Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MhBiDZiJ_6HdLokRxBbuvMlxHS8.cer
File: MhBiDZiJ_6HdLokRxBbuvMlxHS8.cer (raw, json)
Hash identifier: JYIUeGQy5wsp4WsNXrKIFBNKrvJxLyOsVSlMCEuyPi4=
Subject key identifier: 32:10:62:0D:98:89:FF:A1:DD:2E:89:11:C4:16:EE:BC:C9:71:1D:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE3C0D0D9768B4FC7DA2CBE157C49A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 5466
AS: 15751
IP: 51.171.0.0/16
IP: 62.77.160.0/19
IP: 82.141.192.0/18
IP: 83.70.0.0/15
IP: 83.174.160.0/19
IP: 86.40.0.0/13
IP: 95.44.0.0/15
IP: 109.125.0.0/18
IP: 159.134.0.0/16
IP: 185.51.72.0/22
IP: 185.57.112.0/22
IP: 193.178.40.0/23
IP: 194.62.156.0/24
IP: 194.106.128.0/19
IP: 194.125.128.0 -- 194.125.223.255
IP: 195.7.32.0/19
IP: 212.129.64.0/19
IP: 213.94.128.0/17
IP: 213.190.128.0/19
IP: 217.183.0.0/16
IP: 2001:bb0::/29
IP: 2a01:b340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:3c:0d:0d:97:68:b4:fc:7d:a2:cb:e1:57:c4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3210620d9889ffa1dd2e8911c416eebcc9711d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:a6:6c:04:03:ee:77:d8:7a:a1:41:90:0a:
9c:dd:d1:25:6e:50:46:83:86:c0:d5:85:27:04:59:
be:8c:67:00:1b:cc:c1:79:3c:36:a2:fc:12:50:4e:
fb:29:90:c3:1f:44:62:2d:27:cc:fe:1b:a9:fb:4b:
68:16:d7:95:d6:25:64:52:94:16:00:3e:d2:5c:e0:
ed:74:99:9c:f3:b7:07:71:73:9b:39:ac:af:9c:b6:
e2:cd:19:99:79:b3:93:46:34:72:de:0f:36:7f:52:
4e:b9:fc:6f:2e:d8:4e:0c:95:eb:12:64:da:c0:78:
14:94:70:43:48:00:ab:93:52:2a:ba:43:1e:4e:25:
a7:d4:8f:5c:f9:71:30:fb:ab:11:46:a3:f4:2a:1d:
e1:4d:eb:e0:07:f8:08:81:b4:bf:28:66:59:bc:6e:
e7:dd:08:77:26:ad:92:ef:89:45:48:bd:38:bf:38:
e7:b3:f8:07:8e:90:f4:8d:3c:2a:de:76:11:8c:54:
cb:83:fd:79:d5:02:4e:1a:7f:bc:06:3f:80:a3:70:
59:08:bf:07:b6:40:15:d7:5b:8c:9d:f0:c8:00:91:
75:98:58:b0:4b:ec:02:79:fe:fb:74:41:2a:8c:e0:
a4:5b:67:a7:1f:83:9b:6e:d7:a3:9b:f6:dc:bd:be:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:10:62:0D:98:89:FF:A1:DD:2E:89:11:C4:16:EE:BC:C9:71:1D:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.171.0.0/16
62.77.160.0/19
82.141.192.0/18
83.70.0.0/15
83.174.160.0/19
86.40.0.0/13
95.44.0.0/15
109.125.0.0/18
159.134.0.0/16
185.51.72.0/22
185.57.112.0/22
193.178.40.0/23
194.62.156.0/24
194.106.128.0/19
194.125.128.0-194.125.223.255
195.7.32.0/19
212.129.64.0/19
213.94.128.0/17
213.190.128.0/19
217.183.0.0/16
IPv6:
2001:bb0::/29
2a01:b340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5466
15751
Signature Algorithm: sha256WithRSAEncryption
76:44:93:56:f4:a2:40:bd:78:05:6d:71:4e:1d:80:dd:09:d8:
03:f2:d5:e3:48:51:c5:83:d1:70:39:6d:b1:0d:0b:f5:89:16:
a6:8c:df:27:d2:8a:7c:00:2c:60:4d:28:e1:fd:97:ce:f7:2e:
21:eb:8c:8c:1e:5e:29:2d:30:36:b1:42:ef:6f:c1:6e:93:70:
9f:30:f7:c4:d3:81:9b:6a:51:d1:99:54:76:1b:59:00:48:a0:
e1:b7:f3:e0:4d:99:24:c0:9d:1f:21:08:51:d6:56:14:23:bf:
96:93:16:9d:94:05:ac:79:9a:f5:2b:d7:a6:e1:24:af:06:70:
fa:21:c2:f9:76:84:5f:70:6e:e2:d5:8e:e1:aa:c9:b2:61:e4:
4a:81:0e:2a:96:2e:14:45:53:9e:26:76:b8:f9:1e:9d:07:71:
06:d1:b2:51:e1:8f:88:e7:33:ec:94:2e:37:73:1a:3e:9e:b2:
cf:c6:6d:1e:f7:7e:6c:32:73:ef:5a:b8:d1:35:9d:ff:4c:4a:
d2:68:b7:46:23:65:eb:9a:9a:b2:dd:69:12:5d:b5:65:88:f2:
68:59:26:ec:50:6c:19:f0:2f:36:c1:df:35:7f:f4:06:2d:b8:
ba:ef:c7:4b:7c:8f:19:28:86:59:2b:00:cf:b2:ca:92:d7:fa:
53:b1:37:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:03:12 2026 by rpki-client