Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
File: cMbVNbDydaJhhfj03KWA0m16l0Y.cer (raw, json)
Hash identifier: KFTYZwcdWoa/xYkb3DbssthK5XRp8Z0PuHMGByTXIWY=
Subject key identifier: 70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A3AEA26E79D8EB095DA10B055D8EB107D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 31 Oct 2025 15:36:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204183
IP: 2a0f:c000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:ea:26:e7:9d:8e:b0:95:da:10:b0:55:d8:eb:10:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 31 15:36:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e0:16:99:2a:4b:c3:65:0e:e2:c2:77:60:91:
6d:2b:e2:ce:1f:d6:36:31:e5:8b:de:19:87:a3:96:
75:a3:4f:4b:92:28:e0:a6:a9:2f:54:3f:be:b8:73:
0d:89:11:d7:ad:48:36:1d:64:a8:26:f1:a6:2f:45:
05:b0:93:d2:23:9b:44:c7:72:88:df:b0:bf:9e:b4:
d8:95:81:93:5a:ae:16:69:cf:89:40:71:d8:75:d0:
3d:c6:49:ac:43:9a:ef:3d:3d:f0:c6:62:78:71:fd:
cc:56:24:92:2f:05:d9:ef:68:96:03:1d:23:51:a0:
9e:16:66:63:50:79:6a:2a:30:4f:3d:68:46:13:87:
5b:5a:07:63:10:b2:be:af:c2:f0:a7:32:cd:6b:68:
50:7c:b0:e8:f1:16:10:9b:d9:70:0a:28:56:56:0a:
32:77:9d:d0:d1:35:5c:cc:49:77:84:94:f8:cf:8b:
83:75:0e:c8:5a:54:ec:2a:5d:a1:9c:e7:ea:4a:d0:
d2:32:72:e0:39:81:cb:b1:f5:8e:09:f9:ca:eb:40:
f2:e0:36:b3:ae:08:c3:d0:0d:31:a7:36:66:db:f6:
31:cc:0e:c9:c1:35:de:57:37:95:fb:e2:7c:40:a2:
3c:b6:93:16:36:78:b7:64:ef:67:75:45:62:94:e3:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:c000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204183
Signature Algorithm: sha256WithRSAEncryption
77:df:e7:3e:c7:02:4c:65:b8:6a:42:91:4e:51:96:40:90:d4:
aa:bf:48:59:7d:f5:ee:7d:96:f6:e1:cd:9e:6b:35:cb:45:65:
d5:a6:33:16:76:64:4d:3b:5f:0c:40:28:27:e3:ad:1c:49:bc:
d9:39:d2:27:1a:86:2d:d8:38:f4:c7:f3:3b:61:97:fb:f4:3e:
8b:d9:c1:4c:95:44:5a:5b:3c:ca:5a:52:ce:c5:e7:8d:ea:c3:
c2:e2:9d:cc:53:0e:b2:17:60:85:c2:7c:6d:9e:08:82:fa:09:
3a:15:51:9d:a3:27:42:97:97:c6:9b:03:23:66:33:87:36:ac:
4d:b6:97:73:23:04:dc:a9:b9:c7:da:d7:03:e0:82:f8:c1:08:
f1:d1:95:37:cb:08:f7:00:37:0c:9c:01:31:4c:be:c1:e5:bc:
c6:f6:8d:3f:37:ce:7c:48:e6:e9:6f:e0:5d:24:5c:7b:b6:12:
f8:63:9e:b3:98:51:f5:1b:ac:62:49:ed:32:21:5d:ad:84:0f:
8a:c5:ad:34:65:f2:4c:1d:a4:42:af:ba:d3:d3:8e:d3:3e:45:
55:aa:80:9a:e0:17:c2:74:fa:e7:ed:0a:ed:97:68:c8:e8:37:
62:bf:39:10:fb:69:99:32:26:21:b6:be:52:88:a7:2b:10:0c:
a4:73:df:12
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZo66ibnnY6wldoQsFXY6xB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMDMxMTUzNjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGM2ZDUzNWIwZjI3NWEyNjE4NWY4ZjRkY2E1ODBkMjZkN2E5NzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheAWmSpLw2UO4sJ3YJFtK+LOH9Y2
MeWL3hmHo5Z1o09LkijgpqkvVD++uHMNiRHXrUg2HWSoJvGmL0UFsJPSI5tEx3KI
37C/nrTYlYGTWq4Wac+JQHHYddA9xkmsQ5rvPT3wxmJ4cf3MViSSLwXZ72iWAx0j
UaCeFmZjUHlqKjBPPWhGE4dbWgdjELK+r8LwpzLNa2hQfLDo8RYQm9lwCihWVgoy
d53Q0TVczEl3hJT4z4uDdQ7IWlTsKl2hnOfqStDSMnLgOYHLsfWOCfnK60Dy4Daz
rgjD0A0xpzZm2/YxzA7JwTXeVzeV++J8QKI8tpMWNni3ZO9ndUVilOOCQwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFHDG1TWw8nWiYYX49NylgNJtepdGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzM1MzNk
MC0xMzY3LTQ0YjItOTA0OC0wMDI4MWE1YmE2YzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvMzUzM2Qw
LTEzNjctNDRiMi05MDQ4LTAwMjgxYTViYTZjNy8xL2NNYlZOYkR5ZGFKaGhmajAz
S1dBMG0xNmwwWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKg/AADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDHZcwDQYJKoZIhvcNAQELBQADggEBAHff5z7HAkxluGpCkU5RlkCQ1Kq/SFl9
9e59lvbhzZ5rNctFZdWmMxZ2ZE07XwxAKCfjrRxJvNk50icahi3YOPTH8zthl/v0
PovZwUyVRFpbPMpaUs7F543qw8LincxTDrIXYIXCfG2eCIL6CToVUZ2jJ0KXl8ab
AyNmM4c2rE22l3MjBNypucfa1wPggvjBCPHRlTfLCPcANwycATFMvsHlvMb2jT83
znxI5ulv4F0kXHu2EvhjnrOYUfUbrGJJ7TIhXa2ED4rFrTRl8kwdpEKvutPTjtM+
RVWqgJrgF8J0+uftCu2XaMjoN2K/ORD7aZkyJiG2vlKIpysQDKRz3xI=
-----END CERTIFICATE-----
Generated at Tue Nov 11 10:03:28 2025 by rpki-client