Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zshzRXQrnVgBslMjyCcnWuD5Stk.cer
File: zshzRXQrnVgBslMjyCcnWuD5Stk.cer (raw, json)
Hash identifier: EVFTLF5T5Qb/ExyEHC2eKkXi4oNmBeXKOn6GrSt7j/E=
Subject key identifier: CE:C8:73:45:74:2B:9D:58:01:B2:53:23:C8:27:27:5A:E0:F9:4A:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F46269921DABE5E62FC213F736C934DBA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Jul 2026 09:12:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.212.128.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:26:99:21:da:be:5e:62:fc:21:3f:73:6c:93:4d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 9 09:12:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cec87345742b9d5801b25323c827275ae0f94ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:a7:08:54:51:48:2c:0d:d5:9f:f5:e5:7d:
ba:d4:fd:0d:cb:74:1d:47:15:21:fd:a1:6a:bd:7a:
c2:86:9f:55:6b:9d:90:f1:a8:d2:92:f8:03:2b:00:
63:31:8d:b3:91:a7:01:d5:86:20:51:51:08:5a:71:
45:e2:40:05:dd:d3:4d:e4:a9:91:8e:3f:10:f7:74:
fe:0f:c5:35:a4:36:89:de:28:6f:74:4d:6b:df:a1:
c1:e9:cb:1e:8c:1e:1a:0e:85:a2:50:1b:51:85:81:
04:b5:04:01:b7:0c:0b:c8:ed:2b:8b:e7:52:58:49:
8d:9b:39:4a:19:e9:b9:ae:59:b2:2d:3b:01:db:fb:
85:ad:a2:59:ce:a1:73:d5:1b:26:d3:37:8a:25:70:
d9:a1:9c:3f:0d:58:2c:24:c6:02:57:20:80:cc:1e:
a5:3b:64:d9:ca:8d:de:6e:91:d5:f7:d4:5e:e7:36:
31:a5:fc:07:2a:b5:ee:55:7b:7a:d6:39:46:10:04:
e9:75:1c:47:71:6d:88:43:1e:e9:c4:a6:b2:60:d7:
4c:b3:a6:22:91:4b:11:e3:b4:5d:26:40:b9:25:f7:
40:4e:97:db:5f:2a:e6:b9:ec:62:d5:74:08:fc:58:
ed:dd:dc:00:49:d8:46:6f:65:63:15:3e:e4:9f:b0:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C8:73:45:74:2B:9D:58:01:B2:53:23:C8:27:27:5A:E0:F9:4A:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.128.0/24
Signature Algorithm: sha256WithRSAEncryption
82:af:1a:75:21:2d:d4:14:19:bd:03:e0:0d:2d:b6:31:1b:c5:
a6:01:5d:70:ab:bf:06:5a:2a:f8:b8:e5:e7:47:32:f0:0d:8d:
87:a4:d2:11:de:b6:c1:7a:c9:23:30:99:98:0e:bb:2d:6b:07:
53:5d:e3:59:33:c6:22:95:f3:c7:49:72:a2:8d:dd:24:a0:29:
e5:d6:ba:97:ad:86:0a:96:b7:22:1a:93:d7:9f:e1:1c:a2:32:
99:b5:51:2a:d1:25:cd:a2:c0:1e:e0:51:81:1b:0a:1f:15:52:
2d:4c:d3:c0:d8:f0:c4:ed:0f:39:53:d6:af:7f:11:8a:4b:36:
74:43:8b:74:a1:3f:47:6d:b5:a0:ae:16:c6:c8:07:8e:38:ad:
46:0d:b0:3a:cc:c2:60:e6:26:92:19:ee:28:67:23:8c:63:77:
e5:f4:05:99:63:5b:0e:6e:15:e7:23:a0:ec:12:2c:0a:0e:df:
05:4d:64:55:3b:08:2e:aa:c2:ca:db:56:4c:bf:04:84:39:54:
98:fc:b2:e4:82:ee:ca:c5:45:15:67:1b:51:8e:ed:43:07:b2:
79:e5:ed:ad:3a:fa:c8:e7:e1:fb:a9:cb:0e:f5:ef:bc:8e:aa:
8a:b0:b6:39:4e:2b:49:e3:db:dc:b6:c6:cb:fc:f8:d8:d1:fb:
49:11:9f:50
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ9GJpkh2r5eYvwhP3Nsk026MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNzA5MDkxMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWM4NzM0NTc0MmI5ZDU4MDFiMjUzMjNjODI3Mjc1YWUwZjk0YWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu2nCFRRSCwN1Z/15X261P0Ny3Qd
RxUh/aFqvXrChp9Va52Q8ajSkvgDKwBjMY2zkacB1YYgUVEIWnFF4kAF3dNN5KmR
jj8Q93T+D8U1pDaJ3ihvdE1r36HB6csejB4aDoWiUBtRhYEEtQQBtwwLyO0ri+dS
WEmNmzlKGem5rlmyLTsB2/uFraJZzqFz1Rsm0zeKJXDZoZw/DVgsJMYCVyCAzB6l
O2TZyo3ebpHV99Re5zYxpfwHKrXuVXt61jlGEATpdRxHcW2IQx7pxKayYNdMs6Yi
kUsR47RdJkC5JfdATpfbXyrmuexi1XQI/Fjt3dwASdhGb2VjFT7kn7DenQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFM7Ic0V0K51YAbJTI8gnJ1rg+UrZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzUwNjYz
Yi04NGI3LTRlYTYtODBkNC01ZjllN2FiNWIyYzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvNTA2NjNi
LTg0YjctNGVhNi04MGQ0LTVmOWU3YWI1YjJjMy8xL3pzaHpSWFFyblZnQnNsTWp5
Q2NuV3VENVN0ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9SAMA0GCSqGSIb3DQEBCwUAA4IBAQCCrxp1
IS3UFBm9A+ANLbYxG8WmAV1wq78GWir4uOXnRzLwDY2HpNIR3rbBeskjMJmYDrst
awdTXeNZM8YilfPHSXKijd0koCnl1rqXrYYKlrciGpPXn+EcojKZtVEq0SXNosAe
4FGBGwofFVItTNPA2PDE7Q85U9avfxGKSzZ0Q4t0oT9HbbWgrhbGyAeOOK1GDbA6
zMJg5iaSGe4oZyOMY3fl9AWZY1sObhXnI6DsEiwKDt8FTWRVOwguqsLK21ZMvwSE
OVSY/LLkgu7KxUUVZxtRju1DB7J55e2tOvrI5+H7qcsO9e+8jqqKsLY5TitJ49vc
tsbL/PjY0ftJEZ9Q
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:35 2026 by rpki-client