Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
File: lzDCc6-etVZkMIjkO-86ahgch8I.cer (raw, json)
Hash identifier: 2cFHytRwhTJ6KZ6WL1n+aMIQAcP+Zt1w24FdkzXHFP0=
Subject key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C464DE6E48ADDC367B185BA4F070E8D4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Feb 2026 06:47:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213124
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:4d:e6:e4:8a:dd:c3:67:b1:85:ba:4f:07:0e:8d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 10 06:47:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9730c273af9eb556643088e43bef3a6a181c87c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:3b:be:43:52:9a:2e:07:46:57:5e:ca:13:
c8:f3:72:d4:83:be:bf:2a:da:e7:ba:46:1c:a6:a3:
bb:49:8b:0d:01:b6:17:42:24:9b:92:e5:9c:d3:fa:
91:b4:64:52:f9:fe:e2:52:64:e6:95:3f:be:06:86:
09:b3:11:07:b2:0c:76:c0:33:ee:f8:5b:7c:be:7f:
02:e8:2a:69:b7:b4:0b:48:12:bb:3d:4e:6f:a8:49:
fc:82:ce:ee:bf:ea:df:c1:71:7d:18:cf:96:01:a6:
c5:87:13:0b:c2:a4:9a:7c:f1:5f:d1:5d:5c:1b:b1:
48:3a:bd:07:d4:5d:d8:8a:84:8c:f1:e7:de:fe:7f:
f7:43:25:81:c1:45:f9:dc:02:cc:6c:59:8c:d5:8c:
b5:ec:a3:88:ae:7a:d2:de:3f:96:c5:3a:f2:26:de:
0e:53:62:f1:f2:d2:fd:98:e8:ae:8d:83:f6:0b:c3:
8d:18:47:ab:2c:ba:e0:ec:65:04:23:21:0f:5a:89:
51:bb:15:79:c8:6a:26:ba:33:a5:14:2d:e4:1e:82:
f5:5d:94:e9:10:16:47:0b:43:33:53:6c:d8:55:f0:
58:7c:c7:9c:09:77:08:32:6c:93:71:a0:b1:e2:5a:
45:81:a6:62:ef:92:20:61:97:e6:3c:e1:07:75:c3:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213124
Signature Algorithm: sha256WithRSAEncryption
13:15:3a:11:37:ef:b3:c7:86:a9:6b:7a:3c:06:82:1e:3e:48:
8b:93:ff:97:e8:01:ec:cb:0a:72:a3:75:f1:99:85:b0:49:0c:
d2:f0:c1:14:81:9f:d2:4d:d3:8d:8f:f4:c7:86:dd:d9:12:e5:
73:e3:c8:d8:8e:8e:00:e1:79:41:93:6d:ca:90:b1:72:0b:e0:
ec:9a:13:53:04:a4:31:d1:4d:2f:f3:6e:80:7d:70:8e:e9:21:
57:bf:ce:53:a1:ac:fb:af:4c:b6:0b:34:1b:6d:2d:5e:e0:a9:
91:27:e1:f3:c3:3f:74:13:cd:db:94:31:f9:be:2a:64:6f:c6:
f1:9a:54:52:a7:17:e0:d1:00:b7:81:b5:5b:30:77:a4:20:bf:
3e:b3:07:ac:2d:5d:26:9d:1c:ad:96:e9:34:d1:60:d4:ef:a6:
70:99:3f:76:0e:cf:7b:8a:d5:09:b6:4c:57:90:13:30:cf:81:
d6:db:d0:c5:37:c0:03:cb:1a:25:29:10:58:d2:0e:0f:99:a5:
e6:06:d0:8b:f0:c2:06:c3:f5:26:ad:e2:d9:9d:be:b4:d4:ad:
1f:c8:be:72:6f:6a:f2:20:a6:f2:59:8d:92:94:66:b2:c7:a0:
a8:87:57:97:a3:e5:07:8d:ae:c7:1c:20:5f:67:45:49:9a:4f:
d9:34:22:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:58 2026 by rpki-client