Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer
File: TZkZWi_leH1dYCYBjDUY88HlABk.cer (raw, json)
Hash identifier: R6tujmnLfi/B2N9WXpASMcPoNMMkUT2zUBP2fTfWZe0=
Subject key identifier: 4D:99:19:5A:2F:E5:78:7D:5D:60:26:01:8C:35:18:F3:C1:E5:00:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA0DC0F890AC37A03FA2A10D8CA8C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213616
IP: 91.229.212.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:0d:c0:f8:90:ac:37:a0:3f:a2:a1:0d:8c:a8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d99195a2fe5787d5d6026018c3518f3c1e50019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:d4:55:ec:39:8b:91:57:3e:8e:18:19:8f:
6c:be:22:53:96:ee:6f:11:fb:87:43:bc:31:d6:50:
56:99:92:8d:f8:f6:c5:9f:79:ed:ea:dc:90:87:fc:
9d:41:f1:28:ae:52:a7:2d:f5:f6:88:22:40:5c:15:
09:a7:f3:bf:f2:41:07:2a:0b:2e:5a:1f:a7:80:80:
e2:b1:3c:39:2f:92:82:4c:ce:bf:21:c5:c4:9a:df:
38:6a:ae:dd:d6:4a:be:06:79:42:f7:80:00:61:dc:
c0:86:43:96:c0:a5:ff:c4:a0:46:04:80:34:3f:64:
3a:55:8d:e8:74:50:a6:fc:63:d9:fc:82:0f:8b:ef:
3c:38:d3:c3:5f:48:5e:4c:70:af:e9:d8:29:ca:09:
0a:e2:9b:89:2a:fa:6a:9a:fd:8a:90:9c:19:fd:ec:
6b:28:21:f1:48:ef:ed:5c:11:d0:5a:67:59:66:4b:
db:4f:13:de:b7:26:a7:d2:e7:b6:42:75:69:be:38:
cd:3f:23:67:d0:82:a9:df:58:97:32:c4:bd:49:f4:
17:5c:0f:29:6e:7f:45:61:d6:e9:b2:6e:1d:b7:46:
84:f7:f7:2b:c4:43:82:66:e8:b4:91:94:e3:a7:c0:
35:06:5a:89:ac:90:67:ee:c5:a0:5a:5f:67:18:cc:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:99:19:5A:2F:E5:78:7D:5D:60:26:01:8C:35:18:F3:C1:E5:00:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.212.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213616
Signature Algorithm: sha256WithRSAEncryption
a0:76:ee:48:a2:78:e7:bd:53:f6:df:2e:59:c2:9d:d2:86:43:
e2:78:63:0f:0b:40:64:7f:fb:e8:21:29:0d:2d:bd:75:41:3f:
03:36:dc:76:ac:9a:55:46:10:26:94:d0:f8:79:89:21:ef:b6:
f6:64:c6:7b:f4:d0:a3:66:d3:fd:9b:57:49:4a:6f:54:86:bb:
ea:da:2a:12:a6:b6:02:70:39:ed:bc:3b:a3:65:4b:21:ae:1d:
1f:84:92:eb:75:76:08:15:35:d0:fc:c7:b3:44:be:aa:3e:d4:
59:08:df:1e:95:02:59:27:d2:4e:9c:c1:bd:c1:59:49:a4:08:
04:c9:64:ec:ec:bc:3a:c8:71:b3:46:ff:64:f6:7c:a1:90:bc:
af:00:5f:cc:72:57:10:a7:02:2a:72:68:3c:39:54:ab:64:4c:
70:51:f7:2c:a8:9d:cf:4f:6a:bd:2c:42:eb:72:fc:74:45:d6:
34:f4:d4:16:18:09:b7:29:7b:86:90:db:fb:f0:fd:06:1b:95:
9a:6b:f5:97:99:9c:2c:cb:53:30:c4:a7:d2:3d:44:51:d0:ae:
18:73:94:bd:20:b4:72:f9:53:9e:5f:90:59:0d:7c:6a:73:34:
a0:71:de:b1:cd:71:61:bb:e5:4a:00:cf:4b:31:74:24:00:fa:
ff:d3:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:23:33 2026 by rpki-client