Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/MzXvvdFv37A3meob4nnPMzTRuLE.cer
File: MzXvvdFv37A3meob4nnPMzTRuLE.cer (raw, json)
Hash identifier: 65g5tPsvRJs8nhT5xh9XikXpInA4jyiA/pEwueIg4ro=
Subject key identifier: 33:35:EF:BD:D1:6F:DF:B0:37:99:EA:1B:E2:79:CF:33:34:D1:B8:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FD6511A46FEB20204BA5EF88A3A2F930F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Aug 2026 09:04:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.236.148.0/22
IP: 91.238.64.0 -- 91.238.69.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:51:1a:46:fe:b2:02:04:ba:5e:f8:8a:3a:2f:93:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 09:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3335efbdd16fdfb03799ea1be279cf3334d1b8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:0d:80:63:8d:b5:63:26:aa:05:18:59:aa:
3d:e9:81:7d:07:52:77:c1:19:cd:40:b0:e1:1e:99:
26:2c:8d:6c:8c:1d:35:8f:90:d9:7b:17:02:08:02:
ea:cf:3e:36:f9:59:bf:2b:fd:e0:05:f8:88:d4:8c:
c0:59:84:14:a1:3b:07:bb:e2:4b:86:9d:cf:7e:9e:
4e:0c:2d:c0:ba:64:db:ba:d3:07:03:9e:41:25:7b:
b5:ba:7f:ad:97:9b:e4:b4:79:f5:91:b0:13:02:ec:
8d:11:5f:08:8f:82:28:a1:59:bd:6d:01:05:9a:b7:
52:dd:0a:ba:ad:3a:36:17:26:c5:37:ad:7e:68:75:
87:ab:e6:f8:f3:e4:ee:6d:15:27:49:9f:bf:73:6f:
d7:ec:e3:32:ab:4d:12:d0:63:c8:8e:c0:68:06:bd:
41:76:62:99:e8:65:86:61:7d:c4:a1:ed:51:12:bf:
a6:ad:4a:61:91:bf:1a:07:59:51:14:62:63:b4:bd:
37:25:fa:76:33:45:f9:d4:ff:50:93:96:58:1e:16:
66:df:bb:8b:3a:8f:d9:e2:43:40:6d:de:2d:ca:59:
44:c6:c1:3c:d2:cd:9d:59:94:cd:86:92:a1:94:dc:
75:78:4d:6a:90:f2:aa:1d:ed:64:70:3c:8d:e3:36:
c2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:35:EF:BD:D1:6F:DF:B0:37:99:EA:1B:E2:79:CF:33:34:D1:B8:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.148.0/22
91.238.64.0-91.238.69.255
Signature Algorithm: sha256WithRSAEncryption
34:cf:c9:b9:3f:37:7a:26:c6:23:4d:2e:b5:50:56:95:55:bc:
c9:6d:79:f7:b1:99:3a:65:6a:af:fb:b0:72:93:ff:82:91:fc:
00:60:81:1c:26:ff:01:ed:3c:70:00:10:8e:8e:0c:47:51:e0:
7e:14:aa:10:dd:28:fd:d3:ea:3a:52:71:f8:43:c1:73:06:04:
ca:f1:08:63:30:f9:81:aa:67:32:aa:e0:04:c0:e9:0a:16:d7:
1b:b0:44:19:a0:1e:17:bd:2a:e4:f3:61:ca:50:c1:c5:36:6f:
43:cc:6c:0b:25:04:00:d1:30:23:67:4d:f4:f1:6a:26:11:07:
3e:50:5f:f3:2e:b7:a2:7e:b2:c8:8d:02:dd:c6:0c:e5:79:2a:
aa:21:0f:74:60:19:71:b4:a3:31:79:e9:ce:31:9b:32:67:c1:
2e:45:8b:b3:7b:8b:13:63:0c:08:b4:80:c8:cd:3b:dc:ae:70:
8c:ce:9e:a8:eb:d7:37:59:63:4b:81:d6:b7:f8:18:99:3d:60:
22:83:ac:d5:69:1f:dc:98:e8:a2:97:8b:b0:47:79:da:41:93:
85:14:e6:94:aa:e9:26:0f:d5:22:f9:45:ba:4d:f8:95:4c:8a:
33:62:9e:cf:d9:ea:ee:a6:7a:e7:3b:ea:bb:6d:b0:a5:d3:d0:
7b:72:d6:a4
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAZ/WURpG/rICBLpe+Io6L5MPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODA2MDkwNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzM1ZWZiZGQxNmZkZmIwMzc5OWVhMWJlMjc5Y2YzMzM0ZDFiOGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT8NgGONtWMmqgUYWao96YF9B1J3
wRnNQLDhHpkmLI1sjB01j5DZexcCCALqzz42+Vm/K/3gBfiI1IzAWYQUoTsHu+JL
hp3Pfp5ODC3AumTbutMHA55BJXu1un+tl5vktHn1kbATAuyNEV8Ij4IooVm9bQEF
mrdS3Qq6rTo2FybFN61+aHWHq+b48+TubRUnSZ+/c2/X7OMyq00S0GPIjsBoBr1B
dmKZ6GWGYX3Eoe1REr+mrUphkb8aB1lRFGJjtL03Jfp2M0X51P9Qk5ZYHhZm37uL
Oo/Z4kNAbd4tyllExsE80s2dWZTNhpKhlNx1eE1qkPKqHe1kcDyN4zbCEQIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFDM1773Rb9+wN5nqG+J5zzM00bixMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzdlYjY0
OC0xMjY4LTRhMTktYTIxMi1hMjU3Y2I5MTNlNzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvN2ViNjQ4
LTEyNjgtNGExOS1hMjEyLWEyNTdjYjkxM2U3MS8xL016WHZ2ZEZ2MzdBM21lb2I0
bm5QTXpUUnVMRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF
BwEHAQH/BB4wHDAaBAIAATAUAwQCW+yUMAwDBAZb7kADBAFb7kQwDQYJKoZIhvcN
AQELBQADggEBADTPybk/N3omxiNNLrVQVpVVvMltefexmTplaq/7sHKT/4KR/ABg
gRwm/wHtPHAAEI6ODEdR4H4UqhDdKP3T6jpScfhDwXMGBMrxCGMw+YGqZzKq4ATA
6QoW1xuwRBmgHhe9KuTzYcpQwcU2b0PMbAslBADRMCNnTfTxaiYRBz5QX/Mut6J+
ssiNAt3GDOV5KqohD3RgGXG0ozF56c4xmzJnwS5Fi7N7ixNjDAi0gMjNO9yucIzO
nqjr1zdZY0uB1rf4GJk9YCKDrNVpH9yY6KKXi7BHedpBk4UU5pSq6SYP1SL5RbpN
+JVMijNins/Z6u6meuc76rttsKXT0Hty1qQ=
-----END CERTIFICATE-----
Generated at Thu Sep 10 03:40:17 2026 by rpki-client