Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
File: zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer (raw, json)
Hash identifier: iy65xLG4Sr8Bq7XUB0/60v7TNl/+XKGlcXc1i9eX4+s=
Subject key identifier: CC:38:7A:84:04:12:33:1A:E1:91:3D:ED:D0:BE:A4:C6:19:B8:A7:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CB90CBA3243611DD9DC1630C2806C5D07
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Mar 2026 13:32:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.8.181.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:0c:ba:32:43:61:1d:d9:dc:16:30:c2:80:6c:5d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 4 13:32:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc387a840412331ae1913dedd0bea4c619b8a730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:2b:62:aa:b3:80:89:1f:9d:77:9a:12:8b:
c9:b3:2a:92:fc:46:d3:42:84:3c:f7:75:c8:f3:6c:
19:56:df:94:0b:33:4e:5e:5a:ba:be:b0:87:55:18:
d9:a9:de:30:e1:13:b8:39:c1:51:48:06:ef:39:77:
64:45:77:1a:5f:41:7f:52:bd:02:e9:5d:59:e5:e1:
51:b6:f9:a3:69:92:21:48:53:6c:d6:7e:15:b6:b3:
f1:9d:76:56:c9:0d:7b:ca:71:a0:13:93:87:42:3a:
9a:d7:b1:92:de:92:2d:77:b3:d6:59:c8:66:f8:9b:
9d:d7:6c:05:a5:de:d4:f5:c9:9d:c9:96:10:c3:c2:
44:da:39:73:ce:52:1c:4a:ab:96:3d:aa:f4:11:d1:
a8:93:ce:6d:bc:85:47:ed:df:5e:98:36:18:47:1f:
44:19:9b:58:b4:f3:28:da:ae:31:66:e2:0f:65:32:
16:c9:a6:ba:91:7a:5a:ac:27:73:87:4a:ea:ab:64:
43:cc:5f:f5:9c:82:14:ea:b9:04:6c:87:d8:f2:64:
46:09:8f:de:bc:02:be:9e:fe:ed:cb:ae:e8:6b:29:
f0:6d:01:8b:60:31:fa:99:30:ee:c3:f1:c5:f4:90:
30:4b:f1:ac:40:96:40:75:07:ca:d1:14:06:29:f0:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:38:7A:84:04:12:33:1A:E1:91:3D:ED:D0:BE:A4:C6:19:B8:A7:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.181.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e4:22:42:e1:eb:e4:2b:8f:5b:96:5a:c9:46:dc:81:8a:41:
b7:26:09:96:13:e5:2c:29:9b:14:19:5a:cb:65:e7:4f:cf:93:
dd:9b:10:04:04:0e:99:4a:a1:ad:8c:0c:e0:a3:7d:ec:26:d3:
96:02:18:0d:0c:81:2f:e9:93:0a:5f:5f:17:a4:f2:26:b6:af:
8c:98:c8:0b:f3:ee:fb:ee:fc:8c:f2:26:4a:fd:2d:d5:ca:16:
c9:eb:17:9d:11:76:29:1e:dc:2a:a9:0a:e6:5d:e2:24:90:cb:
1c:ba:9b:b3:15:4f:c2:2a:c8:45:5f:aa:3c:5b:14:6f:f0:cc:
64:b6:4a:cd:20:97:ab:bf:91:db:36:e3:34:09:d7:3e:1e:26:
a2:04:59:ba:11:59:f6:64:8e:5d:d3:98:11:08:4b:b0:07:69:
cb:a2:0f:4e:d4:5e:50:49:8f:05:a3:cf:41:c9:4a:b9:59:47:
ad:7a:f2:10:a9:18:3c:80:7f:e8:dd:de:5f:8a:0b:b9:d6:30:
c2:d5:be:dd:03:1f:44:b7:97:59:f5:c5:d7:ec:89:a6:0c:6f:
fa:d6:54:ec:a3:bd:60:3b:09:dc:91:7d:30:dd:c3:c2:81:50:
0c:07:92:0c:83:21:3a:b8:a6:3d:c0:1d:a1:bc:06:f7:9c:99:
18:b5:f9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:35:11 2026 by rpki-client