Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
File: _ZTgRMvlw1KV-rxEWALakFgTtzI.cer (raw, json)
Hash identifier: r+qa8ywKVYF9V5tN5ErPWPS2BkFsZc0usGg8FloLI7E=
Subject key identifier: FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7910A1B6B7560BC516E8D3A905A39EEE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:18:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213737
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:a1:b6:b7:56:0b:c5:16:e8:d3:a9:05:a3:9e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd94e044cbe5c35295fabc445802da905813b732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:8a:9a:29:61:c4:cb:d3:ef:c0:96:d6:5d:
7f:34:20:9a:1e:b3:f8:76:1c:ce:43:d0:66:1b:2b:
7b:98:90:1d:3c:2a:36:82:24:78:74:5e:59:ee:87:
d7:79:fc:94:22:d7:67:7e:a8:bc:e1:a2:b8:6d:0d:
f0:29:47:af:64:b9:ac:41:da:10:38:b8:9d:22:0c:
77:0b:49:01:e6:1e:75:35:40:28:b1:c9:0e:3e:12:
d7:21:17:d5:80:17:10:ab:65:e0:8e:f6:1a:4c:50:
31:aa:2e:2b:56:e5:b8:75:1b:a6:96:54:0e:9e:53:
ef:bb:91:b6:1f:71:89:5e:9c:4f:9e:cf:c0:b8:c5:
15:82:83:e3:fd:57:e7:16:89:0a:1c:ef:72:c4:ab:
b6:ee:78:5d:b0:3e:b5:bd:4b:ad:f2:5d:79:4d:64:
95:e5:aa:cc:4b:56:29:4d:3d:a1:06:5a:d3:63:a2:
cc:50:0b:04:c2:fc:45:9e:5c:aa:c1:02:91:4c:a0:
84:91:ad:c8:33:b7:53:88:03:71:5e:5a:0c:af:b0:
5d:2d:5a:5e:d0:69:9b:19:e3:fe:06:3b:37:d2:e2:
f6:86:60:da:a5:7e:9c:98:e4:88:a2:29:d7:ba:c5:
95:e4:b9:08:73:ab:0d:6e:b2:12:da:0a:1e:10:66:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213737
Signature Algorithm: sha256WithRSAEncryption
a2:2c:42:b7:d6:21:6f:f7:f6:d4:45:27:5c:6f:ed:8a:71:b3:
d7:66:6d:35:25:39:61:6d:8d:f0:ae:26:c4:eb:54:a6:0e:9b:
f9:68:e1:17:53:2a:d4:eb:f4:63:b5:53:3b:1c:e6:17:09:2f:
64:36:a2:51:50:d5:70:54:85:d6:c8:97:29:d2:9e:00:07:71:
9f:82:c2:a0:09:0d:8a:99:cc:88:a3:91:fc:12:dc:3d:10:1f:
17:4c:51:09:80:80:20:3d:79:27:c4:0f:4a:1c:07:18:4e:27:
4f:84:70:82:36:5c:ad:d8:1b:c3:39:7d:3c:eb:2a:7e:87:da:
0b:09:c1:a5:8d:b4:0f:ab:e8:55:93:a2:44:0e:81:68:7c:39:
0e:56:eb:f5:48:df:76:e1:19:08:5c:af:ac:9b:a8:ff:75:dd:
7a:34:5f:a7:f7:fb:1f:41:08:18:57:c3:55:20:42:6a:af:45:
69:22:6a:88:35:c3:cc:03:03:6a:ec:c8:e0:9e:16:75:72:05:
76:d7:10:64:85:b2:c2:57:b4:46:9a:2f:d9:4e:1f:09:4e:91:
6a:82:30:6c:37:c4:2e:e6:89:04:1a:fb:e2:da:cc:cf:a0:eb:
41:8a:5a:59:77:7b:cf:3a:59:13:e1:a8:0f:1c:59:4e:6b:bb:
ef:14:7d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:50:32 2026 by rpki-client