Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
File: MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer (raw, json)
Hash identifier: UwRt9tKAsKaYSj87g+385PspucwoU8Gq4rjBUikOlko=
Subject key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5CD748F39E07A3FCFF3CC820721CDA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:19:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:67c:26e4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:d7:48:f3:9e:07:a3:fc:ff:3c:c8:20:72:1c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:19:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:06:67:62:ac:bd:ca:e1:2a:8b:73:dd:f7:
63:8c:b1:41:cc:67:3c:34:d2:b8:9b:12:bb:63:2b:
fd:36:5a:43:16:1a:a4:de:73:45:df:52:86:23:84:
c8:4e:3d:81:2e:70:89:e5:49:7d:92:61:59:aa:cc:
e1:cb:ab:8a:b1:f7:de:ef:66:be:a1:e9:d3:24:2e:
92:1a:a9:e7:cb:ca:e6:35:25:e6:68:dc:6d:97:f5:
b8:49:77:59:78:be:df:d0:68:e2:26:14:09:37:f4:
a5:63:02:4d:27:80:38:65:54:9e:95:02:63:3f:08:
85:99:ae:de:ba:37:44:d2:8a:89:af:bc:e6:71:bd:
57:62:5d:ee:c9:32:85:84:c9:e3:1d:92:6e:07:8d:
cb:98:4b:67:7b:b6:ba:ce:ab:5e:49:15:90:1c:74:
30:0a:ed:11:5c:af:ff:af:81:ce:7a:46:ba:50:99:
95:bc:18:05:df:02:05:9e:c4:19:83:e5:cd:03:9d:
2e:0a:ea:c8:9e:ec:8b:5e:4a:84:52:d6:43:4f:ff:
eb:a0:d7:29:a3:42:e5:0b:53:45:79:4a:9d:e1:7e:
8a:da:7f:0f:08:29:11:c4:07:61:ac:27:22:1d:4e:
c2:38:83:89:48:83:7a:68:40:f6:e1:1e:8b:a1:e4:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:26e4::/48
Signature Algorithm: sha256WithRSAEncryption
a9:07:bb:bf:31:34:97:39:b5:98:ad:5f:8b:7f:b9:bb:98:7c:
db:3a:7f:b0:e6:9c:bc:ad:51:36:4c:db:05:df:75:60:84:ff:
ea:de:55:2d:11:6e:61:2c:7c:3f:a9:d2:24:f6:3e:11:b1:83:
b6:f8:a1:39:a1:d2:42:6c:f1:2a:72:16:97:ef:d3:05:8b:91:
8e:0f:52:bc:3f:33:9e:58:52:ce:2c:0b:fc:28:29:44:5d:07:
fc:ea:c8:32:32:be:79:2d:99:57:21:02:f1:3b:d7:dd:7a:ac:
28:05:d3:a9:53:4b:3e:ff:d1:cc:23:9b:62:7a:86:ec:43:9f:
62:6c:b4:47:a3:55:07:48:6e:8f:c1:32:b9:f9:1f:2f:ac:fa:
cb:7c:9f:95:b4:4a:a0:c0:8c:0b:88:6f:80:80:6c:8f:cf:1d:
c9:d1:4f:26:fe:81:ba:0b:6f:ea:5b:60:ea:2d:25:1d:16:02:
94:6b:15:7c:20:2e:e2:90:8f:81:eb:22:21:49:39:e4:d1:49:
7d:32:73:ac:6f:4f:99:02:8e:49:5d:68:9a:3c:7c:84:98:51:
08:1a:29:37:b7:36:48:e1:82:ed:db:28:dd:8b:db:4a:e6:b9:
85:91:97:ce:4e:b5:95:51:7c:42:d9:fb:18:74:38:32:52:33:
2c:1e:e6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:56:22 2026 by rpki-client