Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/GIApFi7xlAd5d7CmCL6bDQCcveU.cer
File: GIApFi7xlAd5d7CmCL6bDQCcveU.cer (raw, json)
Hash identifier: VCIUiAvAw5ekW1MpOR4qgEmd60g6KTN4UmaZAb/tFzw=
Subject key identifier: 18:80:29:16:2E:F1:94:07:79:77:B0:A6:08:BE:9B:0D:00:9C:BD:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A13ACA650E0B120F244302CFD2468448F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/GIApFi7xlAd5d7CmCL6bDQCcveU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 Oct 2026 14:21:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218400
IP: 2001:678:1388::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:ca:65:0e:0b:12:0f:24:43:02:cf:d2:46:84:48:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 14 14:21:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=188029162ef194077977b0a608be9b0d009cbde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:14:a0:45:97:44:0e:34:79:a1:9f:f9:ec:
77:f1:4b:67:a2:2b:b9:a0:0a:43:16:c0:1f:c2:36:
94:16:3c:a8:fd:24:33:3d:b8:3c:84:9d:11:7e:25:
b8:13:2d:3d:a7:b5:89:58:06:d5:1c:36:4c:5f:4b:
e6:cd:dc:4a:d7:62:1e:ef:7f:34:00:46:69:04:0c:
9e:44:05:75:cf:ef:11:73:0f:83:b7:3e:39:1f:33:
f7:9f:7d:aa:3b:47:f8:54:3e:5e:46:61:c0:fe:cb:
4c:2c:c0:c9:03:a2:a7:a7:6c:de:14:00:e0:39:16:
39:b0:0b:10:61:ad:9c:78:be:a4:d6:57:38:82:cb:
7d:11:5e:3c:8b:b0:63:5a:e6:c9:a5:1b:a1:fc:0c:
c9:aa:0e:f9:f2:99:60:cb:8b:c9:97:7e:5c:2b:eb:
ef:92:50:a4:bf:7a:e1:1b:01:c3:d8:81:8d:88:93:
eb:71:de:8d:9c:a5:3c:ca:48:59:f2:e2:48:2c:7d:
77:5f:fd:8c:24:65:23:25:7e:10:fa:22:fa:94:68:
3b:bc:ae:75:5e:f2:8a:aa:2b:1b:c8:2f:39:65:f5:
13:f2:6f:44:45:66:aa:75:a0:80:dc:ad:7b:a8:57:
05:b0:be:c5:bc:21:19:a5:f5:0f:4d:09:c8:9a:ae:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:80:29:16:2E:F1:94:07:79:77:B0:A6:08:BE:9B:0D:00:9C:BD:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/GIApFi7xlAd5d7CmCL6bDQCcveU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1388::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218400
Signature Algorithm: sha256WithRSAEncryption
ab:6c:84:39:8a:f0:7e:79:61:fc:68:d8:55:5c:c2:ad:52:4b:
17:67:52:e8:3c:98:6c:e2:fc:04:ab:70:6f:0d:9b:b4:10:89:
a9:fd:64:ab:91:3f:8a:95:1c:84:7f:28:14:39:8b:12:a5:74:
60:f8:93:82:57:04:a0:e2:24:36:67:a5:3a:5f:d3:f4:f7:45:
45:5f:a8:e0:19:fd:5f:b4:80:28:ae:ad:98:38:db:a8:ec:77:
86:4a:c3:9d:33:65:03:fa:ae:ea:23:08:bd:d5:5f:e9:20:c4:
42:b7:54:5c:78:9a:b8:0c:da:2a:e7:af:9d:52:f6:69:d9:d7:
0b:1d:49:5b:68:7a:a7:dd:1f:75:c0:74:2c:63:0f:fb:a1:18:
98:3b:a1:78:3f:c2:8a:ca:93:db:29:cd:53:ca:ca:b3:9f:31:
66:4e:88:ee:36:2d:49:ec:66:2d:4f:fe:70:26:b1:98:5d:bf:
15:63:8e:41:09:f4:b6:c1:76:7f:d2:02:a8:a9:f3:8c:85:63:
fd:5f:fa:a4:66:18:db:f5:91:77:69:0d:d1:b7:ef:0f:a5:45:
53:2d:ef:23:bc:e9:4c:0f:66:f8:69:6e:8f:44:37:ad:13:36:
ba:ce:3c:4f:33:a3:29:0f:f9:a4:3c:1c:c1:ca:e4:78:db:20:
4f:1a:e3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 12:57:48 2026 by rpki-client