Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
File: 0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer (raw, json)
Hash identifier: Y4uPLzjpIyWL+sBUwsnGXD71rCI3WdL9Y0Ed2+FH6L8=
Subject key identifier: D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F379AAE1FFCC28BF1461B910669B30E6A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 06 Jul 2026 13:25:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.220.200.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:9a:ae:1f:fc:c2:8b:f1:46:1b:91:06:69:b3:0e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 6 13:25:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d191557a20d3299613c702e9993e9d59c39b4708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:d5:19:57:0d:f2:35:f3:e2:9e:fb:e9:28:
6f:3f:d0:b3:65:9c:fd:ae:ef:3e:46:06:c1:50:30:
ae:55:07:48:bb:54:17:12:e4:8c:ea:de:f4:3c:25:
42:22:dd:e4:dd:46:db:f4:d6:a6:94:f4:bf:d2:07:
45:a8:02:61:dc:d4:b7:32:91:1a:85:56:b5:be:33:
4d:0a:a3:ee:40:c2:db:4a:0c:b2:16:f8:6f:26:01:
bf:12:bb:5a:25:9f:3d:17:f2:5b:c5:37:a1:a5:e8:
c9:07:3b:2b:93:3e:51:4e:9d:1a:ae:ba:91:ba:b9:
3e:93:fa:45:32:26:41:79:7d:b8:1d:dd:2c:eb:6b:
f0:83:19:13:7a:c2:de:cc:3c:7d:26:b5:68:cf:4f:
af:e2:f8:18:ce:8c:37:2d:b3:78:ee:d1:1f:97:95:
47:62:f2:c8:72:8f:f9:df:44:e0:2a:25:a4:95:fb:
b0:68:e5:2e:9f:83:59:0e:ed:e9:5f:06:f8:61:ae:
17:cb:c1:57:64:ee:04:9d:92:2a:2b:e6:ee:16:ea:
17:b8:7f:14:6d:37:ae:dc:bd:89:37:e8:84:2e:1f:
eb:d1:73:df:1c:c2:3f:2c:18:82:6d:43:e3:9f:a9:
40:93:f4:3b:bb:14:08:84:c5:ca:11:18:62:14:19:
8e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.200.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:37:52:9d:8c:69:f8:99:e4:90:ef:04:84:40:54:ae:b5:94:
72:a9:6a:76:4e:16:db:55:17:ff:41:c3:2a:ec:fd:76:90:c3:
3c:98:ee:3c:70:b8:aa:d0:c6:ea:18:24:7f:6b:7a:45:3d:8d:
8f:71:09:aa:3d:10:95:43:16:b4:ea:a8:1e:0f:79:8a:e2:94:
85:5e:38:78:8c:3b:38:f8:5a:7e:03:de:cc:dd:ed:1c:65:c9:
72:65:a2:8e:12:73:37:ac:0d:67:cf:c8:38:f9:fe:bf:ef:d8:
66:d9:17:4f:13:f9:6d:4c:b6:64:b1:0a:f2:2e:ae:bc:d9:22:
b8:ae:7e:fc:37:c9:c3:23:d0:90:56:ac:46:d5:cc:2e:52:e8:
d1:0a:81:63:99:5a:6d:56:e5:54:c1:c9:75:72:d2:de:e8:7b:
ca:21:8e:d5:01:09:1d:54:64:57:00:90:c8:29:e1:59:0e:37:
38:17:1d:a3:db:2c:f5:54:78:eb:ef:c9:20:e0:8a:d3:10:f2:
3e:23:eb:b4:6b:7e:04:e4:a4:20:3f:85:5d:e9:6b:91:3e:6c:
7e:d6:8d:1f:ac:bb:9a:02:75:4e:c3:50:f1:d2:1b:9f:4e:6d:
45:b2:b1:4a:99:b5:be:b0:6b:22:8e:87:56:2f:35:fc:12:bb:
7f:f3:0f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:08 2026 by rpki-client