Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZWTNWDyj7V7mHQecNi1OOf_qY6k.cer
File: ZWTNWDyj7V7mHQecNi1OOf_qY6k.cer (raw, json)
Hash identifier: INpcINQP+wVyRlgg6wmmYn4BObSQhISTteVVO7o9aZQ=
Subject key identifier: 65:64:CD:58:3C:A3:ED:5E:E6:1D:07:9C:36:2D:4E:39:FF:EA:63:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C900339DE7755F452E45D73B974AD4051
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/ZWTNWDyj7V7mHQecNi1OOf_qY6k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Feb 2026 14:17:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 5540
IP: 138.134.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:03:39:de:77:55:f4:52:e4:5d:73:b9:74:ad:40:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 14:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6564cd583ca3ed5ee61d079c362d4e39ffea63a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:01:df:80:67:d1:85:2b:0d:0b:88:82:3f:fa:
92:a6:89:37:cb:13:7e:3e:c7:8e:6a:84:c8:c3:ed:
4c:7e:b1:e0:6f:65:3c:3b:05:e3:71:ef:55:15:d2:
27:f2:aa:ec:53:4e:9b:34:74:2c:6a:16:25:83:d0:
dc:4c:50:3c:f0:66:8c:0f:db:2d:9f:f8:3e:66:98:
94:ec:c0:7d:e2:2d:db:94:c4:a2:d0:08:5f:47:b9:
88:2e:39:59:c9:cc:cc:9a:31:fd:1d:72:77:c9:01:
5d:5b:a2:89:82:e7:79:db:0d:cb:c8:db:18:81:5f:
53:31:54:f3:c9:c8:ec:26:e2:88:4c:61:0c:ff:49:
1d:65:29:cf:ca:cd:2a:3c:b5:8a:ec:41:18:af:87:
ac:3a:2a:aa:b2:9d:8d:08:ee:c8:2d:3d:c1:aa:49:
10:10:3b:31:6a:4a:35:b8:62:95:2e:c0:fb:8c:ab:
10:da:45:47:68:b0:47:ca:ff:ec:6b:92:f7:91:df:
07:23:8f:e5:cd:0c:d4:2c:06:a5:a4:44:00:1b:8d:
3d:e1:4d:f6:94:12:ad:fd:2c:41:7b:9b:c1:94:64:
bc:3b:b0:fa:03:0d:b1:82:a8:16:98:52:7f:12:0a:
68:78:eb:2f:23:69:5d:9a:bc:a7:93:b5:09:17:e5:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:64:CD:58:3C:A3:ED:5E:E6:1D:07:9C:36:2D:4E:39:FF:EA:63:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/ZWTNWDyj7V7mHQecNi1OOf_qY6k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.134.0.0/16
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5540
Signature Algorithm: sha256WithRSAEncryption
42:e5:b1:22:7c:07:45:73:d2:16:d6:3a:0b:78:4d:e3:20:6b:
49:82:6c:1d:ec:77:3f:5a:cd:5a:10:67:93:8d:e7:ff:78:3a:
61:d8:b2:e3:5c:fb:57:d0:81:a4:c1:3f:db:23:db:db:ed:22:
c5:5e:d8:29:8f:13:b2:c4:77:c6:4b:bd:9d:ac:f2:de:37:ca:
e6:28:c1:c9:96:5d:43:de:56:05:04:05:ab:87:43:32:4d:ad:
6e:17:dc:61:7e:d4:ab:a6:1b:a0:cf:7a:c8:04:17:91:f2:b6:
80:a9:5b:5a:34:55:62:5a:50:06:b4:5c:11:93:95:35:60:05:
5d:bf:3e:27:7d:8e:48:6b:02:35:59:39:63:16:74:ab:4c:05:
0b:f1:c6:c4:6c:68:8f:73:bb:16:1b:5e:5f:7f:0d:84:42:8a:
b0:b7:63:c4:ce:05:cb:9a:8d:b6:38:91:7b:58:d8:84:50:4a:
35:c4:09:70:5f:af:32:5c:42:19:f5:20:ec:b5:2f:0f:a9:86:
51:57:d9:99:c9:cd:3f:ce:81:02:b7:b9:03:c2:35:ce:e9:3d:
7e:d8:fb:30:57:84:24:d4:d2:8e:14:f4:f9:82:e3:8e:c3:bc:
f3:63:c0:b8:ab:dc:4b:a2:7a:c2:d8:64:e7:87:bb:9e:76:00:
58:22:2f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:58:21 2026 by rpki-client