Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
File: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer (raw, json)
Hash identifier: oMyig/LcQr2PglmQ034Lgv6MppDC5TFrYeQJFDTqeoI=
Subject key identifier: 33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C7FEFC6CAB11D0F35877DB9C5ED6004
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:18:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44741
IP: 92.39.144.0/20
IP: 2a07:b840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:ef:c6:ca:b1:1d:0f:35:87:7d:b9:c5:ed:60:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:cc:8b:40:75:a4:a7:c0:73:9d:e1:b8:4d:
95:d3:e3:d3:58:e5:87:a3:33:5c:36:10:cb:d6:36:
9b:89:e4:a6:b8:f6:8c:73:87:19:88:b0:a5:17:02:
77:13:4d:ac:22:36:82:1d:fe:71:79:eb:71:23:74:
8b:68:08:d0:72:4a:dc:16:48:1b:12:0d:6c:75:15:
c6:34:d4:23:5e:cc:e9:0c:e5:d6:90:a1:74:7f:e3:
f4:26:8d:0a:81:e7:3d:e6:22:ef:de:83:f3:f0:52:
5f:0d:89:e2:44:03:9d:75:2c:79:fb:52:80:93:5f:
1c:77:62:c9:23:2b:a1:15:44:9e:93:b5:b0:ac:b3:
48:be:0d:6b:93:fe:61:dc:42:97:c3:df:f2:c5:47:
6a:59:5d:57:1b:11:b2:21:da:14:82:f1:9c:0f:86:
cd:ab:de:2f:0c:d9:91:43:4c:03:42:4b:55:34:31:
42:b0:67:49:75:2d:ad:c5:a9:20:22:54:e4:c2:c5:
12:7b:46:a9:5b:3d:10:94:d7:e5:fc:3d:33:65:d6:
3c:f1:72:8d:7f:4e:3b:43:b8:79:ac:4b:56:07:64:
16:88:7a:da:c6:ed:67:dc:c8:ce:a8:7a:dd:96:71:
45:e1:de:05:30:4d:06:a2:a8:9e:3b:f4:6b:b8:73:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.144.0/20
IPv6:
2a07:b840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44741
Signature Algorithm: sha256WithRSAEncryption
ae:dc:ae:cc:09:35:7e:22:10:c1:98:fa:1b:0e:f0:7b:c2:df:
96:07:b9:6a:cb:7f:47:f4:fb:38:7e:1f:84:e3:45:df:90:83:
e4:51:9e:99:b5:1b:51:a1:5e:5a:dd:9a:5c:3d:90:40:2b:68:
5e:9f:60:e0:d9:5d:49:38:9f:70:4a:66:8a:72:99:5a:aa:19:
59:39:f2:37:09:29:25:04:12:02:b0:be:6f:c1:75:43:6e:49:
45:3f:a9:e6:73:68:2a:9c:a7:2b:35:da:c0:2c:2b:cc:15:84:
ce:70:2b:42:bd:7c:d6:7f:d2:a1:55:3e:1a:58:ff:f3:70:0e:
98:45:2e:71:07:ac:86:38:8e:36:2f:ad:7e:ac:b8:ae:aa:12:
91:70:45:ce:64:22:7b:b1:1a:3e:d5:52:1a:fb:63:2a:32:43:
ee:14:4e:50:38:40:05:ec:5e:a5:0c:d0:29:84:03:84:77:1b:
ba:e1:88:04:38:01:9a:ee:16:cd:0f:84:ba:2c:eb:94:74:32:
7a:27:96:a1:e6:25:b9:f7:a4:4a:d8:74:ee:f5:80:bc:f4:a6:
19:d4:fe:30:88:26:fe:00:70:f0:c4:2b:98:3e:c1:51:24:62:
6d:26:04:5e:30:92:8b:f7:ae:9a:2d:47:b8:f5:64:8c:55:f7:
9a:3c:05:cb
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt8f+/GyrEdDzWHfbnF7WAEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2JiOGZjY2M2ZDZhYjcyYmE1Mjk0YjA5OTg1ZGU3OTllYTA2MzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1jMi0B1pKfAc53huE2V0+PTWOWH
ozNcNhDL1jabieSmuPaMc4cZiLClFwJ3E02sIjaCHf5xeetxI3SLaAjQckrcFkgb
Eg1sdRXGNNQjXszpDOXWkKF0f+P0Jo0Kgec95iLv3oPz8FJfDYniRAOddSx5+1KA
k18cd2LJIyuhFUSek7WwrLNIvg1rk/5h3EKXw9/yxUdqWV1XGxGyIdoUgvGcD4bN
q94vDNmRQ0wDQktVNDFCsGdJdS2txakgIlTkwsUSe0apWz0QlNfl/D0zZdY88XKN
f047Q7h5rEtWB2QWiHraxu1n3MjOqHrdlnFF4d4FME0GoqieO/RruHOy+QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFDO7j8zG1qtyulKUsJmF3nmeoGNIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzU2Yjg4
Yy1iYTk1LTQ3YTctOGFmOC0xMjkwN2M5OWZhNDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvNTZiODhj
LWJhOTUtNDdhNy04YWY4LTEyOTA3Yzk5ZmE0OS8xL003dVB6TWJXcTNLNlVwU3dt
WVhlZVo2Z1kwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQEXCeQMA0EAgACMAcDBQMqB7hAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCuxTANBgkqhkiG9w0BAQsFAAOCAQEArtyuzAk1fiIQ
wZj6Gw7we8Lflge5ast/R/T7OH4fhONF35CD5FGembUbUaFeWt2aXD2QQCtoXp9g
4NldSTifcEpminKZWqoZWTnyNwkpJQQSArC+b8F1Q25JRT+p5nNoKpynKzXawCwr
zBWEznArQr181n/SoVU+Glj/83AOmEUucQeshjiONi+tfqy4rqoSkXBFzmQie7Ea
PtVSGvtjKjJD7hROUDhABexepQzQKYQDhHcbuuGIBDgBmu4WzQ+EuizrlHQyeieW
oeYlufekSth07vWAvPSmGdT+MIgm/gBw8MQrmD7BUSRibSYEXjCSi/eumi1HuPVk
jFX3mjwFyw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:22 2026 by rpki-client