Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
File: zyd930p03lPkSDeVcTv7E1oRQN4.cer (raw, json)
Hash identifier: y3mYUJJyZ46CIOoymYSjpDk5p6SvOjxn0ZddBPklmyo=
Subject key identifier: CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EAE124604F6BEAF5D762F0EAF70BF7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:17:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213413
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:e1:24:60:4f:6b:ea:f5:d7:62:f0:ea:f7:0b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf277ddf4a74de53e4483795713bfb135a1140de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:65:57:44:2f:e9:b8:32:1c:3d:f9:cd:0c:
1a:44:33:c2:b9:30:4c:41:93:b8:16:45:ec:df:c9:
2c:1a:f9:c9:b5:94:e0:9e:e0:d5:8a:78:b3:2b:12:
d0:94:4e:7b:c3:97:56:3c:b1:d6:8a:df:a9:d6:ce:
a7:d3:fa:d1:a2:d7:1b:80:32:d7:31:6a:db:aa:b8:
7c:26:a1:00:01:d9:35:b4:07:8f:0d:67:ee:bf:23:
95:33:a1:a9:59:f9:36:55:f3:ae:da:a8:03:90:4b:
c7:cc:7f:d8:eb:a4:d5:54:79:fb:5c:1d:86:73:8a:
02:30:e2:7e:b3:c2:87:93:40:dd:d4:e1:7b:04:07:
85:36:1b:0c:b5:d1:dc:18:5b:1a:61:aa:cb:aa:59:
45:9b:f9:88:bd:ca:b7:98:46:fa:0c:e3:08:d5:25:
df:19:64:bf:61:5a:75:d2:48:e6:70:15:3a:01:9a:
64:26:a4:b6:a4:f7:d9:bb:18:ec:2f:63:f4:1f:e8:
93:b9:69:73:19:dd:e9:9f:ef:41:91:e3:9c:c3:5d:
d9:23:2c:2a:88:80:fe:b7:22:07:7b:ff:46:61:7a:
ac:26:35:f4:97:06:0b:37:7a:43:cf:83:94:20:b4:
1e:fc:f6:7a:fe:3c:3f:cc:9e:1b:90:b3:be:2f:f2:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213413
Signature Algorithm: sha256WithRSAEncryption
75:c1:44:46:0c:57:7d:46:89:16:16:f8:72:5e:4d:8d:92:8d:
46:ee:48:4e:1b:d3:77:b1:e4:3c:f4:62:45:d0:e1:16:55:8f:
a6:97:3a:7e:46:92:90:27:4b:d8:f8:4a:f6:20:75:45:e2:c9:
9c:ac:e3:83:af:eb:9b:3d:76:f6:24:f7:22:d2:17:b8:b5:21:
c1:78:bb:d8:a5:52:26:fd:ad:96:ab:e9:15:02:01:c2:ec:07:
dc:56:31:92:b1:ef:d3:e9:ec:0d:72:9d:f0:f5:eb:52:0d:59:
de:17:1e:75:dd:a9:b7:98:fb:e9:06:75:98:5d:09:40:ca:3d:
dc:0b:93:30:fe:1b:7a:44:ea:35:9f:0f:27:d5:92:bd:b5:61:
f5:d1:38:51:b7:99:18:fe:c9:c8:9a:7c:8a:8a:0f:f4:a4:d5:
9d:76:92:81:c7:f9:f1:d0:1c:80:c4:6c:c9:21:d4:6c:84:d3:
55:a1:8b:a6:9a:4b:77:60:0d:16:b4:7c:98:3c:75:1e:10:c2:
78:1c:7c:09:f3:7c:81:2d:1d:f9:61:81:44:f1:3e:a6:22:5c:
27:a1:61:dc:84:bd:cd:15:44:4d:27:73:0c:1e:7c:17:57:ac:
57:3a:4b:e9:a8:60:2e:65:b0:48:20:3d:33:36:83:eb:1d:b4:
42:a3:da:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:58 2026 by rpki-client