Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/CpPZnkkKNdkpsBpstzxYPxCvyvE.cer
File: CpPZnkkKNdkpsBpstzxYPxCvyvE.cer (raw, json)
Hash identifier: HwkgtE6QQX00i4Ct7L9z+85otpBfOisnX/u+8AMQH6w=
Subject key identifier: 0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A187F2E405CEAAE29CFCA22F38A6051890
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Oct 2026 13:56:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 41783
IP: 2a00:7c00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f2:e4:05:ce:aa:e2:9c:fc:a2:2f:38:a6:05:18:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 29 13:56:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a93d99e490a35d929b01a6cb73c583f10afcaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:76:6b:f2:83:59:06:d6:b9:1a:a4:ad:f3:
b8:62:21:99:9c:bd:8b:d0:08:37:ec:c6:c1:b4:2f:
63:e9:61:79:04:f0:4b:25:44:18:07:f7:30:09:58:
3a:77:05:e4:bd:ad:42:88:0c:e7:7a:64:6f:95:00:
cd:67:c8:a4:d7:c4:4c:26:84:91:49:f3:68:ee:5c:
de:03:79:01:4b:1b:de:55:68:c5:13:16:af:47:75:
38:7c:e8:b0:84:f4:d4:6a:32:ba:88:53:da:86:14:
33:af:ee:d0:d6:a3:49:a1:c6:b2:cc:49:a6:10:b9:
ef:50:69:a5:4d:41:b1:29:fe:99:4b:aa:ce:15:60:
a9:17:69:23:ce:14:1d:ad:c1:64:24:35:0e:b2:1f:
04:2d:79:fa:d1:6c:2c:69:79:02:72:f5:51:9d:df:
6e:40:c5:1e:71:17:ec:f8:6d:d2:9d:51:af:e2:b2:
4d:42:f4:29:58:e3:f1:89:e8:03:ff:93:69:bf:6a:
a9:cd:2b:f0:2f:ba:85:ac:12:76:ef:1d:f1:78:35:
1d:ca:a9:a6:d7:cc:18:2a:2c:db:5f:20:b9:92:bf:
cc:4d:93:4b:14:d5:3d:b4:10:92:3e:39:fe:a9:34:
bc:01:94:eb:ff:60:2c:7c:34:12:ca:16:d6:a6:46:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:93:D9:9E:49:0A:35:D9:29:B0:1A:6C:B7:3C:58:3F:10:AF:CA:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/CpPZnkkKNdkpsBpstzxYPxCvyvE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7c00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41783
Signature Algorithm: sha256WithRSAEncryption
0b:97:6c:f8:08:53:10:d2:5a:6e:a8:8a:11:41:a0:bb:94:79:
a7:86:be:41:5d:fd:da:b7:49:24:1a:c5:03:c2:43:27:0a:0b:
9c:3f:f9:54:13:26:3e:7d:4c:9e:b1:b4:48:66:65:ee:35:89:
2c:d0:c3:ac:96:f2:76:74:71:46:97:bf:d6:2c:f8:12:73:64:
70:d3:02:1b:0b:e6:33:a6:74:0f:34:06:1f:c8:5a:bf:3c:38:
6f:8e:6b:d1:ef:92:d7:ef:db:d0:38:e9:33:93:3a:54:ba:95:
a9:35:17:c4:64:7a:1a:5e:83:87:e4:98:1d:96:d6:b8:b8:d7:
f5:35:6b:ed:41:d5:42:ec:df:41:13:96:32:f6:01:88:09:2b:
fe:85:cc:37:30:5d:78:95:43:26:a5:f0:fc:6f:c2:3f:de:ca:
15:6b:36:22:d5:2c:9f:29:21:18:68:b1:e7:9a:de:6e:7b:92:
2b:05:d7:63:37:35:1a:51:f4:ef:4b:50:6d:78:20:95:58:2b:
92:82:25:53:6e:57:90:f0:d8:c6:2d:d3:99:a0:4f:ad:7a:9b:
a2:6b:da:e7:24:f3:74:55:c3:ca:0a:de:33:fc:d0:25:a4:07:
41:56:fc:f9:d2:dc:a4:c5:04:80:9a:60:39:5d:a9:7c:51:53:
b3:74:de:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 05:07:42 2026 by rpki-client