Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
File: MKVWMuyQNMm5o_KQquzZoHwfJqs.cer (raw, json)
Hash identifier: ee2pjZqa6tJGGQp3YZ/vO1WvkO6d+7p5BNQ+E++ckHA=
Subject key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797F17CAE44289DBCA46C4BDA94BF6CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42122
AS: 45010
AS: 199508
IP: 45.8.128.0/22
IP: 62.220.224.0/22
IP: 62.220.252.0/22
IP: 85.194.236.0/23
IP: 89.41.48.0/24
IP: 89.42.43.0/24
IP: 91.90.48.0/21
IP: 93.90.48.0/20
IP: 185.11.208.0/22
IP: 185.195.149.0 -- 185.195.151.255
IP: 195.192.250.0/23
IP: 2a01:b5a0::/32
IP: 2a03:6f40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:17:ca:e4:42:89:db:ca:46:c4:bd:a9:4b:f6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:9c:0a:d7:4b:08:f4:28:7e:42:bb:86:3d:
9d:8c:9a:e7:83:a9:df:d8:77:91:4c:c6:64:d2:67:
d5:82:8a:29:4f:e6:3f:4b:b2:d1:8b:dc:c7:8c:09:
66:60:a9:30:38:ea:4f:79:1e:f0:3a:fc:14:d8:f9:
57:01:38:b4:82:3e:4f:1c:ff:fa:fb:8b:ec:99:f5:
89:76:16:89:b9:09:4a:ec:98:67:02:14:5e:5b:15:
79:22:66:db:28:c6:0a:4b:93:ef:12:7b:41:9f:9f:
e4:71:e9:6b:5d:94:0b:fd:ce:5e:8d:7f:21:4d:b2:
85:0f:d7:3d:39:72:f8:01:a0:c3:df:1e:4e:fa:80:
79:10:6b:60:66:30:14:dc:9c:e6:0e:53:86:93:7e:
e7:8b:a6:87:b4:53:61:52:6f:be:bb:66:3e:ed:3a:
5b:17:52:7e:6f:ed:ec:0d:ba:17:42:49:24:db:02:
e4:77:f0:0c:cf:56:ba:b9:b6:ae:9e:38:dd:60:87:
9c:0c:8a:6d:ff:81:3d:dc:46:cb:fc:76:da:b0:24:
13:10:6a:a3:f3:f1:e0:38:d4:55:3c:30:8d:8c:ce:
75:32:db:df:c9:17:f0:00:28:8a:65:5a:bf:31:a7:
0d:39:d8:58:32:df:a7:12:12:45:63:f3:cf:f2:1b:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.128.0/22
62.220.224.0/22
62.220.252.0/22
85.194.236.0/23
89.41.48.0/24
89.42.43.0/24
91.90.48.0/21
93.90.48.0/20
185.11.208.0/22
185.195.149.0-185.195.151.255
195.192.250.0/23
IPv6:
2a01:b5a0::/32
2a03:6f40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42122
45010
199508
Signature Algorithm: sha256WithRSAEncryption
1f:13:55:d2:a4:30:e6:05:3e:15:c5:d5:ba:5d:2a:b0:ab:82:
d3:12:3f:1a:8a:95:74:57:03:03:d3:58:00:8f:67:36:b7:1f:
39:12:f7:42:b4:7b:eb:79:9c:6d:c6:d8:4d:ce:37:f6:2b:dd:
ab:a5:30:f2:66:82:7e:19:e3:35:3b:f6:45:e5:7f:30:2e:56:
9b:06:cd:b7:68:6e:b6:bc:19:f5:f6:84:d8:f1:ef:a6:16:fb:
f4:2e:0e:d0:92:c1:2c:cd:fb:e8:dc:79:72:2a:75:18:66:58:
cf:31:84:63:4e:f6:97:9e:9d:95:af:9a:d9:8f:67:54:29:b3:
30:49:04:b9:ef:e7:e3:12:5a:0b:fa:2e:62:58:2e:0d:57:43:
96:48:50:f3:89:88:15:eb:08:56:cc:20:26:e7:6b:a3:e8:26:
c9:45:ae:6f:5b:c4:b1:cc:75:1a:f9:44:27:76:f1:bf:68:55:
70:eb:b8:70:bb:94:ee:12:48:52:08:6e:ba:41:cb:46:ee:a2:
28:a0:6d:b2:6d:bc:84:6b:eb:c3:ab:b5:12:23:6d:67:2a:f8:
68:f4:b0:46:75:6f:b8:35:3c:a2:7c:a9:2a:23:90:bc:1d:a1:
5d:51:b0:e9:84:11:b3:51:64:a9:80:b3:16:79:bb:fb:8e:70:
45:07:15:91
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgISAZt5fxfK5EKJ28pGxL2pS/bLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGE1NTYzMmVjOTAzNGM5YjlhM2YyOTBhYWVjZDlhMDdjMWYyNmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTCcCtdLCPQofkK7hj2djJrng6nf
2HeRTMZk0mfVgoopT+Y/S7LRi9zHjAlmYKkwOOpPeR7wOvwU2PlXATi0gj5PHP/6
+4vsmfWJdhaJuQlK7JhnAhReWxV5ImbbKMYKS5PvEntBn5/kcelrXZQL/c5ejX8h
TbKFD9c9OXL4AaDD3x5O+oB5EGtgZjAU3JzmDlOGk37ni6aHtFNhUm++u2Y+7Tpb
F1J+b+3sDboXQkkk2wLkd/AMz1a6ubaunjjdYIecDIpt/4E93EbL/HbasCQTEGqj
8/HgONRVPDCNjM51MtvfyRfwACiKZVq/MacNOdhYMt+nEhJFY/PP8hu5MwIDAQAB
o4IDBDCCAwAwHQYDVR0OBBYEFDClVjLskDTJuaPykKrs2aB8HyarMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1Lzg1MDAy
NC04NGVlLTQ0YzgtYjJkOS03ZDIwZWIwNjM0NTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvODUwMDI0
LTg0ZWUtNDRjOC1iMmQ5LTdkMjBlYjA2MzQ1NS8xL01LVldNdXlRTk1tNW9fS1Fx
dXpab0h3Zkpxcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHkGCCsGAQUF
BwEHAQH/BGowaDBQBAIAATBKAwQCLQiAAwQCPtzgAwQCPtz8AwQBVcLsAwQAWSkw
AwQAWSorAwQDW1owAwQEXVowAwQCuQvQMAwDBAC5w5UDBAO5w5ADBAHDwPowFAQC
AAIwDgMFACoBtaADBQAqA29AMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwCkigID
AK/SAgMDC1QwDQYJKoZIhvcNAQELBQADggEBAB8TVdKkMOYFPhXF1bpdKrCrgtMS
PxqKlXRXAwPTWACPZza3HzkS90K0e+t5nG3G2E3ON/Yr3aulMPJmgn4Z4zU79kXl
fzAuVpsGzbdobra8GfX2hNjx76YW+/QuDtCSwSzN++jceXIqdRhmWM8xhGNO9pee
nZWvmtmPZ1QpszBJBLnv5+MSWgv6LmJYLg1XQ5ZIUPOJiBXrCFbMICbna6PoJslF
rm9bxLHMdRr5RCd28b9oVXDruHC7lO4SSFIIbrpBy0buoiigbbJtvIRr68OrtRIj
bWcq+Gj0sEZ1b7g1PKJ8qSojkLwdoV1RsOmEEbNRZKmAsxZ5u/uOcEUHFZE=
-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:16 2026 by rpki-client