Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.cer
File: Z9Af-mHt_1DLOPfyXzzQG8cRLwY.cer (raw, json)
Hash identifier: Lik31ooXS+6FAV2jPw19W1HAFbu8vkkHu8tktfGYta8=
Subject key identifier: 67:D0:1F:FA:61:ED:FF:50:CB:38:F7:F2:5F:3C:D0:1B:C7:11:2F:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CDCD58B9BE35200C4EB4C40873A843A83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Mar 2026 12:18:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62053
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:d5:8b:9b:e3:52:00:c4:eb:4c:40:87:3a:84:3a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 11 12:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67d01ffa61edff50cb38f7f25f3cd01bc7112f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:1f:9a:07:ae:34:80:ee:94:b7:1f:2a:78:
4c:89:4b:4e:e8:0c:a7:59:7c:66:63:57:5e:a1:ff:
38:bd:b0:27:b8:2c:8f:2a:ea:17:a7:90:2d:c3:3f:
85:65:d2:e5:f2:87:04:22:2a:cc:44:39:92:25:03:
bb:fc:89:19:c9:f8:41:6a:80:e3:4a:1b:2a:38:f5:
da:2c:55:86:40:53:39:6a:b7:99:17:e7:26:2c:ca:
78:5f:00:a2:2a:fe:7a:11:1f:7e:9d:17:26:28:32:
24:70:4d:69:af:7c:c6:28:b9:24:03:60:47:a8:e6:
88:94:85:5f:48:8d:0d:4f:32:1e:2d:14:91:d5:d2:
2d:04:7f:52:8f:0f:ef:9c:d8:e8:7e:e5:3d:7c:42:
25:67:f9:a3:0d:45:43:d7:9c:51:ff:85:4c:46:79:
08:4f:7c:71:de:56:cb:57:9f:7f:84:c8:ef:57:7b:
a0:57:b1:a0:9c:97:39:14:66:d0:ce:59:2f:88:9a:
72:e3:df:a6:59:c7:29:47:de:e5:6b:bc:5d:1a:8e:
62:c1:cd:de:65:a3:cd:f3:04:2e:ab:ef:2d:f6:6d:
5f:b1:4d:a5:1f:a9:ea:bc:88:fb:46:fe:7e:c0:93:
4c:80:64:9f:bb:f7:5d:15:97:13:5b:c8:12:07:76:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D0:1F:FA:61:ED:FF:50:CB:38:F7:F2:5F:3C:D0:1B:C7:11:2F:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62053
Signature Algorithm: sha256WithRSAEncryption
49:98:84:b3:0b:39:0c:e6:0a:cd:ab:20:8a:b0:33:d4:5f:b0:
fb:d1:33:4a:1b:08:08:aa:7a:5a:45:5d:63:dc:5a:68:77:a7:
af:75:25:a1:d5:55:62:b5:31:42:91:03:5e:8d:b4:17:dd:b3:
55:69:92:70:2c:4f:25:ba:2e:46:36:49:b9:4a:07:77:72:f4:
b1:95:20:bf:91:e8:d5:f1:7a:ff:d1:c6:e9:19:f9:b9:34:d6:
23:f5:11:30:5d:c0:b2:23:29:18:82:dc:5b:cb:c4:50:67:e9:
c6:f2:21:6b:54:ed:5a:d9:00:d3:fc:84:0a:b0:26:ac:f5:bb:
ab:11:1e:33:34:22:d1:82:3d:fa:a1:64:8a:7c:2f:b0:c8:1d:
50:1e:cc:30:5b:11:35:f5:7e:77:4c:4c:07:86:7e:ea:fa:42:
00:b6:09:07:43:88:88:8e:e8:2e:ad:e6:aa:17:20:9d:28:5d:
56:96:f7:0a:be:2a:0d:18:01:2d:04:47:dd:ab:92:b7:4b:f2:
df:a4:25:2c:74:6d:58:7e:72:4e:5a:3e:ee:78:6c:68:21:9d:
74:61:9e:1f:ef:32:17:d8:cb:7b:03:8b:17:cf:39:84:c0:5f:
9d:4a:70:2c:98:8b:bc:40:4c:c2:de:df:19:fa:78:55:5e:4b:
26:ac:25:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:22 2026 by rpki-client