Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.cer (raw, json)
Hash identifier: I7BReVoc4XRg/bsRQV5ZaTN1VkKGyUhsQaTI5U1vMZQ=
Subject key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA4FFC12A6D593517438CCB6C591400
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:19:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60368
IP: 94.136.112.0/20
IP: 185.16.76.0/22
IP: 2a02:fdc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:ff:c1:2a:6d:59:35:17:43:8c:cb:6c:59:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ae:ae:d5:31:1e:fd:f0:fc:b1:af:3c:61:52:
b7:fa:c3:8c:98:9e:9e:6f:b1:1e:f7:28:5c:b2:ba:
f5:60:9a:49:98:4a:22:e6:60:eb:ac:ce:67:62:68:
ec:84:92:11:6c:22:2a:d9:fb:d0:2b:8b:cb:96:8a:
9b:6d:49:8f:86:c2:4d:ed:69:dc:25:06:1e:2d:c0:
29:40:4e:9b:af:16:86:bb:78:9d:4e:31:07:b9:e2:
d9:94:8e:8f:cd:86:ef:6d:96:1a:45:31:4a:fa:17:
bb:e7:b8:f4:3b:15:96:5e:f6:a2:35:4d:40:d1:5d:
03:0d:66:f1:c7:15:fe:13:59:8b:c8:a5:03:97:ca:
cf:e8:a4:9c:bb:bf:70:3a:f4:a7:05:0a:1a:ca:81:
23:0a:e9:08:30:fc:be:e4:a5:6e:64:c9:32:b0:d4:
e3:82:f7:c4:cd:43:0a:d3:63:88:e0:41:72:f6:53:
44:50:29:aa:10:a5:07:58:63:69:35:8d:c2:74:8a:
b1:bf:2f:eb:27:51:09:a0:a7:ef:cf:55:9d:60:70:
71:80:36:78:66:e7:c1:76:03:09:a4:64:1f:9c:ad:
47:66:6b:8e:64:da:e1:63:8a:88:d3:72:60:cd:0c:
9e:38:89:88:6a:3b:ea:32:bd:bb:ba:d8:c2:40:3f:
b5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.112.0/20
185.16.76.0/22
IPv6:
2a02:fdc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60368
Signature Algorithm: sha256WithRSAEncryption
06:e1:fd:ab:0d:35:b4:44:27:0a:09:27:1f:d4:f1:9d:87:e4:
1f:fe:16:d4:b8:82:5e:ed:7c:3a:e1:53:ba:e7:48:fd:e2:65:
67:87:d9:3f:46:55:c6:58:9d:15:64:b0:96:90:9c:f8:d0:95:
7a:ae:a5:82:4a:0b:97:eb:dc:a8:d7:fd:8c:c8:0f:a3:e0:18:
2a:3d:0e:6f:53:f8:b8:45:63:6d:70:3e:c7:56:a9:45:04:8b:
6a:ed:3e:08:85:1e:70:d3:ef:73:e7:91:84:58:f1:b4:6b:a1:
40:f2:db:4d:5b:11:81:3b:68:c4:d9:4d:41:b8:08:8f:fe:50:
04:67:27:34:10:a3:68:76:2d:5c:4a:47:c2:64:7f:67:09:63:
5b:97:3c:e1:af:7e:59:06:79:fd:b2:0a:94:a3:d1:20:b4:fb:
4b:bf:70:79:54:5c:70:04:e1:55:5b:d2:a7:06:a9:63:fc:e1:
2a:67:d9:53:ff:67:33:f4:d5:0b:a6:3a:d1:b6:b3:b6:6f:84:
58:8f:69:f4:73:b2:65:22:03:1e:89:a3:d6:ae:49:2f:02:f7:
27:7d:d5:0c:ff:ad:ea:d4:39:eb:88:ae:59:2d:57:4a:1f:53:
77:59:48:91:e5:e7:af:c9:4d:b2:29:57:8e:f4:42:85:51:14:
d7:1c:d7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 03:53:48 2026 by rpki-client