Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
File: zIiKpmyEAKHmQJxdzFDr17jkMF0.cer (raw, json)
Hash identifier: iPRkSZUg7jIrBMSkBh9iuuzJbJ5xIa5OtBm+eryxd70=
Subject key identifier: CC:88:8A:A6:6C:84:00:A1:E6:40:9C:5D:CC:50:EB:D7:B8:E4:30:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D8672B45E58EC6DE7BC414C2EA2FD3BB0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Apr 2026 10:45:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203480
IP: 91.201.28.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:72:b4:5e:58:ec:6d:e7:bc:41:4c:2e:a2:fd:3b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 13 10:45:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc888aa66c8400a1e6409c5dcc50ebd7b8e4305d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:a7:ca:2d:34:05:6a:99:49:f5:1e:27:48:
66:05:7d:c9:d7:9b:58:14:79:5b:bc:5c:8a:28:1d:
be:a5:28:b8:ea:49:5a:a2:5c:d0:97:d9:75:ac:c4:
25:25:9d:40:72:3c:df:de:7e:47:c7:74:ab:58:cc:
0c:49:6a:30:3d:7b:54:06:52:c2:a3:55:d9:01:db:
b8:74:fe:74:72:5d:d1:32:2e:72:95:14:79:96:7d:
4a:ae:b1:aa:79:95:2d:ba:3a:e8:d4:0b:f6:e6:ed:
40:a1:6c:6b:c6:74:2a:ef:89:7b:b0:98:d6:ea:7b:
fe:c9:1e:1e:84:72:e1:cb:1a:28:ce:9d:0f:98:60:
be:50:34:61:7a:38:20:08:fb:1d:15:f3:b6:7a:6c:
af:b2:bc:72:47:26:36:af:89:96:15:19:4d:d7:e8:
1e:5e:41:f1:0f:2c:ae:0e:1d:8f:74:69:b4:50:cc:
0a:a3:e6:a1:77:69:c8:32:73:55:12:b7:83:d1:db:
c2:58:88:ce:c9:a7:c0:cf:72:87:07:77:2b:0b:7f:
fe:84:e7:5c:f1:4c:fe:d4:5f:d9:eb:f1:ac:61:36:
08:a9:01:76:ca:92:73:9c:8e:82:c6:7a:8f:5e:2f:
13:d8:ab:36:dc:b1:cc:5c:37:f6:5c:57:f2:41:06:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:88:8A:A6:6C:84:00:A1:E6:40:9C:5D:CC:50:EB:D7:B8:E4:30:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.28.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203480
Signature Algorithm: sha256WithRSAEncryption
75:ac:67:8b:87:90:13:72:4a:d3:3e:d9:16:ab:cb:52:fd:6e:
74:93:6d:e0:0a:f5:ec:83:9b:9e:67:55:f8:f0:79:e3:6d:e6:
61:91:ad:a6:d4:56:e1:b3:78:17:d1:56:5e:1b:7a:b4:c3:e5:
ab:cb:e0:99:a4:51:0f:37:4b:98:75:dd:57:f1:b6:7f:0b:6a:
1b:a3:10:df:00:f1:43:5f:d2:21:da:56:58:e7:fa:f5:e4:e2:
6b:d5:41:52:72:ea:f0:f5:d5:ff:e5:98:42:66:10:8d:85:e7:
0a:9a:9c:20:5b:2f:a3:96:7e:d4:79:ca:73:b6:9d:f8:b1:a2:
0b:48:07:59:cc:07:34:f1:cd:cf:9c:50:bc:a1:a8:62:ba:0f:
17:b9:a3:e6:c6:d9:9c:57:68:df:6f:9f:7b:7c:5a:5e:ed:df:
b4:6b:28:6a:15:d4:93:bb:4e:4c:92:47:2b:dc:89:b7:0c:3e:
b6:99:bc:36:21:a1:67:bb:b0:a3:68:2d:05:c6:91:29:a8:cb:
73:9d:03:b4:b5:c2:26:42:82:a9:c3:74:06:0b:d6:d2:ff:1a:
21:bf:de:54:3a:18:96:22:9a:52:2f:4b:8a:a8:96:b9:eb:0b:
5e:24:ec:22:70:66:b4:39:38:3d:e8:2c:6c:0c:70:11:11:a0:
fe:32:77:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:21 2026 by rpki-client