34:53:9b:db:36:c5:99:3d:6a:6f:f9:00:70:ce:
d3:6f:68:2f:47:ba:92:ef:55:60:02:d6:dc:18:e1:
f2:99:f2:4f:69:de:9e:d6:c8:69:04:c2:da:5c:d6:
c8:ad:d8:35:89:90:9a:ea:3e:17:79:22:9d:76:7a:
b4:15:90:bc:5d:60:1a:f1:e6:9d:30:3c:cb:cf:d3:
6f:b2:5d:96:1a:01:b6:17:96:2f:72:de:5f:89:95:
d2:66:cb:f6:1c:ca:c2:fe:de:b3:97:cb:db:3c:ee:
e4:8e:45:10:51:99:ef:d3:78:85:8f:bc:2c:cd:a3:
37:e5:69:a0:43:3e:3b:71:23:fa:0a:10:9f:1f:a4:
f6:85:bc:2e:b0:73:8e:a6:9e:13:f1:61:b2:da:0e:
cd:c6:77:88:43:52:99:83:93:e6:ad:14:92:df:81:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CC:5B:6D:A9:39:66:6D:F9:5C:49:00:62:91:8F:F9:16:24:99:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e125c3-f59d-49dc-8269-9d55d7264c06/1/4Mxbbak5Zm35XEkAYpGP-RYkmWE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.132.0/22
IPv6:
2a0e:4940::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206804
Signature Algorithm: sha256WithRSAEncryption
08:ff:41:dd:8d:8e:e5:3c:3a:a4:93:2d:59:8d:c0:e3:18:f9:
d5:b3:58:3b:fb:73:74:d9:96:b9:d8:93:38:c5:db:36:fe:ac:
5c:7e:83:a6:26:aa:98:9d:0c:e1:23:5c:27:2f:84:33:e9:7f:
a9:51:78:c2:74:09:7a:4d:d6:50:f4:cb:0b:8f:80:bf:db:04:
68:92:a9:5d:58:08:40:2e:28:8c:6d:84:63:1c:d8:3d:10:c9:
b4:f1:4f:63:e3:31:3f:08:71:7f:97:1f:69:f4:e3:bc:23:12:
61:18:3b:fe:48:cb:8d:bc:40:4b:12:d3:c1:dd:11:bb:92:5f:
b2:8d:c0:cb:47:d0:0c:24:8c:45:84:f7:f3:90:57:de:82:ba:
cf:86:5d:78:71:7c:c9:d7:37:1d:94:68:31:1b:10:89:a0:5d:
bc:f8:c3:31:a4:d0:ae:c4:9c:78:f2:1d:b5:17:b6:e8:9a:cd:
da:4e:34:0e:85:d6:b6:30:47:7d:fb:26:21:b7:d4:25:82:80:
25:cb:2e:92:1d:fe:bc:0e:c6:4e:26:19:a9:b0:af:6f:56:03:
fe:f6:71:0d:68:78:bd:90:71:bb:7f:a6:27:d3:7b:6b:8e:f5:
6f:83:5d:fd:f6:a7:14:a0:e6:d8:b3:9a:d7:4f:90:76:34:5e:
ec:2a:48:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:42 2026 by rpki-client