Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
File: Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer (raw, json)
Hash identifier: M2lrhJr/uWHmYvPTe9nqhUk9CYI8lxWTKPGinjPKVTE=
Subject key identifier: 67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB19D489A53E773A85EDAACA9D875A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 8970
AS: 15851
IP: 156.17.0.0/16
IP: 185.205.152.0/22
IP: 212.127.64.0/19
IP: 213.231.192.0/18
IP: 2001:a48::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:19:d4:89:a5:3e:77:3a:85:ed:aa:ca:9d:87:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:15:5a:96:11:ba:be:08:88:8c:83:a8:93:
e1:42:c4:87:e7:83:9c:ec:51:e3:8a:4f:49:ab:bf:
a3:52:d4:cb:0b:f1:3b:f0:d9:f7:9a:0a:f0:5d:31:
fb:f1:91:07:a7:d5:b2:d4:51:20:9a:38:a2:4b:ca:
33:55:7e:cf:43:17:9a:a9:96:8f:46:c6:d5:23:e6:
55:06:bd:99:cd:e4:33:c5:9f:fc:da:15:f4:16:c9:
19:4f:f4:09:c6:da:f9:8c:f5:09:30:c0:85:c5:40:
14:6c:da:15:ef:90:80:4f:6b:a5:79:50:dd:5b:f0:
54:1d:a6:09:54:b7:a1:ff:86:d4:2e:3c:bd:71:4d:
fb:1b:ea:bd:8b:62:89:ca:51:d1:6c:f6:49:4f:57:
94:ab:99:3d:21:b7:2c:9e:99:22:d8:b9:95:d5:79:
e6:bc:b9:7b:9b:0a:31:4b:2b:9a:13:ef:a8:4d:fa:
cf:a5:a7:83:49:17:1a:85:e4:6c:7f:27:80:14:f0:
cf:38:ea:fb:fb:49:6b:d2:dd:5a:26:76:33:00:df:
5e:53:45:5c:fd:47:51:31:5c:d1:ec:79:eb:91:32:
2c:99:32:3f:0d:8c:fa:97:94:b0:5a:33:39:2d:2f:
f7:04:63:ec:da:41:c3:93:8a:fc:80:4f:46:af:3f:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.17.0.0/16
185.205.152.0/22
212.127.64.0/19
213.231.192.0/18
IPv6:
2001:a48::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8970
15851
Signature Algorithm: sha256WithRSAEncryption
31:0a:55:a8:ca:29:45:0a:aa:89:08:95:9c:32:66:fd:ba:e3:
70:5a:dd:8c:4f:12:fc:fb:2f:5d:81:da:e6:2f:30:ef:ff:5f:
03:9b:ac:45:f6:83:4d:4d:d5:9f:e2:e7:ae:b8:41:f1:7f:2b:
2b:61:40:ac:e0:ae:c0:5b:d1:af:b8:9d:b3:64:cb:87:e5:08:
65:6c:53:17:87:6c:61:ff:c1:b7:c6:6d:ac:65:d8:c0:af:06:
11:6d:8a:54:5f:0d:22:db:9b:ae:64:6e:60:13:c2:c5:0d:c3:
69:e7:bc:59:16:2d:3a:16:27:48:9c:d2:fe:ed:66:b6:b7:a6:
e6:46:45:c0:cb:ca:7b:6b:b7:ad:2d:18:e7:bf:38:1f:9b:b9:
2a:ef:8a:b1:b2:e2:36:2c:a9:b1:df:e4:ab:a2:82:34:9e:c6:
a4:9e:a7:9e:6c:7e:0f:96:01:6d:aa:d1:86:78:f3:f2:0d:a9:
92:30:83:58:ff:b9:2b:7b:bc:9f:cb:b8:6d:ef:82:0f:65:7f:
7d:85:6b:72:22:8d:e1:a5:32:83:bb:72:02:81:02:9f:df:a9:
6f:de:ab:86:b7:1d:d7:42:91:80:ed:e7:b0:82:5e:c0:7e:49:
65:e3:87:27:6b:8d:c0:04:b7:56:4a:6a:67:ec:c9:fa:3c:55:
24:e1:63:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:43 2026 by rpki-client