Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer
File: M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer (raw, json)
Hash identifier: ikhgaVHaom6IUd/8ovXceT+6KUWhNdtm4INUKsYY/Dg=
Subject key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C5184EFDE0238129889C41CA998B02E4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Feb 2026 11:03:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.29.134.0/24
IP: 2a13:a740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:84:ef:de:02:38:12:98:89:c4:1c:a9:98:b0:2e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 12 11:03:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=338c1868b56380e08c45f81ffe61dd3281d6697e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:11:b4:31:40:54:90:c6:c0:f5:b2:fd:e7:e7:
06:33:be:a8:f6:80:f7:f0:8e:d0:5f:62:3c:e8:86:
81:4a:f2:ad:c7:80:5c:cc:d8:f5:52:ed:b8:05:6b:
13:35:34:21:22:57:0a:b0:42:28:68:ae:ce:24:cc:
ef:d9:64:b6:90:38:a2:54:76:30:55:f1:de:11:d1:
e7:c6:b6:68:64:c3:3b:96:24:10:a8:44:f2:fa:07:
15:2a:f0:87:c3:d3:51:f3:18:2c:95:db:7a:0e:88:
a1:82:e0:d3:57:b5:21:70:51:26:4a:37:bd:44:a6:
4a:8e:95:69:62:b9:84:bd:50:4b:dd:6b:7b:93:b5:
77:ff:83:fe:b1:0c:e1:9c:00:c3:1c:62:fb:0f:c9:
bb:f5:2b:ff:60:1b:1c:d5:93:31:1d:8b:cb:45:8d:
d3:03:23:7d:c4:30:47:81:f7:7a:2b:db:51:3a:73:
20:3a:86:0d:93:b8:49:52:8b:01:cb:b3:7e:cf:58:
f6:1a:1e:3e:fa:2d:c7:69:7d:1c:33:e1:d1:66:cc:
26:00:4b:2e:bf:1a:65:34:59:72:89:86:43:c7:0b:
ec:c4:f4:b4:13:a3:9b:83:41:61:b1:5b:8b:ca:52:
fd:ec:b0:ff:11:7a:db:08:f9:e3:f1:c3:28:51:82:
c0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.134.0/24
IPv6:
2a13:a740::/29
Signature Algorithm: sha256WithRSAEncryption
22:ff:b1:2c:05:ec:29:e3:68:ec:ce:84:4c:44:7b:01:40:9a:
bc:fc:6b:83:ee:87:38:1d:dd:af:08:61:c4:31:74:63:4f:c3:
28:dc:27:c6:78:0d:fb:fb:7c:9d:3b:20:8c:55:7c:91:61:2a:
30:91:b6:d7:aa:63:1b:59:14:a3:cf:48:72:7d:b8:94:74:7f:
cc:41:2a:77:bc:f7:82:47:94:66:2c:fd:d9:c7:01:15:70:37:
e7:28:2b:ab:31:56:87:5e:1d:9c:2d:36:35:90:1b:ed:96:d8:
52:79:26:7b:31:79:39:8a:ab:3e:a6:a5:e5:7d:11:35:ae:aa:
e4:29:bc:ae:b3:b4:76:a2:28:b1:f8:52:35:45:75:1f:47:a3:
45:75:7a:e2:48:4a:44:0b:ea:cb:d9:26:4e:68:f9:ee:50:54:
b2:35:83:89:63:58:37:fb:2b:6f:ef:95:90:67:25:5a:d5:da:
fd:e1:75:89:2e:db:44:51:da:49:fb:bf:0b:06:ee:db:1a:84:
c1:64:da:24:b9:22:61:47:d1:30:5b:05:0a:5e:c4:7f:5d:c2:
c0:16:42:b9:1f:27:4a:5c:91:6c:e9:6b:3f:16:34:03:30:c1:
cb:6c:40:1b:50:ac:59:52:c5:2a:41:45:b2:82:40:34:e0:43:
f9:0f:fd:c4
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZxRhO/eAjgSmInEHKmYsC5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjEyMTEwMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzhjMTg2OGI1NjM4MGUwOGM0NWY4MWZmZTYxZGQzMjgxZDY2OTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BG0MUBUkMbA9bL95+cGM76o9oD3
8I7QX2I86IaBSvKtx4BczNj1Uu24BWsTNTQhIlcKsEIoaK7OJMzv2WS2kDiiVHYw
VfHeEdHnxrZoZMM7liQQqETy+gcVKvCHw9NR8xgsldt6DoihguDTV7UhcFEmSje9
RKZKjpVpYrmEvVBL3Wt7k7V3/4P+sQzhnADDHGL7D8m79Sv/YBsc1ZMxHYvLRY3T
AyN9xDBHgfd6K9tROnMgOoYNk7hJUosBy7N+z1j2Gh4++i3HaX0cM+HRZswmAEsu
vxplNFlyiYZDxwvsxPS0E6Obg0FhsVuLylL97LD/EXrbCPnj8cMoUYLA3QIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDOMGGi1Y4DgjEX4H/5h3TKB1ml+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzQyNDEx
ZS1lN2FiLTQ2NDUtOWE0Yi0xNmRiYTU0M2I1NTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvNDI0MTFl
LWU3YWItNDY0NS05YTRiLTE2ZGJhNTQzYjU1OC8xL000d1lhTFZqZ09DTVJmZ2Zf
bUhkTW9IV2FYNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuR2GMA0EAgACMAcDBQMqE6dAMA0GCSqGSIb3
DQEBCwUAA4IBAQAi/7EsBewp42jszoRMRHsBQJq8/GuD7oc4Hd2vCGHEMXRjT8Mo
3CfGeA37+3ydOyCMVXyRYSowkbbXqmMbWRSjz0hyfbiUdH/MQSp3vPeCR5RmLP3Z
xwEVcDfnKCurMVaHXh2cLTY1kBvtlthSeSZ7MXk5iqs+pqXlfRE1rqrkKbyus7R2
oiix+FI1RXUfR6NFdXriSEpEC+rL2SZOaPnuUFSyNYOJY1g3+ytv75WQZyVa1dr9
4XWJLttEUdpJ+78LBu7bGoTBZNokuSJhR9EwWwUKXsR/XcLAFkK5HydKXJFs6Ws/
FjQDMMHLbEAbUKxZUsUqQUWygkA04EP5D/3E
-----END CERTIFICATE-----
Generated at Thu Feb 26 17:10:12 2026 by rpki-client