Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
File: 4MW7PaU0Nb9B4X997EfUSE5_MSk.cer (raw, json)
Hash identifier: yIEB8i/nhF4fn6pPuhNvvtzlUCIKOA2/4tGrw+6ZV58=
Subject key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198AE30AAB6D4ECA1D1AED8D6FA8A4657F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 15 Aug 2025 14:44:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.159.216.0/22
IP: 91.246.46.0/24
IP: 185.108.84.0/22
IP: 185.235.180.0/22
IP: 194.56.232.0/24
IP: 194.56.235.0/24
IP: 194.56.240.0/24
IP: 194.56.245.0/24
IP: 195.13.44.0/23
IP: 195.13.54.0/23
IP: 2a04:88c0::/29
IP: 2a0d:6100::/29
IP: 2a0f:48c0::/29
IP: 2a0f:8680::/29
IP: 2a0f:a940::/29
IP: 2a11:bb40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ae:30:aa:b6:d4:ec:a1:d1:ae:d8:d6:fa:8a:46:57:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 15 14:44:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:37:88:a9:e9:10:cd:f4:1f:10:84:95:a5:93:
0f:04:f3:4b:c4:2a:92:d0:2f:ef:6a:41:36:a7:7d:
09:7c:54:7d:a9:8e:eb:0a:43:a1:7b:0a:c6:fc:74:
57:ed:85:e7:cd:83:01:02:f7:b8:c2:cc:5d:bf:36:
b0:e9:c6:b2:78:2b:7e:20:7f:cf:95:8d:8c:1b:8f:
5c:7a:cb:94:e7:49:ff:dd:47:8b:df:20:01:c1:2a:
74:71:7a:c9:cf:04:11:f1:07:1e:4e:db:18:cf:5a:
04:44:3c:46:3d:90:e1:ac:15:20:a1:d5:73:d6:62:
8a:ec:65:59:4a:42:c7:8b:2e:9b:d3:7e:d6:3e:f9:
64:a0:de:95:8d:12:82:0e:33:b7:f7:6e:c5:f7:df:
cf:0f:61:f0:98:a3:1e:48:bb:82:73:14:24:f0:18:
bc:b8:d9:72:bc:46:2c:f5:aa:ad:f9:2d:92:a8:aa:
83:01:15:85:f4:23:e3:62:60:f1:da:6d:1b:50:3d:
b2:97:fa:8a:72:5c:1f:ec:9b:9b:33:05:ba:77:c3:
52:7d:c7:d6:91:16:f8:c0:ef:13:1b:29:2f:c7:ca:
c4:fb:2d:d3:45:19:36:c0:63:b1:9f:32:38:98:9e:
a4:4d:ed:07:3c:3a:10:8a:ed:10:8e:d3:db:1b:61:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.216.0/22
91.246.46.0/24
185.108.84.0/22
185.235.180.0/22
194.56.232.0/24
194.56.235.0/24
194.56.240.0/24
194.56.245.0/24
195.13.44.0/23
195.13.54.0/23
IPv6:
2a04:88c0::/29
2a0d:6100::/29
2a0f:48c0::/29
2a0f:8680::/29
2a0f:a940::/29
2a11:bb40::/29
Signature Algorithm: sha256WithRSAEncryption
42:88:44:e6:a0:a1:d5:26:d5:0b:bf:3b:93:f5:c1:b3:85:6d:
21:10:05:2d:9a:a4:6c:a9:19:25:19:72:86:6a:9b:ef:c2:f0:
75:fe:97:11:ec:05:11:6f:e9:79:17:42:6e:6c:c0:34:72:24:
66:be:7c:3d:21:0b:be:76:7c:8a:7c:f3:2b:19:60:fd:3c:ee:
17:57:8a:bd:0d:0d:d7:7b:a7:42:1a:02:65:10:01:85:c3:ed:
29:54:5a:66:15:23:ad:99:2d:93:02:15:b0:38:a4:e8:7f:b3:
6f:fc:0f:48:59:fa:3a:e3:71:3f:3b:39:2a:a2:14:3d:16:82:
59:d9:4b:bc:b7:b3:26:be:f3:6d:a4:3f:dc:4f:c7:bf:88:79:
1d:80:07:72:25:17:86:80:c5:a0:fc:7e:a3:04:ee:a2:68:10:
83:44:33:8e:37:a0:52:6b:e5:8b:38:73:5a:f1:da:7c:9b:e0:
91:b0:cf:07:99:94:1f:4f:2e:56:af:93:9f:bc:cb:55:16:cd:
51:a6:70:40:f8:02:05:01:e3:66:f3:51:2a:06:ce:b1:fa:85:
9c:fc:c8:ac:c4:bb:ba:92:bd:2b:10:b4:13:48:7d:a9:72:3d:
21:99:c4:c1:6d:61:97:29:53:c8:fc:77:4d:c5:e4:2d:f8:d0:
68:64:b6:e5
-----BEGIN CERTIFICATE-----
MIIF4TCCBMmgAwIBAgISAZiuMKq21Oyh0a7Y1vqKRlfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwODE1MTQ0NDQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGM1YmIzZGE1MzQzNWJmNDFlMTdmN2RlYzQ3ZDQ0ODRlN2YzMTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TeIqekQzfQfEISVpZMPBPNLxCqS
0C/vakE2p30JfFR9qY7rCkOhewrG/HRX7YXnzYMBAve4wsxdvzaw6cayeCt+IH/P
lY2MG49cesuU50n/3UeL3yABwSp0cXrJzwQR8QceTtsYz1oERDxGPZDhrBUgodVz
1mKK7GVZSkLHiy6b037WPvlkoN6VjRKCDjO3927F99/PD2HwmKMeSLuCcxQk8Bi8
uNlyvEYs9aqt+S2SqKqDARWF9CPjYmDx2m0bUD2yl/qKclwf7JubMwW6d8NSfcfW
kRb4wO8TGykvx8rE+y3TRRk2wGOxnzI4mJ6kTe0HPDoQiu0QjtPbG2HZYQIDAQAB
o4IC7TCCAukwHQYDVR0OBBYEFODFuz2lNDW/QeF/fexH1EhOfzEpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzdmN2Q4
Zi0wZGM4LTQ1YTItYmMxNi04MGFkZDllYTNlNWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvN2Y3ZDhm
LTBkYzgtNDVhMi1iYzE2LTgwYWRkOWVhM2U1Yy8xLzRNVzdQYVUwTmI5QjRYOTk3
RWZVU0U1X01Tay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGHBggrBgEF
BQcBBwEB/wR4MHYwQgQCAAEwPAMEAi2f2AMEAFv2LgMEArlsVAMEArnrtAMEAMI4
6AMEAMI46wMEAMI48AMEAMI49QMEAcMNLAMEAcMNNjAwBAIAAjAqAwUDKgSIwAMF
AyoNYQADBQMqD0jAAwUDKg+GgAMFAyoPqUADBQMqEbtAMA0GCSqGSIb3DQEBCwUA
A4IBAQBCiETmoKHVJtULvzuT9cGzhW0hEAUtmqRsqRklGXKGapvvwvB1/pcR7AUR
b+l5F0JubMA0ciRmvnw9IQu+dnyKfPMrGWD9PO4XV4q9DQ3Xe6dCGgJlEAGFw+0p
VFpmFSOtmS2TAhWwOKTof7Nv/A9IWfo643E/OzkqohQ9FoJZ2Uu8t7MmvvNtpD/c
T8e/iHkdgAdyJReGgMWg/H6jBO6iaBCDRDOON6BSa+WLOHNa8dp8m+CRsM8HmZQf
Ty5Wr5OfvMtVFs1RpnBA+AIFAeNm81EqBs6x+oWc/MisxLu6kr0rELQTSH2pcj0h
mcTBbWGXKVPI/HdNxeQt+NBoZLbl
-----END CERTIFICATE-----
Generated at Thu Aug 21 05:45:16 2025 by rpki-client