Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer (raw, json)
Hash identifier: dtaneVtRJ1LtsI3CsoaB05z7TiZfqtvz1b2u5eAdBgo=
Subject key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DC9F751E2D8C3C60DE50216B83B4BF8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:19:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205100
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:f7:51:e2:d8:c3:c6:0d:e5:02:16:b8:3b:4b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:0b:64:79:86:02:84:7b:ec:9f:4b:f8:a6:
6e:82:1b:44:02:7b:b7:c2:16:f0:9d:ef:47:09:1d:
24:8f:10:ca:0f:a3:f1:13:72:b2:f6:c2:7b:74:0a:
a7:88:61:c3:ac:c5:37:4b:47:b6:c3:65:5a:04:96:
7a:4b:04:90:d6:a4:6f:02:a2:63:0d:93:2d:ad:9b:
9d:57:dc:d4:b1:59:08:9a:ce:cf:bf:80:4d:a4:e3:
05:f9:33:ec:8d:40:0e:ce:55:b7:cb:45:b8:a3:2d:
17:bf:11:17:24:83:fb:20:24:e1:18:99:e8:ec:bd:
8f:41:9a:cf:80:47:ad:37:63:3f:df:2a:cb:1d:32:
75:ee:b6:b3:70:fb:33:db:82:45:e8:48:8f:ea:b1:
f4:7d:1e:2b:c4:6d:a3:89:27:f8:42:67:3a:a7:b1:
ed:58:a9:a1:80:28:53:d0:4b:0d:f5:13:f0:32:76:
c5:69:d8:04:70:23:6a:54:7f:37:a8:58:8f:f0:bd:
d5:10:fe:a8:cb:05:6c:21:03:74:57:8c:2a:16:98:
fa:9b:83:c8:6e:87:89:e9:d2:a2:6c:86:4f:8d:a2:
3d:c5:29:bd:0a:f1:6d:ff:c4:1b:db:4b:dc:74:e5:
01:fc:42:27:e8:2e:34:06:14:e3:c8:7c:f9:9f:a7:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205100
Signature Algorithm: sha256WithRSAEncryption
21:cb:8e:b1:85:42:71:87:c3:88:3e:35:de:19:6c:76:7c:15:
33:85:d3:b9:58:c2:f0:25:7b:73:1e:71:fe:c0:24:eb:85:c9:
47:08:db:99:c5:b5:da:27:bc:36:3d:0d:97:7e:38:aa:ff:37:
c2:65:48:72:1b:ad:42:66:f1:91:7e:42:54:7d:10:e9:68:f3:
e1:58:70:a9:18:4c:f4:7d:16:5d:64:63:45:f5:9f:72:d9:bd:
92:d1:2c:f2:6d:42:45:e5:8a:44:4b:a8:f8:68:b1:70:0f:5f:
03:7b:bf:0a:28:13:0b:3c:2d:04:70:d2:38:51:24:42:ce:88:
34:0a:67:2b:28:29:10:ec:59:8e:fb:1c:59:ae:cc:e6:56:13:
a0:3c:cb:1c:55:9c:1b:e9:1a:1d:9f:e7:97:ee:2e:8b:ad:d2:
c0:6c:12:a0:1f:09:d5:59:34:78:12:d8:b4:ac:8a:7f:85:2c:
6d:9b:08:88:2d:47:74:d9:9a:89:ed:e3:14:95:94:6e:cb:e3:
d9:75:c3:a3:eb:69:6b:e1:5a:ae:5d:74:73:e9:96:70:ce:b4:
bd:e3:45:f2:1d:93:92:ba:46:ff:b8:86:98:9a:85:98:0a:73:
b6:99:21:34:c3:93:c5:97:c7:10:e7:a2:a5:58:a9:4f:f2:95:
04:f0:65:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:39:22 2026 by rpki-client