Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
File: ZNn7Pyyv7VlOBore3HipfIgpwQE.cer (raw, json)
Hash identifier: Tre1wbZxNfWEizil256GiLmDU/mPAKBQGpCPZIu4T54=
Subject key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C9A8CEFDA608747618E31DE90410E877D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Feb 2026 15:24:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 29665
AS: 197704
IP: 5.63.188.0/23
IP: 91.189.72.0/21
IP: 93.157.64.0 -- 93.157.68.255
IP: 93.157.70.0/24
IP: 193.200.190.0/24
IP: 195.242.138.0/23
IP: 217.114.34.0/24
IP: 2a0d:a040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:8c:ef:da:60:87:47:61:8e:31:de:90:41:0e:87:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 26 15:24:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:7f:d3:88:cd:17:a3:f8:4b:79:c1:42:9f:
77:fa:29:a0:7c:ad:2a:7d:40:79:3f:da:41:04:4d:
3e:66:30:e5:5a:06:16:68:5e:67:39:86:1a:e6:f6:
93:18:11:57:c8:1a:30:0e:fa:e2:80:ed:0c:24:25:
db:ea:75:23:2c:f1:b7:c0:29:03:6b:1a:1f:2a:16:
b7:47:7e:6c:46:72:db:8c:8e:af:77:0b:dc:eb:cd:
0b:b2:02:3d:e3:73:ed:a4:62:a9:91:0e:b8:d3:6b:
94:bc:89:bb:f6:6c:a8:8a:ac:91:ef:89:cd:c2:0d:
33:a0:ee:d5:08:27:96:3f:40:6d:d0:48:aa:8a:93:
19:5e:81:b3:d8:e6:e1:f3:b1:09:26:a0:d3:53:77:
5d:e0:66:6b:97:01:17:a2:59:92:9d:1e:a1:50:e3:
f5:40:9a:cb:5d:d3:40:f9:5c:75:7f:36:ab:cd:fb:
05:07:b1:5c:23:4f:b4:e6:9e:01:23:89:18:f7:02:
28:5c:a5:49:7f:a7:d0:2b:7f:37:c2:e3:c1:41:a9:
65:56:d2:a5:fa:13:26:d2:54:6d:29:9a:82:0c:f1:
14:d7:79:d0:af:52:15:67:9f:be:5f:0a:ee:20:56:
72:a2:54:df:50:f2:47:eb:eb:c9:43:5e:ad:78:d8:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.188.0/23
91.189.72.0/21
93.157.64.0-93.157.68.255
93.157.70.0/24
193.200.190.0/24
195.242.138.0/23
217.114.34.0/24
IPv6:
2a0d:a040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29665
197704
Signature Algorithm: sha256WithRSAEncryption
34:9f:a2:b0:ad:ed:47:a2:e7:80:ee:0c:7f:5f:20:6e:3f:7f:
32:c4:61:f7:48:50:b7:fc:70:fd:3b:39:54:12:c4:e0:11:6c:
19:e2:c4:12:e7:ea:64:2e:ef:c3:5b:c0:33:c4:3a:f5:4f:67:
3c:18:68:db:6e:df:69:fa:0a:d8:42:08:0b:bb:0d:a5:d1:79:
97:82:98:bc:3e:27:50:66:6c:39:73:16:00:06:8e:dc:b1:06:
14:56:53:bf:e6:70:be:ba:37:f9:a5:95:02:3b:d6:6e:72:b9:
72:87:8b:41:98:8e:a0:4d:63:de:53:44:80:b8:3c:70:7b:45:
c8:fb:45:aa:c9:93:fd:48:fc:12:08:0d:b6:4e:f3:d3:91:f6:
99:0a:08:eb:cd:f1:11:55:00:71:e7:e9:9f:0c:57:16:32:b7:
4a:1b:29:9b:d7:d7:21:c4:d7:21:c2:ac:9e:fb:2d:0c:25:81:
02:17:e1:20:fa:d4:c3:17:4d:27:96:7d:a4:3d:e5:54:2e:23:
ee:5d:59:22:77:b9:ab:df:9f:56:d0:c3:ed:c9:16:f2:9a:41:
6d:e2:99:69:b0:9a:2b:83:1b:20:85:02:69:90:10:c4:b1:73:
e3:4c:7c:23:91:9e:54:7c:9b:79:82:34:a2:21:05:6d:c5:3c:
50:a0:3e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:39:14 2026 by rpki-client