Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ZSplmSej55uNH-WeNDxticBcrYo.cer
File: ZSplmSej55uNH-WeNDxticBcrYo.cer (raw, json)
Hash identifier: L3DgslWo9Fu/qVLF0bGKB8+OW2FxTCuNEzYkrs3nxi0=
Subject key identifier: 65:2A:65:99:27:A3:E7:9B:8D:1F:E5:9E:34:3C:6D:89:C0:5C:AD:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A11BA2005C848F4BD9DA0F2786A99BF124
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/7c3549-5a55-4de8-a8e0-01d6ca14e3c4/1/ZSplmSej55uNH-WeNDxticBcrYo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/7c3549-5a55-4de8-a8e0-01d6ca14e3c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 Oct 2026 13:09:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.84.12.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:a2:00:5c:84:8f:4b:d9:da:0f:27:86:a9:9b:f1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 8 13:09:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=652a659927a3e79b8d1fe59e343c6d89c05cad8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:75:43:48:90:5d:35:03:6d:6d:a7:ec:e2:
f4:e7:b9:c7:5b:47:de:5a:b5:02:5b:07:3d:6d:2e:
52:02:f2:4d:23:5c:75:82:59:d8:09:35:df:ab:c2:
d1:21:5a:0a:3e:58:bd:ac:bc:d6:31:82:74:b5:5b:
2d:aa:dc:af:05:2d:01:e0:f4:c6:89:3c:7f:70:13:
b0:3f:6c:dc:2e:2a:82:b2:66:3b:fa:03:ee:af:c5:
0f:77:82:72:fb:10:63:da:18:a4:13:6d:d2:66:70:
cd:f7:2b:40:22:5b:bf:46:91:7a:32:d0:87:7a:1b:
06:1d:16:8e:17:0e:52:81:3c:a6:72:a5:6b:80:7f:
a0:23:b1:44:6b:0b:88:1c:85:fe:52:d4:c3:3f:cb:
96:a3:64:cd:b6:0a:66:66:86:43:c2:3d:89:55:f6:
87:05:57:28:47:2c:4f:82:a2:db:df:d1:f3:15:04:
59:de:1d:04:98:40:ea:dd:fc:d4:16:e4:47:cf:f6:
ec:73:29:68:90:e9:dd:da:fe:c5:cd:a3:c7:17:20:
ea:7c:0a:e1:fe:1c:99:52:aa:7d:a4:59:4b:4d:ed:
ae:f6:06:f8:7c:d6:5d:8c:f0:a7:4a:da:9d:2a:a5:
20:58:5b:56:b5:6b:0b:86:3d:be:b2:d6:09:c1:d4:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2A:65:99:27:A3:E7:9B:8D:1F:E5:9E:34:3C:6D:89:C0:5C:AD:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7c3549-5a55-4de8-a8e0-01d6ca14e3c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7c3549-5a55-4de8-a8e0-01d6ca14e3c4/1/ZSplmSej55uNH-WeNDxticBcrYo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.12.0/22
Signature Algorithm: sha256WithRSAEncryption
97:25:92:9e:31:4b:e6:a2:00:14:70:77:42:b5:f3:12:9d:cd:
3b:fe:5f:ed:4e:5a:9f:f5:b7:f2:bf:29:1f:6f:c1:84:f7:d2:
44:ad:69:60:eb:b8:ac:ba:2f:58:e0:cb:30:8f:f9:5c:83:7c:
b9:53:d6:a1:a7:08:0f:57:73:11:d3:9d:65:fb:4b:6b:5f:bb:
df:03:df:09:a0:bb:0f:ca:6b:53:6f:34:3f:02:9f:45:f3:55:
4f:71:fa:84:fa:95:6a:89:0b:22:8b:30:1b:30:5f:52:6c:94:
f1:eb:99:67:f7:16:d3:01:46:19:eb:4c:10:5f:62:8d:9b:fe:
7e:cb:be:9d:15:b6:1b:ef:61:48:4b:86:0a:4f:c8:0f:6a:ca:
87:df:48:3d:d7:70:13:82:28:79:c0:ce:7d:71:22:93:5c:fe:
af:41:0a:af:6b:b7:14:f0:8e:8d:7b:22:93:36:25:8d:76:91:
ba:4d:67:52:b3:b9:08:bd:04:4c:ba:b6:57:c4:e9:bc:f4:e1:
ee:ba:64:08:3e:18:eb:d1:1e:be:40:ff:4a:90:bf:12:87:ff:
9a:49:dd:e8:09:93:e9:8f:dc:66:ae:44:ef:2a:38:7b:53:bb:
5e:22:a3:1b:98:ab:ad:12:16:56:0d:eb:96:c2:35:b4:45:07:
49:be:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:43:22 2026 by rpki-client