Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
File: ZNFx-TzBynFvyAbjalWFLN9PHBw.cer (raw, json)
Hash identifier: rglffLPKc9UsJAeiNNYKrZ9v0yyzvCVUPjvpE+uM+7o=
Subject key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C6BE788469689F783639942B721555
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:17:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a0f:6a80::/29
Validation: Failed, certificate revoked on Fri 02 Jan 2026 08:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:be:78:84:69:68:9f:78:36:39:94:2b:72:15:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:aa:58:7c:ed:4d:97:92:28:f0:53:c3:b2:
45:bf:36:46:cd:7e:c5:d7:b0:2e:2f:49:11:c0:ed:
94:04:8b:83:14:98:cf:62:23:9c:84:72:e1:4d:58:
02:12:23:f0:42:b4:26:3e:6e:78:cf:e1:7c:f5:55:
38:9a:ee:ac:98:b4:33:bc:2f:3f:df:70:a0:e4:b1:
95:4d:61:d3:ab:e7:a0:c5:2f:68:4a:19:a4:56:bf:
64:d2:30:77:a5:03:7a:78:fa:15:75:76:c7:ac:35:
62:4e:ba:c6:ca:88:5e:25:38:7c:77:e1:ec:bd:20:
01:7c:e4:c6:fe:82:00:cb:af:32:65:00:95:9e:01:
94:d9:bd:d1:bd:44:89:1d:e6:68:de:e9:a8:2f:86:
80:a5:db:10:c9:d0:85:19:09:1f:8c:c9:13:4a:63:
24:28:7a:e1:60:5c:a3:5f:42:bf:70:b6:2c:7d:47:
6c:5c:8d:ed:3e:24:b7:7a:03:88:7a:e9:0a:24:75:
27:78:94:39:67:a5:84:19:d3:e7:e1:8e:ab:3e:a6:
ad:97:5e:4b:cf:17:23:2a:45:33:ee:53:0f:a6:20:
e4:a7:93:25:6e:70:a3:0b:11:1a:c7:02:27:90:20:
a0:58:ab:73:0d:42:0f:db:92:b8:13:c9:76:7a:05:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6a80::/29
Signature Algorithm: sha256WithRSAEncryption
9c:a9:f2:f8:6b:ac:88:fd:e9:4d:01:8a:19:4a:e2:a7:eb:49:
45:07:08:1f:ab:d2:a2:5e:05:66:d4:93:bd:d4:3d:dc:f2:10:
58:ef:c0:75:4e:1a:e5:ae:d9:52:01:4f:21:ff:75:9d:0b:da:
e6:fc:8e:f3:e9:85:a6:93:ee:97:f7:6c:ff:1f:00:42:2f:cd:
37:03:a4:a0:b0:1b:d8:8e:02:88:5a:be:d0:85:39:f0:4f:c6:
a1:ee:7d:87:3a:51:db:b8:93:c3:cc:20:95:15:8b:66:d9:96:
2e:8d:eb:dc:d0:f0:05:ea:66:b4:6c:83:a2:f7:86:05:61:71:
5f:2e:0a:48:83:52:ca:fd:18:c3:27:09:8c:cb:44:a0:19:89:
33:80:56:c9:6d:dd:07:3f:00:d8:d5:84:ad:3b:bf:67:8a:34:
f7:ad:8e:29:2f:c1:e0:63:5b:0c:d6:41:72:a2:87:3e:58:a8:
e0:4a:8b:c6:52:ae:ee:3b:df:f6:7b:a3:2f:1b:b6:e9:e8:56:
8c:33:f1:df:81:43:cc:93:a4:cd:29:e1:4c:5c:c3:c9:1a:ee:
ff:a7:19:11:50:f0:1c:de:e4:f4:59:3c:8e:5e:1e:61:1a:d1:
fb:fa:aa:6d:6e:2b:5f:f8:77:e8:b9:5f:88:3d:ba:f4:e0:d9:
ba:9b:7b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:51:56 2026 by rpki-client