Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer
File: z7XKpN3_v-PgZ_-Ox34VDJivTzU.cer (raw, json)
Hash identifier: wMhuxwHd52tCLNzs+Q3B5z9XX82ep9M6hrWSj7hZPPM=
Subject key identifier: CF:B5:CA:A4:DD:FF:BF:E3:E0:67:FF:8E:C7:7E:15:0C:98:AF:4F:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA206671FF12A6599D772BB713FF72
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.155.184.0/22
IP: 146.19.52.0/24
IP: 185.151.20.0/22
IP: 185.209.204.0/22
IP: 185.227.88.0/22
IP: 185.236.164.0/22
IP: 195.128.151.0/24
IP: 2a07:7540::/29
IP: 2a0b:4c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:20:66:71:ff:12:a6:59:9d:77:2b:b7:13:ff:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfb5caa4ddffbfe3e067ff8ec77e150c98af4f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:69:77:c0:b3:06:c6:3a:d9:ca:3a:28:f3:
b6:50:71:1b:e6:d0:59:3a:82:d1:88:b9:0f:e2:88:
be:73:de:7a:f9:71:e2:7b:7e:71:35:27:fa:6d:6b:
31:f9:0d:40:5c:41:40:7d:d6:a3:04:fa:6b:a8:ab:
ed:c0:fd:0c:ef:ca:50:98:de:f8:14:16:97:cf:20:
87:4a:71:f8:18:f4:94:8f:9c:52:3a:1e:43:13:52:
ea:df:8c:96:a6:61:41:1d:16:1a:88:d4:7e:e1:cd:
72:98:3f:e3:a2:86:1f:1c:97:ed:ea:32:f2:93:5c:
3b:85:c5:ee:25:24:fe:e2:e9:ad:62:d0:2d:c0:63:
9f:83:16:0d:d4:0d:59:27:0c:e8:86:9b:fd:03:be:
a8:01:b6:f8:3c:dc:73:9f:b9:d8:8e:81:f9:77:81:
9c:0c:49:40:13:ec:2f:31:84:ca:85:e0:9a:cc:98:
19:c9:ae:33:8d:2e:3f:34:9b:16:a0:44:32:bd:50:
24:bf:06:fd:63:9a:85:7a:b0:cc:53:d1:33:6a:a8:
92:ff:9e:d2:31:e8:02:9d:40:1b:92:db:14:f3:29:
7e:16:ce:6c:57:3d:da:92:67:40:ea:5f:69:ad:de:
be:89:eb:fa:86:2c:af:b3:82:b2:1b:85:be:52:40:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B5:CA:A4:DD:FF:BF:E3:E0:67:FF:8E:C7:7E:15:0C:98:AF:4F:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/z7XKpN3_v-PgZ_-Ox34VDJivTzU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.184.0/22
146.19.52.0/24
185.151.20.0/22
185.209.204.0/22
185.227.88.0/22
185.236.164.0/22
195.128.151.0/24
IPv6:
2a07:7540::/29
2a0b:4c40::/29
Signature Algorithm: sha256WithRSAEncryption
19:d0:13:0a:71:05:db:b0:36:57:7c:de:64:85:6c:16:45:e9:
e2:59:8d:31:30:f0:0f:d3:bc:bd:32:93:88:f7:b6:5f:bf:c9:
bf:2b:e6:42:98:a9:02:0d:30:2e:1e:02:d6:66:83:5b:30:51:
85:67:ae:59:71:3c:95:20:24:3f:3b:34:c5:4b:31:eb:52:87:
2c:e1:ed:0c:de:e6:ff:76:77:e3:6d:03:c5:4b:57:a3:66:9d:
dd:70:46:43:18:77:17:31:71:aa:c0:41:1c:fc:d9:50:84:fc:
1f:86:93:f3:24:48:6f:ef:13:cd:7c:06:a0:95:99:09:0d:db:
c3:d6:64:e2:ba:69:c9:cd:d6:fe:02:e9:3c:12:05:38:a2:a9:
c8:bd:08:b3:83:c8:26:bf:c2:0a:d5:1b:6f:a6:91:9b:5e:c3:
af:af:9c:cc:d7:a6:92:bc:b2:55:df:45:63:98:57:75:09:c4:
c9:3b:05:29:f2:c4:67:cb:8e:d0:e6:8d:78:76:1c:b4:a1:f9:
95:04:2b:4a:67:e3:9e:c5:07:03:2b:c5:fd:d2:4c:35:ac:63:
9b:fc:fc:ad:56:98:7e:9a:23:ad:a4:c3:ef:b8:e0:2d:21:28:
54:2a:fb:26:2d:cc:75:58:a3:4d:a5:f2:36:c9:6b:5a:38:23:
46:02:24:6d
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgISAZ8Y+iBmcf8Splmddyu3E/9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmI1Y2FhNGRkZmZiZmUzZTA2N2ZmOGVjNzdlMTUwYzk4YWY0ZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFVpd8CzBsY62co6KPO2UHEb5tBZ
OoLRiLkP4oi+c956+XHie35xNSf6bWsx+Q1AXEFAfdajBPprqKvtwP0M78pQmN74
FBaXzyCHSnH4GPSUj5xSOh5DE1Lq34yWpmFBHRYaiNR+4c1ymD/jooYfHJft6jLy
k1w7hcXuJST+4umtYtAtwGOfgxYN1A1ZJwzohpv9A76oAbb4PNxzn7nYjoH5d4Gc
DElAE+wvMYTKheCazJgZya4zjS4/NJsWoEQyvVAkvwb9Y5qFerDMU9EzaqiS/57S
MegCnUAbktsU8yl+Fs5sVz3akmdA6l9prd6+iev6hiyvs4KyG4W+UkC9zQIDAQAB
o4ICvjCCArowHQYDVR0OBBYEFM+1yqTd/7/j4Gf/jsd+FQyYr081MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzUwMWYy
Yi1mZDFmLTQ1ZWEtYjQ5NC1kNzNkYzRiNDFjZTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNTAxZjJi
LWZkMWYtNDVlYS1iNDk0LWQ3M2RjNGI0MWNlMS8xL3o3WEtwTjNfdi1QZ1pfLU94
MzRWREppdlR6VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF
BwEHAQH/BEowSDAwBAIAATAqAwQCLZu4AwQAkhM0AwQCuZcUAwQCudHMAwQCueNY
AwQCueykAwQAw4CXMBQEAgACMA4DBQMqB3VAAwUDKgtMQDANBgkqhkiG9w0BAQsF
AAOCAQEAGdATCnEF27A2V3zeZIVsFkXp4lmNMTDwD9O8vTKTiPe2X7/JvyvmQpip
Ag0wLh4C1maDWzBRhWeuWXE8lSAkPzs0xUsx61KHLOHtDN7m/3Z3420DxUtXo2ad
3XBGQxh3FzFxqsBBHPzZUIT8H4aT8yRIb+8TzXwGoJWZCQ3bw9Zk4rppyc3W/gLp
PBIFOKKpyL0Is4PIJr/CCtUbb6aRm17Dr6+czNemkryyVd9FY5hXdQnEyTsFKfLE
Z8uO0OaNeHYctKH5lQQrSmfjnsUHAyvF/dJMNaxjm/z8rVaYfpojraTD77jgLSEo
VCr7Ji3MdVijTaXyNslrWjgjRgIkbQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:23:54 2026 by rpki-client