Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
File: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer (raw, json)
Hash identifier: U/VNZvjolm3bfSQH/AF43HZ4TcQ1PxRnhdViYE00OHc=
Subject key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E1CB7151AEA83CB28DD99A6426E73F749
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 12 May 2026 15:03:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197652
IP: 2a14:8d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b7:15:1a:ea:83:cb:28:dd:99:a6:42:6e:73:f7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 12 15:03:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:90:45:eb:41:fd:ab:ed:2b:38:7b:80:25:
c6:32:95:3e:c8:3f:af:08:74:e7:b1:9f:21:ef:78:
02:46:4b:77:e6:9b:4a:d1:08:51:e2:bf:65:97:b1:
17:b2:3c:7d:94:b1:f0:c9:a3:84:3e:c2:30:43:60:
62:e7:b6:96:3f:4c:65:93:86:e2:14:d8:da:77:10:
e0:83:f7:18:a1:ec:49:a8:1a:8e:a0:00:a8:e5:94:
91:78:37:31:6b:8b:2f:3f:1d:df:b4:cb:04:b7:01:
d3:d5:9b:ec:04:b0:09:fb:a6:eb:4b:eb:4b:2e:80:
55:e2:5f:8d:19:d6:60:2a:06:53:d2:79:74:c3:15:
5b:5c:0e:76:5d:ac:c6:ab:4d:33:86:37:55:83:a7:
33:28:03:6a:c4:14:11:ff:6e:55:37:02:e4:8a:49:
c9:a3:82:a5:c2:9e:a2:04:e0:ec:a7:40:6a:f1:9e:
6c:49:9b:e7:cd:c6:48:cf:34:24:f2:fd:75:7d:21:
81:c2:98:2a:f0:f6:66:8c:fc:65:a0:9f:17:aa:ca:
8a:61:8c:18:7a:b8:0e:cd:82:0a:c7:a2:23:0d:cc:
0a:de:cb:0d:f1:20:f0:ca:4d:3f:0d:ae:b3:c4:dc:
a5:91:44:2b:b8:24:2f:fe:a4:92:ae:27:d3:64:9a:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:8d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197652
Signature Algorithm: sha256WithRSAEncryption
59:49:82:f4:92:3e:d0:23:28:9f:35:4b:b2:0a:96:39:f7:2a:
d0:1d:e3:ee:c7:4d:ca:af:ee:73:b4:fd:dd:52:60:1a:7b:99:
ff:78:2c:e3:69:04:99:bd:91:ea:77:21:22:dc:ec:c9:23:e6:
44:4a:5f:01:3c:b9:8d:74:3a:1e:f9:0a:07:1a:18:62:56:2b:
f0:fe:19:52:1b:a5:e9:e0:03:9f:ac:39:28:0f:69:bf:dd:b1:
fd:49:5c:4c:6c:0b:57:e1:22:7f:a7:f0:21:22:5d:0c:82:36:
16:aa:54:b9:25:6f:e3:5c:a7:be:22:d4:fd:f7:0a:0b:a3:fb:
d6:99:03:a4:a3:9c:a2:76:5e:c0:48:c4:68:30:90:4d:c7:fe:
77:76:22:81:83:c1:8c:bf:a5:94:85:ba:13:ff:b3:b5:88:96:
73:9f:b2:fb:f2:ec:04:79:b2:ab:e5:c0:f2:a6:c9:27:0c:47:
a5:2b:64:2d:29:c8:c3:b1:22:21:50:95:fc:77:2a:5c:a6:5b:
cc:92:09:ff:ec:02:6e:08:3f:c2:6c:ff:d0:3d:6b:53:ce:96:
46:ea:83:b2:d0:54:ae:0b:62:4d:ed:12:61:ce:c5:3f:9c:2c:
00:91:36:46:d9:b4:20:68:10:d6:b6:ee:de:80:95:7f:d6:a9:
25:a6:f4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:29:29 2026 by rpki-client