Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
File: ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer (raw, json)
Hash identifier: cI/GB6J+teBZfWq8T2gLhnCTQCKZIKZQGCe8qVcSnJA=
Subject key identifier: 65:F8:52:CB:D1:CD:F2:44:A1:70:ED:AC:24:40:D0:D2:F4:BD:53:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DB52F4AA9422F69E7A7E40702B7638276
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 22 Apr 2026 12:34:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2650::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:2f:4a:a9:42:2f:69:e7:a7:e4:07:02:b7:63:82:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 22 12:34:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65f852cbd1cdf244a170edac2440d0d2f4bd5319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:62:14:25:c7:39:2c:4a:ab:65:03:d2:be:
b0:88:e0:0e:22:f6:b7:7d:76:6b:4b:5f:20:a9:81:
c8:2c:a5:1a:e8:79:dc:06:9b:1a:54:49:b3:ac:15:
d6:17:f1:10:cc:33:5a:59:8e:9e:fc:cb:89:ed:b0:
61:00:81:50:3c:11:49:f8:a2:ac:c9:d9:c8:b9:c8:
df:48:95:14:1e:a2:a9:cb:dd:cc:7c:45:a4:b4:a5:
8e:55:36:55:1b:e7:81:57:b7:13:48:1e:81:e5:03:
50:70:d9:d3:df:a1:86:ff:f0:42:c0:60:89:02:e9:
56:13:f4:03:10:bd:fb:da:ca:ad:8c:a0:81:f0:e2:
f3:a5:40:bb:cc:88:75:17:66:dd:f3:cc:87:54:60:
ad:0e:9f:29:9b:fc:76:02:58:c2:45:1d:56:e6:76:
90:65:12:21:aa:87:53:c2:0f:14:d1:80:ac:ad:49:
7e:a1:94:25:26:5d:e4:a1:df:d9:fd:53:72:b7:2d:
43:94:70:27:cd:82:32:c3:a7:a5:2d:ca:c0:12:22:
ab:10:7f:69:30:21:26:42:1b:ea:68:b6:b9:0e:4e:
a2:5e:a6:32:66:ad:86:c5:c2:23:cb:8b:47:3d:04:
52:98:81:78:20:70:e9:3b:bf:48:3a:61:a9:06:3a:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F8:52:CB:D1:CD:F2:44:A1:70:ED:AC:24:40:D0:D2:F4:BD:53:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2650::/48
Signature Algorithm: sha256WithRSAEncryption
93:b1:ad:af:9e:89:4c:b9:9a:24:a5:e7:f5:93:42:6e:0c:67:
fd:36:d9:07:58:95:34:2b:59:db:e1:de:47:ca:60:c7:48:c9:
73:ec:43:5a:05:57:af:84:32:92:7b:6f:87:e1:6a:a2:98:cb:
02:90:d1:ae:91:e5:61:d7:72:31:96:e4:ae:1b:a4:d3:f7:92:
01:77:c6:6d:49:b5:cb:87:2b:35:80:3f:fc:9f:6c:8e:e9:68:
4d:a5:b0:88:57:de:ad:bb:46:b2:4e:7d:6a:08:b8:e3:a4:7f:
41:80:d5:31:17:63:2f:d1:05:8a:0d:4c:91:48:91:b3:57:ae:
7f:f0:fa:d5:a8:20:fa:dc:4a:ab:1f:aa:3e:1a:3e:c6:a9:10:
46:22:8a:7d:6b:ba:32:4f:ba:7c:ed:78:9f:cc:df:ac:64:2d:
df:cb:7a:c4:fa:8e:b0:26:5d:9b:e0:2e:e1:96:4b:44:ed:a0:
a6:0e:08:37:bc:46:25:83:bf:39:79:f8:8d:69:b8:62:dd:a0:
a4:fd:02:33:e9:d7:01:9f:89:35:46:21:a7:f0:56:b9:88:f1:
f1:82:57:cf:38:e4:6c:a0:d9:6d:97:a6:ea:eb:f6:5a:f6:c6:
57:7d:bb:1f:78:f0:83:8d:20:db:fd:8a:75:e6:27:64:7c:34:
10:39:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:23:38 2026 by rpki-client