Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zkyVbVLdh2NjwhME-cAl8H1fJjE.cer
File: zkyVbVLdh2NjwhME-cAl8H1fJjE.cer (raw, json)
Hash identifier: MzobMikCtNbMBNjnCH1/XEq8c7JAdXWPBCt+JJNKqLE=
Subject key identifier: CE:4C:95:6D:52:DD:87:63:63:C2:13:04:F9:C0:25:F0:7D:5F:26:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B35E156F5A3F191534E57473216D6B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:18:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215500
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:e1:56:f5:a3:f1:91:53:4e:57:47:32:16:d6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce4c956d52dd876363c21304f9c025f07d5f2631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:fa:b4:84:2d:82:7f:01:ae:07:6c:6b:2a:
36:b3:23:fa:4d:3a:22:9c:4e:55:7d:11:7a:c6:83:
c5:0f:2c:80:b4:ce:47:87:13:1a:f1:0d:07:a1:03:
08:a6:4c:55:82:74:5b:af:d1:06:b7:dd:15:73:3d:
a2:1a:a1:ac:a1:04:2c:b7:a9:42:b0:73:8f:3d:16:
2b:1d:84:80:71:ee:ad:3d:8f:f3:b1:a3:5d:26:6a:
c1:5c:a4:56:f9:cb:1d:4d:a0:5c:aa:fb:a7:29:49:
58:c2:2f:f8:25:bf:e8:bf:e8:c1:c4:a1:3f:f6:2b:
89:c1:ff:34:82:ba:e5:67:41:2b:8a:24:68:72:f2:
f3:2a:71:a2:fc:cb:31:d5:d0:4a:cb:76:d6:29:05:
1b:2d:b9:99:e8:ba:4b:3c:72:6d:c2:ee:c1:f9:88:
1f:02:18:b3:fe:d5:35:92:00:3b:88:3e:15:45:c6:
c4:77:dd:f1:f5:a8:86:6f:e9:42:d0:40:b5:3c:a2:
58:ab:6b:88:6c:7a:77:8b:07:37:84:dc:fc:8d:da:
a7:09:6e:d6:4f:d2:61:c5:6a:7f:f0:45:c6:a5:f8:
2a:79:ea:f1:3a:46:71:ce:24:35:86:9b:c9:72:4a:
7a:36:81:cb:14:2a:8e:14:b9:90:d1:49:7d:d3:11:
b2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4C:95:6D:52:DD:87:63:63:C2:13:04:F9:C0:25:F0:7D:5F:26:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215500
Signature Algorithm: sha256WithRSAEncryption
64:69:f2:e1:31:0b:24:36:da:e1:c7:42:a9:1b:4b:76:56:77:
0e:18:f1:a1:63:53:34:ac:6b:56:f9:e0:12:4a:5d:b5:c8:ab:
65:48:93:b8:05:b9:6f:84:00:3b:39:3a:f7:03:22:33:c8:e6:
00:9e:97:e8:c0:3c:c7:84:41:67:ee:20:33:f8:15:bc:c3:d9:
e0:36:e3:47:52:75:a0:3f:ed:8d:6b:27:d8:fb:12:c5:f8:2f:
8b:e1:3c:c8:5c:da:60:73:78:cd:be:ee:bc:eb:0f:a0:54:83:
f5:51:5b:ce:7e:fc:a3:ca:18:a9:fd:42:08:fd:bd:ad:b3:59:
04:fb:f7:bd:2b:a4:67:a5:56:0b:4e:6e:16:05:27:39:5e:bb:
97:08:b7:ff:5c:a5:59:58:60:8b:f6:4d:c7:02:88:23:e4:bb:
b2:84:fb:7b:22:bf:e6:d7:62:db:e1:8b:5a:ba:33:03:cb:fc:
5e:1b:00:3d:21:5a:a6:91:9f:96:08:0a:3a:ec:a1:ed:16:f3:
26:1a:b6:a3:ba:4e:e8:fa:f3:4c:81:c4:17:68:c1:60:36:ea:
1c:85:44:33:91:62:8c:64:a7:5d:af:74:93:7e:71:33:58:89:
00:e4:7b:74:37:19:6a:3a:48:6a:2f:54:91:94:47:57:db:14:
9d:73:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:37:57 2026 by rpki-client