Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
File: ZRUuTmwkXAP-zfpIv5E5bL7-168.cer (raw, json)
Hash identifier: GlSz3BazS2W+gNbWM1coyEFTZ2UmRodE2h5VYEZf1cI=
Subject key identifier: 65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C8FB3830C6AA75B71C2E11A10B7753F84
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Feb 2026 12:50:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.192.60.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:b3:83:0c:6a:a7:5b:71:c2:e1:1a:10:b7:75:3f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 12:50:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:8d:4f:ac:e5:e9:24:f6:65:93:b9:be:e3:
ec:be:1a:db:7e:94:3c:4e:d1:ae:94:9e:63:e9:e7:
ae:09:a4:39:e2:0a:20:27:68:eb:dc:cc:40:88:7c:
e7:d5:85:a1:6e:e2:f9:ed:74:69:5e:e5:06:01:f2:
59:d3:64:cd:30:ba:3f:9d:b9:98:82:fd:8c:31:c2:
65:79:40:10:ee:e5:a0:2d:ea:8a:2b:67:a9:d9:16:
4f:f4:24:3e:1d:68:9d:00:39:91:2c:f6:d1:9d:2f:
f2:b3:0f:a2:2f:7c:ea:c3:b6:23:b8:f2:f1:c6:db:
bb:c2:65:d8:5e:ad:6d:98:e0:a8:88:3d:a9:1e:79:
0e:32:63:57:0b:6d:1c:f7:ac:98:70:80:34:4f:3b:
29:d1:c4:8a:84:8b:84:98:ff:d6:55:f7:9c:b9:96:
62:b3:98:97:2b:c4:53:3c:51:de:c6:b6:e6:df:c3:
63:69:5e:89:16:6f:72:1a:15:2f:ee:1d:2a:c8:b9:
e8:dd:d8:53:c6:12:39:e5:fd:bc:af:6a:34:4c:d3:
b7:4f:b9:a7:b5:f2:34:ae:79:c1:e3:ce:22:45:15:
a7:1b:86:7b:c3:19:20:d7:7f:19:f1:e8:c9:4e:88:
3b:1f:ca:73:b4:4a:49:e6:26:5b:45:eb:2c:67:74:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.60.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:83:a8:06:ab:4a:37:a3:42:1e:cf:bd:04:14:85:0c:08:d0:
43:bb:0e:a7:1a:78:3b:46:b1:71:16:60:18:59:51:36:a0:af:
27:eb:58:07:e9:78:37:30:f8:d2:7c:e2:6a:cc:20:f1:ff:a7:
5e:c8:97:73:ea:b2:a6:18:56:f7:d2:d5:91:c1:e6:8f:f4:62:
9a:92:55:d9:da:2e:51:08:32:88:35:bb:e9:d6:36:82:3e:14:
9b:b1:31:9c:36:60:a1:10:b4:31:2d:b0:bb:c3:0f:a5:7c:76:
dc:70:9d:9a:ea:47:2e:14:cf:b4:4d:52:33:58:3b:51:0f:1a:
b2:cc:12:34:db:3f:b8:76:40:a6:bc:a6:fb:1f:c6:aa:9c:ce:
dc:ec:89:ce:09:d5:fa:3b:17:45:15:b7:c9:2e:cc:19:e1:ec:
b6:b8:23:6b:73:59:d4:00:28:93:19:7b:60:37:1b:bc:12:f9:
cb:d9:2a:fd:4b:24:3c:ae:e0:ca:ad:6f:f0:1c:af:3f:da:41:
5d:2e:f8:dc:84:b4:57:a6:d3:d5:85:59:67:34:df:81:52:e0:
6e:42:de:55:89:09:87:84:4b:12:7d:b5:bf:e9:e3:dd:f1:1d:
9c:a1:04:19:55:dc:f3:5b:db:09:e5:82:61:88:e4:92:ba:95:
e0:eb:7c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:35:28 2026 by rpki-client