Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
File: cZLyKnioBxsCo2Ko2zPo8_ct00g.cer (raw, json)
Hash identifier: CRm+kSBdK31uMBwMWVtm3ZiLlM9V6f1zqjytdCDTKpM=
Subject key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C50D8C46DB08894877C1206DED1178184
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Feb 2026 07:55:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 192.145.111.0/24
IP: 2a09:5d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:50:d8:c4:6d:b0:88:94:87:7c:12:06:de:d1:17:81:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 12 07:55:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:04:e6:d5:c6:2d:7d:19:16:7a:93:49:c1:
18:a4:b5:36:90:e8:58:aa:7e:a3:65:e2:65:af:ca:
ce:a4:c9:ac:d3:9a:c2:65:6b:84:f1:b7:0f:38:f3:
f2:63:fb:47:2e:12:78:b1:59:75:5f:d9:ee:5b:6c:
02:2b:44:94:5d:1a:ac:38:1a:96:73:0d:fc:d3:57:
20:8c:74:64:46:b8:d5:7b:64:12:b4:b2:33:b7:7a:
88:57:de:c7:23:3c:b4:c1:44:03:00:4c:4e:0f:fa:
27:98:a5:32:5a:61:db:7b:51:3e:80:7d:c5:c5:76:
bd:7c:ea:e9:dd:10:bc:8f:e4:1d:6b:eb:af:83:e9:
2d:ac:82:03:24:9b:0c:a5:e8:fa:d2:c1:20:3f:90:
09:8f:0b:6a:6e:01:12:ac:e9:b2:64:37:b0:e4:f8:
e6:9f:dd:65:b1:ff:47:b5:74:64:1f:84:38:28:90:
a5:94:c3:a9:6c:f5:d7:9f:78:25:de:fc:e1:42:6b:
2c:88:21:05:76:f0:a0:74:34:95:da:63:35:c1:6f:
75:f3:f3:ef:85:31:a1:ac:19:ef:1a:dd:57:57:03:
e1:53:91:41:a0:97:7f:ab:2b:0c:91:4a:3b:1c:08:
ab:82:08:0b:ad:3b:a8:5c:70:dc:6b:fe:6f:44:ab:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.111.0/24
IPv6:
2a09:5d80::/29
Signature Algorithm: sha256WithRSAEncryption
6c:72:b3:71:42:12:07:f6:01:53:e5:a0:87:82:12:24:ce:04:
65:02:c8:ff:3a:82:33:e3:fa:08:bf:8d:73:75:87:21:40:72:
67:86:3e:80:37:1e:fd:58:c3:6b:4e:6e:b6:07:5f:45:c4:e8:
21:d4:de:ac:cc:fa:07:0e:1d:63:0f:e2:13:12:94:dd:84:0c:
0c:a4:5c:90:82:00:a3:eb:0e:12:fc:24:90:fd:07:fc:7d:93:
08:67:89:16:a1:2b:e7:5e:d2:d8:3d:b0:85:fd:37:a2:8d:ea:
c7:6d:e9:53:c6:ba:da:90:ae:5c:53:28:2b:6b:a0:59:fc:4c:
07:b8:3c:07:43:ee:93:e9:df:9c:5c:45:e5:40:da:3d:e1:88:
10:a5:5b:8c:b4:46:f6:88:a6:6d:ff:22:3a:4f:ce:c7:ba:4c:
4f:59:0d:af:87:c5:a3:86:4b:c4:b9:68:26:b2:c8:54:b4:40:
9c:37:0a:43:69:3a:6d:7f:a2:95:77:8f:62:2a:c5:e3:0b:ef:
0e:27:fb:94:b8:ff:79:5c:74:6b:18:46:cc:54:a2:85:e4:48:
29:67:c9:b4:75:8b:a6:39:5f:05:69:78:78:12:11:a3:5f:e3:
88:ba:1f:8d:0d:3f:f8:70:b7:e4:21:88:03:28:a5:31:42:ba:
34:f9:d3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:53:46 2026 by rpki-client