Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ztfiRL0eiQxicqhcuA_f1s1uRRU.cer
File: ztfiRL0eiQxicqhcuA_f1s1uRRU.cer (raw, json)
Hash identifier: HHl1Cwj5gEGdtcmlJ6qts1eProA8t1Io3fGXex5gejs=
Subject key identifier: CE:D7:E2:44:BD:1E:89:0C:62:72:A8:5C:B8:0F:DF:D6:CD:6E:45:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0F6D619AD65961AC2FD9B4ABF62E571D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/ztfiRL0eiQxicqhcuA_f1s1uRRU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Oct 2026 09:40:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44862
IP: 89.37.84.0/22
IP: 89.41.44.0/22
IP: 89.41.52.0/22
IP: 185.65.180.0/22
IP: 2a05:200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:d6:19:ad:65:96:1a:c2:fd:9b:4a:bf:62:e5:71:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 1 09:40:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ced7e244bd1e890c6272a85cb80fdfd6cd6e4515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:48:55:6f:7e:8d:28:9d:34:c5:aa:f8:58:
9b:53:5a:bb:31:e5:40:bd:95:3b:05:ad:04:4e:11:
f8:6d:ce:ea:f7:b5:e7:ff:68:a0:d3:cd:cb:63:1b:
7c:07:7d:5a:41:f0:e0:05:8e:03:d6:90:9b:7d:2d:
eb:3f:17:0c:98:f7:be:4e:72:99:9d:49:28:e4:3b:
01:d9:5d:36:83:a6:cc:be:b7:89:88:d1:9e:3b:aa:
d6:9a:63:e2:48:5f:3c:e4:ad:cf:03:9e:a2:27:e2:
9e:48:72:98:fc:3f:88:69:50:e5:b1:ba:12:02:fa:
dd:dd:b5:be:05:64:77:0a:20:f0:4d:31:4b:02:ad:
45:94:44:17:57:16:ee:23:24:b0:77:75:75:73:7c:
c9:6e:ee:27:9a:e7:2e:7b:29:8f:23:97:86:6e:09:
a5:bb:11:5a:31:d4:d8:81:a9:f4:43:24:5d:d3:65:
73:ad:04:d6:cb:12:b4:60:88:91:85:c3:25:02:07:
84:81:54:aa:a2:3c:f0:05:bd:13:e7:1d:9c:15:d7:
9a:77:2e:86:02:ce:46:78:54:7d:56:87:64:98:e4:
3a:eb:12:47:29:41:8d:c8:89:32:7e:85:78:39:7f:
78:c3:28:6c:32:2d:83:28:3b:22:dd:56:36:80:f3:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D7:E2:44:BD:1E:89:0C:62:72:A8:5C:B8:0F:DF:D6:CD:6E:45:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/ztfiRL0eiQxicqhcuA_f1s1uRRU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.84.0/22
89.41.44.0/22
89.41.52.0/22
185.65.180.0/22
IPv6:
2a05:200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44862
Signature Algorithm: sha256WithRSAEncryption
2c:2a:ec:a4:1a:d6:27:de:56:65:ee:f5:69:23:20:03:c5:1a:
56:e0:b2:2f:7a:71:8f:d4:5d:0c:94:a3:cf:31:68:cf:e0:ea:
f0:61:f2:24:e3:0a:62:b2:40:ab:a9:5f:04:bc:6a:69:71:98:
94:ab:e9:d6:13:cf:af:4b:bb:58:2c:8c:6a:2d:c4:b8:17:70:
d8:e0:72:a5:5d:a4:99:d4:97:82:5f:d4:25:2c:f8:af:c5:16:
b6:cc:26:39:3e:73:31:11:ca:16:30:51:2d:89:ad:bf:67:68:
e7:10:82:8d:d1:ae:91:29:23:40:b0:ed:00:1e:e1:65:24:20:
91:1e:ed:f2:21:cf:13:60:75:9d:25:55:93:2d:39:cc:5c:78:
16:63:a5:6c:5a:bf:b8:e0:cb:73:17:09:66:5f:7a:b4:21:7c:
a4:1e:85:62:8a:36:6c:7f:5a:d4:9d:2f:a1:b2:df:a2:bf:9c:
72:95:81:78:a5:ba:63:4a:be:cc:ed:0d:d1:81:f3:f2:63:6c:
b4:94:57:62:a9:b3:4d:8c:87:e7:ca:87:00:f0:63:43:40:15:
fc:57:1d:ef:83:2d:20:5a:16:9a:f6:98:56:a2:b7:2b:9b:1c:
f5:0f:bd:4a:87:8c:52:69:ec:17:7c:31:a0:76:52:ce:18:13:
ff:08:07:75
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAaD21hmtZZYawv2bSr9i5XHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDAxMDk0MDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWQ3ZTI0NGJkMWU4OTBjNjI3MmE4NWNiODBmZGZkNmNkNmU0NTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQhIVW9+jSidNMWq+FibU1q7MeVA
vZU7Ba0EThH4bc7q97Xn/2ig083LYxt8B31aQfDgBY4D1pCbfS3rPxcMmPe+TnKZ
nUko5DsB2V02g6bMvreJiNGeO6rWmmPiSF885K3PA56iJ+KeSHKY/D+IaVDlsboS
Avrd3bW+BWR3CiDwTTFLAq1FlEQXVxbuIySwd3V1c3zJbu4nmucueymPI5eGbgml
uxFaMdTYgan0QyRd02VzrQTWyxK0YIiRhcMlAgeEgVSqojzwBb0T5x2cFdeady6G
As5GeFR9VodkmOQ66xJHKUGNyIkyfoV4OX94wyhsMi2DKDsi3VY2gPOPPwIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFM7X4kS9HokMYnKoXLgP39bNbkUVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0LzVlZGUy
Yy1iZTYxLTQ3MjUtYjI3MS1jZmI4YWU2Mjk4ZTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvNWVkZTJj
LWJlNjEtNDcyNS1iMjcxLWNmYjhhZTYyOThlNi8xL3p0ZmlSTDBlaVF4aWNxaGN1
QV9mMXMxdVJSVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQCWSVUAwQCWSksAwQCWSk0AwQCuUG0MA0EAgAC
MAcDBQMqBQIAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCvPjANBgkqhkiG9w0B
AQsFAAOCAQEALCrspBrWJ95WZe71aSMgA8UaVuCyL3pxj9RdDJSjzzFoz+Dq8GHy
JOMKYrJAq6lfBLxqaXGYlKvp1hPPr0u7WCyMai3EuBdw2OBypV2kmdSXgl/UJSz4
r8UWtswmOT5zMRHKFjBRLYmtv2do5xCCjdGukSkjQLDtAB7hZSQgkR7t8iHPE2B1
nSVVky05zFx4FmOlbFq/uODLcxcJZl96tCF8pB6FYoo2bH9a1J0vobLfor+ccpWB
eKW6Y0q+zO0N0YHz8mNstJRXYqmzTYyH58qHAPBjQ0AV/Fcd74MtIFoWmvaYVqK3
K5sc9Q+9SoeMUmnsF3wxoHZSzhgT/wgHdQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 13:36:18 2026 by rpki-client