Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.cer
File: mgu7n4ULRYxiRn8Ct9aQhUKlBZM.cer (raw, json)
Hash identifier: a/Sm/qfmwgBTNhcO+Mhf4qQvJtBa5qaDO4O/ArbGbO4=
Subject key identifier: 9A:0B:BB:9F:85:0B:45:8C:62:46:7F:02:B7:D6:90:85:42:A5:05:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A042929B1AB4EA80B867C1FB5F5D7B538A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 27 Aug 2026 09:34:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.13.176.0/20
IP: 194.13.208.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:92:9b:1a:b4:ea:80:b8:67:c1:fb:5f:5d:7b:53:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 27 09:34:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a0bbb9f850b458c62467f02b7d6908542a50593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:6c:ba:f5:29:63:15:97:2e:c4:6a:7c:93:
97:96:cc:16:78:76:d5:8f:58:d6:bc:87:31:f2:a8:
c1:d7:63:29:30:bf:a6:1d:a9:0b:fc:9a:2f:90:5a:
ee:2c:25:5f:53:30:ef:c9:83:45:54:6a:8e:f2:7a:
c9:a2:09:85:23:9f:2d:0a:c6:5c:0d:14:74:23:4d:
0d:fb:2c:c2:19:35:9e:40:c0:82:be:76:6a:c5:fd:
cd:a9:b6:80:10:38:49:17:21:9a:4a:62:6c:d8:dd:
ca:91:f3:8c:aa:37:c1:20:7c:07:24:ae:bd:5a:84:
7a:26:db:e6:ca:34:b5:5f:eb:39:75:32:cb:cd:f1:
87:ab:33:dd:38:9d:5b:a5:6c:34:00:4b:24:74:e1:
ce:50:f4:54:8f:d3:6d:5f:c2:be:9c:6c:55:68:0a:
f1:3b:21:e5:63:b5:8d:9a:6c:9a:e0:6e:21:54:3a:
b2:92:d4:0f:4b:a1:18:97:b8:de:cb:2f:25:6e:ef:
27:15:73:be:0a:52:32:24:95:88:37:b8:78:52:e8:
99:ba:72:51:84:37:50:00:65:54:e7:06:fb:f1:5f:
bd:f8:7c:cd:d0:f0:4d:68:2b:97:f5:29:82:e3:9a:
91:22:8e:5e:c6:e3:4b:37:da:0b:aa:2a:c9:d3:cf:
d9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0B:BB:9F:85:0B:45:8C:62:46:7F:02:B7:D6:90:85:42:A5:05:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.176.0/20
194.13.208.0/20
Signature Algorithm: sha256WithRSAEncryption
76:8a:d5:1f:dc:fb:d2:e9:cb:8f:c0:e0:d4:79:92:60:6e:d0:
80:75:d6:b7:0d:6b:f0:0f:54:05:e7:10:09:8c:d1:17:09:42:
35:a0:31:44:16:72:69:4b:5d:2a:de:b0:71:24:d7:2b:a9:41:
05:68:fe:5d:06:6c:ca:cf:7b:ee:63:81:af:6a:44:78:ec:83:
16:42:33:2a:93:84:4a:54:9b:a6:0e:6d:ff:a5:52:38:02:39:
c4:25:ca:c9:a4:ec:16:ac:00:02:72:96:b2:ab:65:7e:7c:f1:
43:e6:6f:1a:4d:00:b1:5f:e2:19:51:3a:c9:90:40:6f:51:e5:
6e:33:5e:12:3e:7c:4d:72:06:13:8d:f7:3d:52:43:18:a1:5f:
da:67:63:d6:c3:af:c6:1f:6c:ed:bc:f9:e1:fd:c9:08:a0:35:
18:ee:9e:cc:c6:ab:6b:6c:65:1b:15:97:86:ac:3b:d3:ba:aa:
36:83:55:22:00:5b:23:56:e9:e2:7e:11:f8:63:45:03:2b:5d:
21:ae:c0:e4:d5:6a:28:bf:43:b3:eb:f2:0e:66:7c:f2:28:05:
57:aa:d9:a6:82:9a:2d:42:1d:06:ee:0d:1d:d3:52:24:9f:0b:
b8:22:70:54:51:d3:1c:bd:37:c4:20:36:05:d1:d4:93:f8:df:
d8:5e:ca:00
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAaBCkpsatOqAuGfB+19de1OKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODI3MDkzNDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTBiYmI5Zjg1MGI0NThjNjI0NjdmMDJiN2Q2OTA4NTQyYTUwNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqddsuvUpYxWXLsRqfJOXlswWeHbV
j1jWvIcx8qjB12MpML+mHakL/JovkFruLCVfUzDvyYNFVGqO8nrJogmFI58tCsZc
DRR0I00N+yzCGTWeQMCCvnZqxf3NqbaAEDhJFyGaSmJs2N3KkfOMqjfBIHwHJK69
WoR6JtvmyjS1X+s5dTLLzfGHqzPdOJ1bpWw0AEskdOHOUPRUj9NtX8K+nGxVaArx
OyHlY7WNmmya4G4hVDqyktQPS6EYl7jeyy8lbu8nFXO+ClIyJJWIN7h4UuiZunJR
hDdQAGVU5wb78V+9+HzN0PBNaCuX9SmC45qRIo5exuNLN9oLqirJ08/ZhQIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFJoLu5+FC0WMYkZ/ArfWkIVCpQWTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5L2M4NDE1
YS0zMmYxLTRjOGUtYWU5OS0yYzc0MmQ2MjZlOTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvYzg0MTVh
LTMyZjEtNGM4ZS1hZTk5LTJjNzQyZDYyNmU5Ny8xL21ndTduNFVMUll4aVJuOEN0
OWFRaFVLbEJaTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQEwg2wAwQEwg3QMA0GCSqGSIb3DQEBCwUAA4IB
AQB2itUf3PvS6cuPwODUeZJgbtCAdda3DWvwD1QF5xAJjNEXCUI1oDFEFnJpS10q
3rBxJNcrqUEFaP5dBmzKz3vuY4GvakR47IMWQjMqk4RKVJumDm3/pVI4AjnEJcrJ
pOwWrAACcpayq2V+fPFD5m8aTQCxX+IZUTrJkEBvUeVuM14SPnxNcgYTjfc9UkMY
oV/aZ2PWw6/GH2ztvPnh/ckIoDUY7p7MxqtrbGUbFZeGrDvTuqo2g1UiAFsjVuni
fhH4Y0UDK10hrsDk1Woov0Oz6/IOZnzyKAVXqtmmgpotQh0G7g0d01Iknwu4InBU
UdMcvTfEIDYF0dST+N/YXsoA
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:38:52 2026 by rpki-client