Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
File: zf9bPNry6tG8MwlBG_lJLNmHr7o.cer (raw, json)
Hash identifier: SU4GYhAhm9BfQAKrenP2738RCFp3ys4OF7Q4jnREjhw=
Subject key identifier: CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7758C4A1BC1E0CEF1B0B01BBA1F07C0B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:17:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214217
IP: 193.246.128.0/20
IP: 193.247.112.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:c4:a1:bc:1e:0c:ef:1b:0b:01:bb:a1:f0:7c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:80:d0:05:84:c7:e3:c4:bb:b9:53:f5:b3:
86:c0:ff:dc:5a:91:4e:89:2f:93:63:f3:d4:ba:9b:
db:64:c8:5c:27:8f:83:8a:64:21:d1:a9:84:74:bc:
17:f5:d0:dd:13:67:82:ad:13:25:0a:73:c1:97:0e:
17:8a:0e:d2:85:ef:fc:71:54:e5:fc:85:10:e7:12:
48:99:90:1a:52:12:99:7d:a2:f2:8d:c4:6e:1b:4c:
f4:56:5b:78:2c:4e:76:71:8d:e4:19:ce:b2:dd:f8:
17:5f:88:7e:05:a0:43:3b:25:9a:fc:dc:58:20:f0:
5f:53:fc:3b:c2:22:43:12:92:58:ba:74:5a:10:35:
aa:6b:ff:10:9e:39:6d:03:d2:48:62:5c:ce:a1:f1:
5a:ac:0d:38:8c:90:cd:f7:29:41:c1:f0:33:65:df:
60:e9:f6:2f:38:23:64:7c:7c:bc:b9:47:bb:10:72:
d8:e3:a2:18:58:31:eb:cb:72:de:8f:53:22:19:8f:
90:88:85:be:b3:04:eb:c5:68:59:cc:68:4c:80:f9:
03:47:3d:e0:c3:61:3a:e4:53:16:7c:80:96:38:55:
b2:02:33:c6:ff:e3:2f:87:cd:ef:14:f2:6b:a4:4e:
36:54:d3:eb:8a:54:bb:22:54:04:60:0b:12:30:9b:
40:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.128.0/20
193.247.112.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214217
Signature Algorithm: sha256WithRSAEncryption
33:ea:0c:3b:2b:aa:5c:eb:ef:8e:04:d8:2f:7d:b3:ca:e2:d3:
cd:98:e3:73:fd:d7:88:f9:c7:2b:d7:33:70:8e:c2:da:05:d1:
4a:9e:0d:d2:59:3d:c2:74:5f:f3:4d:f9:73:1b:af:79:0d:dd:
e3:22:12:14:0f:b5:82:f8:51:47:22:ee:62:4c:a3:7b:0e:dd:
2a:a0:51:4e:b3:3d:b3:45:97:ec:9f:f1:57:89:46:0a:f4:bd:
3a:e9:44:35:bd:f7:96:c4:fb:14:be:aa:48:5d:e2:93:72:90:
29:b8:00:86:88:01:8e:04:0e:3f:56:6b:d2:b2:e5:ab:93:b4:
51:d6:c1:9a:92:7d:d7:88:1f:61:1c:4d:88:56:74:9f:b2:d4:
99:2b:54:40:82:51:a7:0d:26:94:83:e9:6d:a1:24:80:81:22:
8c:f9:79:f9:a1:52:cf:a5:ea:c8:51:c0:33:42:6a:45:58:18:
23:2d:1f:8e:d4:0e:51:e3:18:09:da:56:3c:e9:29:0d:0e:c5:
e7:ff:d1:98:23:80:e4:6a:07:93:53:b8:cc:21:b4:41:21:13:
1f:34:f8:7f:d7:22:ba:00:f7:15:99:e1:e5:18:be:1c:26:48:
e6:24:8c:bf:2a:14:6b:8d:01:9d:81:1f:2d:92:6b:bc:1f:5b:
6a:bc:33:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:52:48 2026 by rpki-client