Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
File: Mr-31eND3M5zBuKyXdm1b64-u3Q.cer (raw, json)
Hash identifier: mUay+u6rme/Am017HiweNrQxlD353QoYz5GoRzKSJ04=
Subject key identifier: 32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB12E07B8DD16AF9CF5A7B366B8773
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43966
IP: 79.173.64.0/18
IP: 94.243.192.0/18
IP: 185.159.172.0/22
IP: 185.181.200.0/22
IP: 2a0b:d600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:12:e0:7b:8d:d1:6a:f9:cf:5a:7b:36:6b:87:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:ba:de:fe:aa:e6:87:05:79:9b:ba:bb:ba:
d1:72:70:2a:6d:dd:5f:d6:81:ac:41:a4:b7:1e:02:
51:4d:08:ff:2d:55:b2:ea:6f:2b:6b:3f:01:f5:d8:
be:9c:c9:13:83:89:c9:53:c8:4f:fe:eb:53:8d:37:
e7:d6:75:59:1d:03:be:76:7a:3d:96:ca:1b:7a:e8:
e1:2f:bc:31:95:1f:8c:32:bd:24:00:bf:d5:65:ad:
0e:aa:99:44:a2:8c:4f:7b:d4:52:a2:cc:48:d3:04:
da:96:4a:db:28:33:64:08:23:8c:6c:90:9d:13:e9:
51:29:bf:ca:5e:e4:c4:ab:66:f7:f4:8e:18:9e:bc:
db:6e:b4:3f:92:b3:65:66:85:f8:6d:0e:c5:28:87:
82:ba:52:25:5d:a5:44:cf:92:c9:fb:f3:cc:e5:9b:
56:40:27:e6:c6:be:5c:93:17:e2:8f:20:36:78:8e:
c7:bf:48:76:15:3d:12:bf:70:1b:d2:62:2a:52:9a:
d1:7e:44:f3:76:f1:b3:e6:2b:69:64:0d:4a:fb:42:
a6:fa:ca:68:57:27:c8:27:88:01:a9:af:fc:bb:e3:
f8:79:0c:bc:f7:db:3f:46:dd:a4:c8:4a:b8:a6:86:
81:37:52:04:1c:0a:18:81:8e:8f:bd:f5:e7:72:88:
ac:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.64.0/18
94.243.192.0/18
185.159.172.0/22
185.181.200.0/22
IPv6:
2a0b:d600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43966
Signature Algorithm: sha256WithRSAEncryption
a0:f8:6f:6b:5c:26:7e:4e:d0:a3:0c:aa:03:a3:a8:88:bb:92:
a4:b5:38:5e:1a:64:9b:54:27:2d:99:e1:05:63:0a:d0:eb:30:
aa:ea:21:39:2d:80:de:03:6a:9c:d6:c2:15:dd:03:b3:e0:c2:
5a:ad:24:2d:6f:09:db:cc:04:d1:48:aa:f2:78:4b:23:d0:fb:
28:37:a2:35:3c:d1:60:7a:ad:58:a6:e0:a5:67:36:7e:6d:59:
bb:ed:40:c0:7f:ce:8c:76:2e:1e:60:e3:e1:3d:db:e3:5d:53:
83:f0:13:48:f2:9c:9f:c8:4c:64:b5:38:6b:c1:8a:a3:3c:86:
10:7f:aa:7c:63:7d:4b:d0:bf:e6:e1:0a:fe:81:06:60:b5:df:
ba:19:b3:48:0f:c4:af:af:73:ce:ce:3a:8f:f2:7e:c5:6c:21:
9c:0b:d3:12:64:48:2b:76:55:6f:65:3a:2b:d1:12:82:00:eb:
c3:2c:ce:b3:b8:3c:7f:37:0b:da:96:22:43:ed:c3:67:2b:9d:
dc:3c:33:5e:95:30:1f:59:50:32:07:58:aa:05:28:4a:47:c0:
bf:92:e2:b8:3a:52:8f:bf:4d:58:ce:fb:5d:7d:92:da:cc:66:
fb:aa:ab:27:4c:4c:c7:71:10:31:ca:86:05:06:67:f0:b7:17:
4f:8d:9c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:16:12 2026 by rpki-client