Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
File: mPrK__I6YsGQOx6Vr0DG0INOXjI.cer (raw, json)
Hash identifier: zx0rcxD1H6qKp9UDOmkFO03Q8YTZhtAKj/yDSazkEac=
Subject key identifier: 98:FA:CA:FF:F2:3A:62:C1:90:3B:1E:95:AF:40:C6:D0:83:4E:5E:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBC5856DD2E194084594FD616AE126
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43281
AS: 201711
AS: 205557
AS: 210133
AS: 212638
IP: 37.77.168.0/21
IP: 77.247.200.0/21
IP: 185.214.40.0/22
IP: 2a03:9d80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:c5:85:6d:d2:e1:94:08:45:94:fd:61:6a:e1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98facafff23a62c1903b1e95af40c6d0834e5e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:01:d6:cf:06:ce:12:1b:1c:86:a4:06:1c:
af:65:d0:3b:d4:3c:d9:a1:e6:cc:f6:2e:48:9a:2a:
01:79:8d:1c:1a:af:2e:ad:8d:b1:02:17:ad:48:b9:
cc:ef:59:d8:04:86:20:76:57:58:74:69:1b:c3:76:
56:00:b9:a9:e1:75:41:e9:60:83:61:b9:83:82:8c:
ec:d2:38:f1:58:ed:65:16:98:c5:0e:06:78:03:d3:
da:95:53:e7:c1:71:ea:f3:4b:e1:ff:a7:72:eb:8e:
5f:15:93:d5:9f:24:d1:b2:a3:53:9b:96:03:a8:a1:
ac:35:4b:09:60:83:8a:0c:13:15:d7:86:91:ce:72:
a6:05:f8:d8:8c:ee:95:43:c0:10:a7:32:e4:53:f0:
d3:f1:70:bb:94:22:f9:5d:f9:3d:64:dc:f6:56:29:
4a:c0:74:b1:e2:9f:85:4d:b3:1a:a7:bf:8b:96:5b:
24:9c:ca:ec:a4:49:ce:23:c2:4e:9a:be:03:76:be:
5c:de:33:7a:b1:58:b6:dd:41:06:14:fc:4f:23:3b:
04:c3:03:0d:2f:03:0f:13:c8:14:ab:a9:4f:1c:c3:
e3:ef:d0:49:11:0f:61:d9:e0:3e:1e:ea:e2:9e:d7:
07:cb:04:8e:42:13:b8:e2:d4:7b:38:4b:ad:43:43:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FA:CA:FF:F2:3A:62:C1:90:3B:1E:95:AF:40:C6:D0:83:4E:5E:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.168.0/21
77.247.200.0/21
185.214.40.0/22
IPv6:
2a03:9d80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43281
201711
205557
210133
212638
Signature Algorithm: sha256WithRSAEncryption
a5:c1:e9:e9:0c:96:06:eb:82:06:e8:3a:97:8d:3d:fe:a4:ea:
23:f3:b9:f6:34:41:c4:e7:87:6b:8e:e9:03:6d:62:f2:90:3d:
65:bc:d0:92:61:96:17:40:78:9b:ff:45:21:b5:4a:a4:36:4f:
c8:da:0f:c9:e6:8d:69:31:f6:aa:ef:b6:2f:05:e3:0d:2c:f7:
7f:d6:09:90:96:da:d7:3b:e3:78:a1:3f:fe:46:27:03:93:03:
dd:4b:a2:b6:d2:45:b6:41:f4:c1:be:0a:d0:7c:27:9d:e0:7b:
9a:d9:17:20:ed:28:02:c8:31:b3:3e:1c:26:45:8a:db:60:85:
a3:e1:46:15:00:c0:6d:02:ed:44:8e:52:81:90:58:bf:2b:c9:
5a:38:0a:1c:01:a1:d3:63:8e:d8:c6:88:ae:39:ef:af:32:4c:
f2:38:52:5b:72:7e:a6:19:7e:45:1a:93:2d:c8:fc:01:68:30:
b5:70:ad:31:a9:ba:88:f1:94:dd:85:a5:64:00:a2:29:17:70:
27:0c:da:04:26:5b:90:96:db:06:ee:88:36:ab:d3:ff:03:59:
d0:72:09:08:e9:20:f9:18:b4:50:60:d2:2b:a3:9a:47:61:01:
e5:e9:6e:d8:0b:c5:cd:48:08:95:5e:42:87:64:5c:bf:4b:a8:
33:48:f8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:27:29 2026 by rpki-client