Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
File: ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer (raw, json)
Hash identifier: 0TW/xYxDu/GPdiqQ24fWv0hwUeEx78MbS12R6qW104g=
Subject key identifier: 66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9AF38FE4729E29BC2B26B0A522EB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 80.77.176.0/20
IP: 185.125.152.0/22
IP: 2a06:b880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:af:38:fe:47:29:e2:9b:c2:b2:6b:0a:52:2e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:02:5c:91:19:43:c1:70:dc:d3:50:bc:9c:
8e:10:ff:b9:c2:7d:04:59:b6:b4:19:7c:58:fe:84:
85:fa:32:2a:43:c7:3b:04:c2:04:28:a7:25:a7:14:
8a:3e:5e:54:dc:ad:2d:63:c7:16:36:ea:10:30:c4:
84:97:80:5c:36:2c:6d:fb:65:69:2a:a5:26:c9:bd:
1b:c4:76:2c:63:58:37:72:ff:ac:2e:c0:27:5e:57:
c5:3b:90:65:89:46:a6:67:18:ca:08:f0:4b:ee:a5:
cc:4b:37:61:2b:a5:ea:95:8c:01:a9:e7:a6:18:85:
7f:86:21:ec:6f:43:a6:2d:c6:4e:a3:14:32:8f:7c:
02:9c:40:cf:36:a7:f7:c6:4e:51:8f:3f:d7:d3:85:
b1:bb:18:7b:46:ff:de:25:88:89:a3:b0:60:d2:05:
9e:f7:0c:36:40:dd:53:af:aa:a9:50:12:25:6b:01:
a2:d5:21:5a:5e:06:ff:8b:36:55:65:83:1a:67:7e:
9c:8d:ff:fb:e5:13:1a:39:a4:bc:fb:d9:e5:26:ee:
53:41:73:18:46:40:8f:42:95:63:13:e0:4d:3d:ec:
f5:c2:74:45:df:77:e1:fe:d4:20:c1:7d:8f:a6:ed:
27:4e:0b:52:cd:cc:12:5b:ae:b4:6c:e9:be:2b:f3:
df:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.176.0/20
185.125.152.0/22
IPv6:
2a06:b880::/29
Signature Algorithm: sha256WithRSAEncryption
43:52:ec:56:46:9b:80:68:25:8c:9d:b1:19:1d:2b:34:df:68:
39:ca:9b:82:28:ec:9d:02:1d:0d:b8:c4:ae:fd:5b:ce:d5:c9:
98:4e:be:7f:94:d7:7c:00:e7:2c:34:d9:f0:71:26:54:05:51:
96:30:a2:3a:09:42:94:2b:a6:22:76:c0:35:31:da:cb:3a:fd:
fc:c4:14:4a:4e:c5:f6:5a:9a:b1:d1:79:fe:ba:a6:9c:f1:59:
97:0c:5c:1e:e5:a3:46:a4:cb:14:0d:f0:8c:2d:ce:6c:79:07:
6e:62:d6:1c:9b:45:5d:a3:66:1f:4d:f5:24:a5:fa:fb:4c:31:
4f:0e:42:aa:51:ba:64:6d:bc:ee:bb:fa:36:3f:be:2c:a4:64:
1d:fb:02:cc:f0:27:1a:1f:07:6a:05:c1:37:91:3c:8a:11:7e:
0a:61:8a:16:80:a3:26:d6:c5:c7:d0:94:d1:55:63:e8:ce:97:
f3:32:a7:97:85:22:e7:d7:26:42:04:7f:91:c7:fa:8a:32:2b:
73:87:84:cb:94:22:bd:9e:70:98:5e:6c:48:1f:81:d8:2c:d4:
50:bc:4a:49:87:32:66:d6:15:6e:ae:56:db:a9:6e:bb:ac:23:
c5:0a:b7:92:f0:0f:08:7e:4f:d9:07:27:47:5f:b3:dc:97:59:
56:5c:2d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:23:33 2026 by rpki-client