Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z96OLhmBrtyT4YXo_v5uNJWQW-4.cer
File: Z96OLhmBrtyT4YXo_v5uNJWQW-4.cer (raw, json)
Hash identifier: FGGdN/szR7GIjAPi2ux4tsekRK0m2qpue74d8QjtlC4=
Subject key identifier: 67:DE:8E:2E:19:81:AE:DC:93:E1:85:E8:FE:FE:6E:34:95:90:5B:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C11BE686C1A666B7FE29BC95A81286D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:18:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212743
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:be:68:6c:1a:66:6b:7f:e2:9b:c9:5a:81:28:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67de8e2e1981aedc93e185e8fefe6e3495905bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:67:9c:6e:7f:49:fe:c8:64:8a:e9:2e:78:
9d:bb:02:df:84:70:99:97:81:e2:ea:d7:fc:c4:78:
ba:a0:7a:73:bd:b6:9c:7a:b0:59:a0:30:af:e4:92:
f0:e9:89:37:f1:9b:14:a5:6e:0d:b3:18:d3:7e:e1:
2f:97:80:54:44:95:b9:1b:e8:97:57:96:b5:fe:b6:
a4:c0:22:7a:f1:54:d2:b2:08:82:d0:6c:f7:37:b2:
d5:88:04:db:64:eb:66:53:78:d1:31:96:39:a5:ad:
0b:5e:70:3c:53:88:e4:b0:c3:e4:dc:22:f3:83:81:
c6:3f:88:77:c7:7f:a9:02:f8:b3:b2:ac:77:59:27:
91:e5:b2:52:fe:f7:14:17:33:c9:18:8a:3d:35:d5:
bf:a5:be:96:1a:2a:99:9f:61:a7:b7:be:5a:6d:6c:
7f:70:69:50:6b:af:df:3e:42:68:0d:4c:29:61:e7:
b7:07:4d:58:a6:7f:3e:ac:f9:d5:72:6e:4e:ad:8f:
aa:b9:0f:29:7e:17:3c:a3:79:7d:8f:e6:04:d3:3b:
41:f5:b2:82:b9:43:8d:d5:7d:0c:d8:88:ce:9a:bc:
15:e8:ea:df:f2:be:4b:69:53:4a:12:5d:72:c2:79:
8a:b7:4e:f6:89:44:06:6f:b1:f9:3f:5e:41:64:75:
5f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DE:8E:2E:19:81:AE:DC:93:E1:85:E8:FE:FE:6E:34:95:90:5B:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212743
Signature Algorithm: sha256WithRSAEncryption
84:99:16:bf:7d:46:ba:e1:3e:b2:ca:dc:e5:88:22:75:27:cc:
8e:3f:65:1b:0f:cf:1d:65:2f:7d:bc:a4:df:d3:fb:7c:d8:4a:
6a:70:57:5e:eb:25:2d:df:05:41:a8:a2:ca:d9:15:a4:d3:e7:
b0:e1:22:4b:b6:cd:62:51:c2:f9:f8:64:f3:b1:aa:90:d8:fb:
1a:a8:1f:31:d7:4f:1d:bb:de:d7:ac:28:d7:26:d0:59:78:d4:
26:22:8d:ac:9f:34:18:1a:cd:89:62:75:d1:9d:40:52:9e:af:
ee:32:57:4c:24:22:a0:95:8c:a1:ce:67:71:69:4b:d9:58:45:
ec:b7:36:08:06:5f:d6:7d:d6:86:4e:b2:9a:52:2c:7b:57:d4:
2a:78:15:40:a0:9c:bb:75:09:6d:26:58:7f:43:14:a2:0e:22:
e2:d0:1e:83:bc:ce:93:0f:81:ff:72:7c:b1:6a:6a:61:a6:10:
ee:f4:cc:7b:49:78:76:fc:93:55:3c:82:b8:ea:d0:6f:7e:f6:
57:87:db:08:52:25:21:3e:93:de:be:ab:1e:14:05:b7:fd:4c:
ff:88:4b:4f:78:00:68:34:3d:4d:7c:c5:50:02:f0:dd:0b:dd:
e6:a8:e9:7c:4e:cd:4e:a1:f9:4b:50:1e:ad:a3:8b:2e:46:ec:
41:a7:d2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:37:11 2026 by rpki-client