Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
File: z81z-CwmDahzhtz3vibVxURVJvo.cer (raw, json)
Hash identifier: oPjzuY/00CzVnxUfPJ6jZ6UjUe+bX8v/HSM0VmNGuPI=
Subject key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C89A3A23EB91B0FDD1E4465109B6C9EEE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 Feb 2026 08:35:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35246
AS: 49181
IP: 2.57.36.0/22
IP: 45.144.40.0/22
IP: 2a09:d2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:89:a3:a2:3e:b9:1b:0f:dd:1e:44:65:10:9b:6c:9e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 23 08:35:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d2:89:89:6a:21:30:e1:69:69:fc:fc:7b:ef:
cd:f3:3f:cb:38:46:ed:76:b7:73:60:f5:e9:aa:c3:
4c:5a:82:7e:33:ad:aa:02:ae:4f:bc:3f:5e:b1:ef:
94:41:93:e7:2d:df:a8:32:d7:de:d0:ae:5c:eb:59:
25:62:97:4b:c7:71:cd:c9:b9:70:1b:0a:36:4f:0c:
62:1d:de:94:a7:d6:77:63:e0:08:ad:f8:d2:20:5b:
c7:2d:7f:a1:a7:92:24:35:24:fe:8f:c2:0e:89:2c:
c6:d0:1e:07:a1:ef:3d:16:c8:54:92:2a:08:98:ce:
cd:05:98:1a:d3:1d:8e:f5:68:49:22:b1:f4:6e:91:
6d:5e:82:ff:6c:ab:ee:29:3a:7a:89:b7:cb:0d:2b:
19:19:5b:36:9f:51:b1:8a:5e:79:47:2c:7b:0a:11:
82:da:cf:4a:25:11:e7:13:dd:be:a1:ff:19:83:cb:
9a:4c:2f:a0:82:eb:b7:d1:e3:35:ae:e5:c3:f8:15:
c8:3c:ee:e1:90:dd:48:b3:09:dc:d4:28:28:0f:ae:
a7:ee:f8:fe:64:f2:ea:d3:e0:bf:64:74:fc:9c:df:
57:bf:21:35:15:8c:df:fb:e2:a0:b0:e7:5d:c3:be:
af:27:10:ab:55:e1:4d:f1:08:52:86:57:8e:04:5d:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.36.0/22
45.144.40.0/22
IPv6:
2a09:d2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35246
49181
Signature Algorithm: sha256WithRSAEncryption
59:fa:08:a5:85:18:62:59:57:30:61:d4:b6:be:9c:7c:7f:bf:
ee:9c:48:5e:5d:ca:35:61:64:1b:6d:d1:8d:87:9c:73:e0:40:
ef:08:5d:dc:67:87:ec:cc:dd:64:c8:3d:17:7c:3b:70:d2:81:
a1:e0:db:78:fa:37:76:33:f7:fc:af:f8:28:3b:c1:b3:f3:19:
1b:92:a9:60:06:e9:81:d2:fc:cb:8e:96:f0:fc:e2:84:98:c8:
01:53:5f:af:ba:06:a7:51:ba:62:3a:1c:72:c9:01:b6:88:8c:
89:ac:de:61:c9:47:25:c4:e5:8f:4a:c9:d3:5c:23:77:c0:d7:
3f:88:d0:0f:28:e2:2c:9f:3d:0e:74:f9:a9:ff:1c:57:60:12:
bf:d1:09:1f:41:40:97:23:07:e7:4f:5d:4d:84:00:80:32:ee:
d6:70:66:6a:63:1e:36:8b:35:ea:45:a6:c8:02:fb:dc:97:ef:
a5:f4:2e:65:43:22:db:17:38:f6:f4:82:10:56:d4:f1:99:2a:
eb:f8:64:e1:2c:9c:d6:81:7c:7d:c5:f6:e8:98:3e:3c:fa:a6:
1d:7d:44:da:af:68:cb:d1:b7:f8:55:0d:e5:5a:ae:d5:c1:2b:
95:e7:33:02:10:b4:33:19:4d:ad:60:0d:66:fa:b7:92:79:a5:
85:67:89:04
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZyJo6I+uRsP3R5EZRCbbJ7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjIzMDgzNTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmNkNzNmODJjMjYwZGE4NzM4NmRjZjdiZTI2ZDVjNTQ0NTUyNmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69KJiWohMOFpafz8e+/N8z/LOEbt
drdzYPXpqsNMWoJ+M62qAq5PvD9ese+UQZPnLd+oMtfe0K5c61klYpdLx3HNyblw
Gwo2TwxiHd6Up9Z3Y+AIrfjSIFvHLX+hp5IkNST+j8IOiSzG0B4Hoe89FshUkioI
mM7NBZga0x2O9WhJIrH0bpFtXoL/bKvuKTp6ibfLDSsZGVs2n1Gxil55Ryx7ChGC
2s9KJRHnE92+of8Zg8uaTC+gguu30eM1ruXD+BXIPO7hkN1Iswnc1CgoD66n7vj+
ZPLq0+C/ZHT8nN9XvyE1FYzf++KgsOddw76vJxCrVeFN8QhShleOBF2vtwIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFM/Nc/gsJg2oc4bc974m1cVEVSb6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzQwYWRl
MC05OGRhLTRhYTUtYjgxNy02ZWRjMWIyMjU2MjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNDBhZGUw
LTk4ZGEtNGFhNS1iODE3LTZlZGMxYjIyNTYyNS8xL3o4MXotQ3dtRGFoemh0ejN2
aWJWeFVSVkp2by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCAjkkAwQCLZAoMA0EAgACMAcDBQMqCdLAMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCJrgIDAMAdMA0GCSqGSIb3DQEBCwUAA4IB
AQBZ+gilhRhiWVcwYdS2vpx8f7/unEheXco1YWQbbdGNh5xz4EDvCF3cZ4fszN1k
yD0XfDtw0oGh4Nt4+jd2M/f8r/goO8Gz8xkbkqlgBumB0vzLjpbw/OKEmMgBU1+v
uganUbpiOhxyyQG2iIyJrN5hyUclxOWPSsnTXCN3wNc/iNAPKOIsnz0OdPmp/xxX
YBK/0QkfQUCXIwfnT11NhACAMu7WcGZqYx42izXqRabIAvvcl++l9C5lQyLbFzj2
9IIQVtTxmSrr+GThLJzWgXx9xfbomD48+qYdfUTar2jL0bf4VQ3lWq7VwSuV5zMC
ELQzGU2tYA1m+reSeaWFZ4kE
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:31:24 2026 by rpki-client