Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
File: _Zrjdhfz--SIgLIw_nx84PDcQcc.cer (raw, json)
Hash identifier: O9riFSdYbflPjlDfPGDNTB2f+f+uMtchm0MUSo4/Uj8=
Subject key identifier: FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79112161339C3274EDA5EDE41ECCBD26
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:18:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197505
IP: 46.255.128.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:21:61:33:9c:32:74:ed:a5:ed:e4:1e:cc:bd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7a:29:14:01:42:18:42:77:46:2d:cb:e6:76:
6c:df:7d:15:30:76:60:f3:63:c4:15:64:4e:01:01:
61:a2:3a:10:27:16:28:d4:c1:87:fb:b5:71:67:98:
94:18:4d:26:ee:61:f6:0c:65:db:30:05:9c:92:cd:
da:ba:43:f2:fe:1d:5c:f9:c4:8e:96:fa:49:f9:b4:
7f:7f:55:e9:8e:99:f1:d1:c8:b8:9c:e5:50:45:1d:
0a:44:65:a5:3d:d4:31:2c:78:50:2c:aa:a3:b9:0b:
63:9f:65:00:3f:d3:04:35:f3:ad:fb:57:a5:21:b1:
e1:d9:8d:c9:75:96:2f:a4:2e:8a:f8:12:a3:bd:ac:
f2:ba:8f:c5:da:44:18:dd:11:4b:67:5f:c4:fa:94:
f6:5a:0a:2c:c3:36:2f:a7:4e:98:d0:4d:b3:75:b8:
54:46:57:6d:21:1c:5a:9a:32:6f:f5:f5:10:c4:80:
40:72:4b:20:60:d7:69:8c:20:76:67:17:b2:9e:8b:
ea:6a:7d:c9:bc:ee:ee:19:7b:38:0b:c9:54:af:0e:
56:9f:b1:62:4f:1a:8e:3e:f6:a2:a5:87:33:01:d4:
47:f8:df:24:97:fe:bd:fa:27:d1:55:44:dd:11:50:
4b:87:ff:97:ff:45:d3:10:c2:c0:a1:d6:e7:bc:c3:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.128.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197505
Signature Algorithm: sha256WithRSAEncryption
33:71:13:9c:c1:e1:8e:3a:f6:31:f0:cc:73:13:37:f4:f6:cf:
f0:4d:24:83:7d:49:13:83:89:77:c9:cb:77:1d:d1:fe:21:76:
d3:d4:1b:fd:88:19:6f:32:0b:bc:b7:b2:b0:67:ba:8d:6e:7a:
e9:ba:d8:b6:8c:c9:21:38:69:74:cf:06:74:6a:c4:6b:2d:e1:
0d:82:b5:6b:53:63:40:e1:ea:3d:7d:84:26:61:82:0c:e8:2a:
ef:52:64:f9:59:00:d5:18:00:8f:03:b2:0c:c0:5e:32:ef:7f:
4b:10:ec:8e:d7:ef:d5:98:bd:29:8d:e0:99:d2:84:58:f6:66:
e9:23:94:c3:f1:74:3e:8a:46:42:99:72:13:f1:59:dd:a6:b3:
04:69:c4:20:80:5e:ea:4a:1e:52:74:71:2f:35:a6:55:7e:bf:
54:cf:1d:33:60:f6:f0:54:16:82:b0:fc:1f:5f:bf:69:b1:e9:
cd:71:19:76:3a:e8:57:7f:c5:19:a2:3c:2b:07:05:92:96:4a:
0a:a0:dc:c5:fc:f5:de:49:2a:99:da:75:c4:e9:69:0f:0f:f5:
ec:f8:b2:16:01:83:43:b2:b9:03:dd:ff:f5:6d:95:f1:67:14:
61:5b:97:98:a3:13:cb:67:07:b0:ea:c9:83:ca:89:29:c9:3f:
e4:40:00:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:35:36 2026 by rpki-client