Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/mzDoGpK3quJi2weA3vEzMjmlu9k.cer
File: mzDoGpK3quJi2weA3vEzMjmlu9k.cer (raw, json)
Hash identifier: oO5NCYhrqG1/cMXiDjjlEQ5EVtbXbPwJyG1yShzrSTk=
Subject key identifier: 9B:30:E8:1A:92:B7:AA:E2:62:DB:07:80:DE:F1:33:32:39:A5:BB:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9828C67C5914A621F045EBB4AB8ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/mzDoGpK3quJi2weA3vEzMjmlu9k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206617
IP: 31.14.184.0/21
IP: 89.32.152.0/23
IP: 89.40.234.0/23
IP: 93.114.170.0/24
IP: 93.114.245.0/24
IP: 93.115.210.0/24
IP: 185.18.24.0/22
IP: 185.167.52.0/22
IP: 188.213.16.0/24
IP: 188.213.40.0/21
IP: 188.240.42.0/24
IP: 188.240.44.0/23
IP: 188.241.153.0/24
IP: 188.241.186.0/24
IP: 188.241.251.0/24
IP: 193.178.224.0/23
IP: 195.2.218.0/23
IP: 2a03:f140::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:82:8c:67:c5:91:4a:62:1f:04:5e:bb:4a:b8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b30e81a92b7aae262db0780def1333239a5bbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:6c:d3:a9:49:1d:65:cf:0f:8b:06:4a:5d:
8f:d0:10:d0:af:82:f2:02:20:c9:c8:4b:70:06:d4:
8e:42:30:28:cd:81:37:0a:b0:59:32:31:58:28:a6:
8a:19:6f:7c:c1:9d:11:c3:39:04:50:87:82:48:34:
53:eb:6e:5f:48:4b:03:85:36:bd:a4:38:73:7f:a2:
3a:c3:76:11:ff:c4:91:12:fc:e6:67:fd:4f:86:5d:
87:a3:5c:f4:55:31:41:fa:cb:2e:28:b9:9b:a6:5e:
cf:85:6c:49:7d:18:3c:71:01:f4:86:8d:20:28:da:
32:0b:a8:f5:30:45:24:3f:b3:3d:81:5f:07:1f:a6:
58:c8:b6:e4:be:4f:45:6e:7b:0b:2f:42:74:95:58:
45:c3:f8:36:23:3c:25:bc:ec:6a:a3:c3:ff:bc:cb:
34:8f:d0:b9:63:bb:40:23:87:2d:d6:25:50:17:dd:
4a:93:b5:bc:04:c8:26:c8:91:4a:46:4c:ef:0a:58:
0f:b3:fe:26:78:10:88:91:0a:8f:fd:f6:d7:ed:a2:
25:cd:6c:54:ce:fd:1a:f6:4b:90:d7:0e:63:cf:fa:
d8:08:22:8f:3d:af:da:77:fc:ab:3c:5c:13:e3:01:
9c:2e:56:36:24:fc:f9:65:11:b8:50:23:22:c6:dc:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:30:E8:1A:92:B7:AA:E2:62:DB:07:80:DE:F1:33:32:39:A5:BB:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/mzDoGpK3quJi2weA3vEzMjmlu9k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.184.0/21
89.32.152.0/23
89.40.234.0/23
93.114.170.0/24
93.114.245.0/24
93.115.210.0/24
185.18.24.0/22
185.167.52.0/22
188.213.16.0/24
188.213.40.0/21
188.240.42.0/24
188.240.44.0/23
188.241.153.0/24
188.241.186.0/24
188.241.251.0/24
193.178.224.0/23
195.2.218.0/23
IPv6:
2a03:f140::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206617
Signature Algorithm: sha256WithRSAEncryption
17:d9:0c:31:15:89:57:fe:b2:c2:b3:6c:67:e0:12:54:c8:6d:
6f:1f:19:04:3d:73:d9:57:fb:2d:1a:a0:52:d3:5c:14:1a:d5:
bd:f0:29:60:65:92:de:a0:0d:83:dd:b3:44:61:cd:e5:0e:5d:
d0:bf:97:15:f8:36:36:62:07:69:94:8e:cd:17:de:43:0d:9b:
7b:39:db:fa:38:8e:7a:08:40:dd:64:ee:7d:6c:d9:4c:41:7a:
cf:b0:48:84:84:9e:84:a8:82:ac:89:2a:ab:b5:d0:1d:ee:dd:
0d:42:5e:b4:66:0d:a2:44:bf:59:38:78:af:5d:15:6c:89:32:
6a:cc:2e:64:37:c0:72:7e:44:36:01:09:c1:eb:1a:dc:9c:fc:
6a:44:fd:3f:ff:4e:5a:6b:1d:eb:02:de:ae:a0:ed:95:d5:e3:
fd:5f:5b:ff:da:46:6b:f3:54:c0:c4:e2:cf:8c:cf:b8:50:9a:
35:5a:98:7e:7a:95:49:aa:e7:ce:5d:fe:2c:8f:39:08:c0:a6:
d0:5f:53:4a:95:9d:cc:bf:8f:f2:3e:7a:5f:6d:7a:4b:ac:aa:
d2:b6:c2:88:10:52:3c:bc:ab:a4:df:5b:1f:85:a2:b9:90:3e:
a2:b5:79:13:f7:e0:36:fc:25:c8:96:e5:56:8e:fa:f0:8d:19:
b1:56:8e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:16 2026 by rpki-client