Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer
File: ZhD_BmSKwgvZWMVu3K0fLcLu1dg.cer (raw, json)
Hash identifier: wzDonGnPsAXrm2913x2N2WvnZgpvAakGgnKaiB30Zv8=
Subject key identifier: 66:10:FF:06:64:8A:C2:0B:D9:58:C5:6E:DC:AD:1F:2D:C2:EE:D5:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0694ACA9A3454F1C244A1E3AF21E1654D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Sep 2026 22:01:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35688
IP: 195.137.185.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:69:4a:ca:9a:34:54:f1:c2:44:a1:e3:af:21:e1:65:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 3 22:01:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6610ff06648ac20bd958c56edcad1f2dc2eed5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:a2:a7:0e:a2:d8:be:ea:d1:53:57:5a:c6:
2f:2c:91:a7:93:fe:30:b4:6f:c3:22:55:0d:75:ad:
cb:73:a1:c5:da:af:9a:37:97:d7:5e:74:1a:31:0c:
56:24:ad:58:cc:c0:0f:d8:14:82:30:6d:d8:e1:44:
0d:af:6a:1f:c0:4b:8d:28:4b:41:44:da:7c:71:33:
61:27:b5:ba:81:5a:4d:56:66:78:bc:71:a6:5b:51:
ba:0f:b9:9e:89:3a:10:ea:f1:a4:1e:63:e9:29:69:
51:15:76:c4:ca:4b:6c:e2:e2:f3:b1:34:98:15:b5:
6a:a8:32:23:5a:3c:24:3d:92:31:85:45:59:2c:f7:
09:3c:c9:ea:5d:a6:96:f5:16:30:cb:32:a2:a2:81:
95:01:f3:98:c3:b6:62:de:16:77:77:b3:1f:94:05:
f2:ce:db:94:ce:85:c9:4b:08:da:7d:31:ef:19:a0:
13:5a:7d:5e:6c:a7:ac:cf:df:3e:f9:16:0d:72:29:
20:da:f6:54:7b:39:50:74:f8:4d:fc:6d:48:10:8a:
de:af:93:b5:2a:cb:4e:0b:78:10:39:ee:8e:50:a2:
7b:bd:c4:6c:c9:65:52:5f:a1:e2:9d:16:4c:b4:9a:
51:de:9c:35:d5:0e:8b:01:15:d8:2e:16:28:47:e4:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:10:FF:06:64:8A:C2:0B:D9:58:C5:6E:DC:AD:1F:2D:C2:EE:D5:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b16916-90c7-4fcb-9e31-f9f90f748034/1/ZhD_BmSKwgvZWMVu3K0fLcLu1dg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.185.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35688
Signature Algorithm: sha256WithRSAEncryption
b1:79:2b:bb:5c:c2:46:cd:51:4a:85:4a:ac:b4:92:db:87:1f:
48:23:3a:0f:46:0c:d0:6d:a4:88:06:8c:4a:09:91:a6:24:75:
70:07:89:5d:00:27:10:1a:95:90:a6:ba:de:d5:b6:8c:70:fd:
81:03:15:ad:f1:15:f2:e5:e7:51:50:10:6c:a4:ae:4b:5b:1f:
47:70:cd:8c:18:21:8b:8f:c1:2a:8d:d5:f4:99:17:d7:d1:e8:
2f:89:60:cc:15:de:e9:cc:f5:19:6d:49:7c:31:bc:39:88:da:
7e:f6:59:6c:43:21:0a:ff:0e:4d:4f:f3:7d:87:bd:f2:dd:a9:
52:a5:d0:56:61:47:2e:77:0f:a7:f6:e1:af:d3:cd:b0:47:96:
f3:bc:19:4a:34:2e:1d:ef:46:80:e2:33:25:ee:0a:95:24:c3:
b2:9b:f3:df:21:a8:b2:86:9b:f0:4c:10:e0:5b:b0:7b:f9:25:
9a:d0:f5:23:89:ea:1a:2a:05:8c:f0:a2:43:10:ca:3d:e6:22:
9f:f9:e0:84:7e:54:cb:ac:a9:66:91:1a:64:d2:e8:33:0b:ac:
b0:94:91:4d:aa:d3:d8:d1:9d:12:84:71:b9:d1:70:ec:9c:9a:
78:72:53:7a:bf:cd:65:a5:af:13:38:a8:00:70:6b:72:b0:72:
9f:23:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:41:47 2026 by rpki-client