Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer
File: ZlnQIH2JaxgoKSKu72tHK3iPlDI.cer (raw, json)
Hash identifier: g1vNawwSEhYAmQ3HUvz5nbU80JiAighELvCF46vEijE=
Subject key identifier: 66:59:D0:20:7D:89:6B:18:28:29:22:AE:EF:6B:47:2B:78:8F:94:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0707791BEA1846E1E3975C02B36A796DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 05 Sep 2026 07:27:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215006
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:77:91:be:a1:84:6e:1e:39:75:c0:2b:36:a7:96:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 5 07:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6659d0207d896b18282922aeef6b472b788f9432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:0c:1c:c3:5e:5a:c3:b6:38:2d:81:18:ae:
72:f9:de:74:64:d8:fe:8a:7c:00:d7:85:06:74:75:
d3:4f:26:48:de:06:27:d3:53:fc:6a:d0:93:b9:bc:
55:48:dc:81:aa:19:95:0b:c6:27:10:69:e8:90:aa:
84:d3:d0:93:d1:14:55:55:44:9d:c9:0d:2d:2b:b1:
28:6e:37:45:e3:01:d3:ea:ca:3e:64:91:c0:24:01:
37:c0:f8:9d:79:d8:c6:cb:3d:c3:8a:1f:12:bf:bf:
aa:91:7e:2c:d8:34:5f:e0:d9:40:99:37:89:c3:47:
a6:5c:da:67:ec:b1:10:87:4d:9f:56:f6:07:b6:0a:
b4:3d:77:26:33:a1:bb:7d:99:68:be:3f:c8:86:6e:
0e:dd:9d:f8:8e:1e:9b:c0:2b:b6:e0:87:53:94:27:
22:13:cd:ab:13:a4:46:80:fc:96:9f:3d:d8:e4:ad:
f5:09:6f:72:6f:36:97:47:82:4f:79:98:de:90:0b:
c1:42:68:a3:d9:8e:65:e7:de:a2:cc:d2:15:b8:1b:
2a:d4:41:2c:5f:d1:9d:68:82:f2:97:90:a6:91:ed:
c4:70:7a:78:94:34:df:f2:1f:96:a8:c6:90:12:80:
64:8f:6d:f0:67:24:03:07:52:fd:ef:d5:5a:1c:93:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:59:D0:20:7D:89:6B:18:28:29:22:AE:EF:6B:47:2B:78:8F:94:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/041a0d-4ed4-4e32-88be-618d24d622e0/1/ZlnQIH2JaxgoKSKu72tHK3iPlDI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215006
Signature Algorithm: sha256WithRSAEncryption
45:b1:36:3e:22:d4:96:bc:91:08:d2:f5:4d:96:ef:b7:f9:1d:
56:17:81:24:b8:25:a2:89:56:bc:b4:1e:79:ab:43:8d:57:e5:
2b:69:96:5e:d9:c3:23:68:2b:de:77:35:9e:ae:71:db:91:47:
0f:71:af:ce:bb:24:ab:05:fb:26:de:f6:e4:a4:02:52:0a:ca:
77:47:f4:f8:61:43:7d:1c:a3:aa:ac:dc:3b:b2:bd:cf:67:61:
6a:58:05:0b:49:75:1e:5d:aa:62:91:f0:27:ad:69:21:5b:48:
97:45:70:c0:e8:fb:f4:c9:a4:c0:13:67:e4:c0:80:2b:64:06:
ed:86:3e:cb:3c:2a:2f:bc:a7:a8:17:15:a1:78:6b:8e:da:8c:
10:f0:92:d4:00:84:c9:ca:28:14:84:43:8e:f0:f9:86:a4:8c:
db:1f:8a:85:86:6e:7b:bd:86:5b:c2:bb:ae:67:11:b5:42:5a:
2d:aa:e1:89:0e:ec:35:a7:a9:2f:0c:27:e2:70:fa:02:dc:0d:
05:35:42:20:89:e5:7f:82:6b:7e:99:47:f5:5e:18:54:79:78:
d4:15:49:bf:0e:41:16:a1:72:ea:36:18:13:12:e8:47:7a:e0:
54:fe:9c:23:42:5d:2f:32:a6:fd:f8:44:71:75:75:13:07:51:
be:e5:cb:26
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAaBwd5G+oYRuHjl1wCs2p5bcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTA1MDcyNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjU5ZDAyMDdkODk2YjE4MjgyOTIyYWVlZjZiNDcyYjc4OGY5NDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizYMHMNeWsO2OC2BGK5y+d50ZNj+
inwA14UGdHXTTyZI3gYn01P8atCTubxVSNyBqhmVC8YnEGnokKqE09CT0RRVVUSd
yQ0tK7EobjdF4wHT6so+ZJHAJAE3wPidedjGyz3Dih8Sv7+qkX4s2DRf4NlAmTeJ
w0emXNpn7LEQh02fVvYHtgq0PXcmM6G7fZlovj/Ihm4O3Z34jh6bwCu24IdTlCci
E82rE6RGgPyWnz3Y5K31CW9ybzaXR4JPeZjekAvBQmij2Y5l596izNIVuBsq1EEs
X9GdaILyl5Cmke3EcHp4lDTf8h+WqMaQEoBkj23wZyQDB1L979VaHJOHswIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFGZZ0CB9iWsYKCkiru9rRyt4j5QyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzA0MWEw
ZC00ZWQ0LTRlMzItODhiZS02MThkMjRkNjIyZTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMDQxYTBk
LTRlZDQtNGUzMi04OGJlLTYxOGQyNGQ2MjJlMC8xL1psblFJSDJKYXhnb0tTS3U3
MnRISzNpUGxESS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNH3jANBgkqhkiG9w0BAQsFAAOCAQEARbE2PiLUlryR
CNL1TZbvt/kdVheBJLgloolWvLQeeatDjVflK2mWXtnDI2gr3nc1nq5x25FHD3Gv
zrskqwX7Jt725KQCUgrKd0f0+GFDfRyjqqzcO7K9z2dhalgFC0l1Hl2qYpHwJ61p
IVtIl0VwwOj79MmkwBNn5MCAK2QG7YY+yzwqL7ynqBcVoXhrjtqMEPCS1ACEycoo
FIRDjvD5hqSM2x+KhYZue72GW8K7rmcRtUJaLarhiQ7sNaepLwwn4nD6AtwNBTVC
IInlf4JrfplH9V4YVHl41BVJvw5BFqFy6jYYExLoR3rgVP6cI0JdLzKm/fhEcXV1
EwdRvuXLJg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 23:40:57 2026 by rpki-client