Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
File: MRRFNToII-2u8So6M1b6gJjhXqw.cer (raw, json)
Hash identifier: vIQQtSp8iLoU4YDCL6evkBnxbFKGIvj9fDLjd6Z/otU=
Subject key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79110EF2F50C04BCCDE37E0F5A085EDE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:18:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205037
IP: 161.51.255.0/24
IP: 193.23.163.0/24
IP: 2001:67c:1820::/48
IP: 2001:67c:2c6c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:0e:f2:f5:0c:04:bc:cd:e3:7e:0f:5a:08:5e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=311445353a0823edaef12a3a3356fa8098e15eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:6c:3c:60:38:e7:80:b8:5a:19:ea:f4:7e:
af:2a:8a:60:e8:80:8a:b4:91:e2:62:09:80:56:d4:
59:c1:1d:3e:88:b8:ac:84:7d:ed:8c:aa:15:48:ab:
ae:03:11:95:40:89:7e:23:65:d9:86:bd:f7:30:fd:
d1:77:2a:d6:de:c0:87:3a:26:2e:29:97:c0:9f:b6:
1a:c0:f9:94:77:2f:90:92:ae:27:22:ba:b3:05:e7:
d5:91:af:25:94:4f:6d:c7:46:d4:a0:a9:2a:f0:76:
25:17:87:20:67:ce:58:cd:da:33:96:5d:f9:f4:19:
16:5f:31:37:68:08:66:85:d6:c0:07:64:dc:55:38:
44:1a:9b:18:bd:4e:c4:47:ba:d8:07:79:3b:f2:31:
8b:27:fa:bd:e9:0c:86:3d:dd:bf:cf:a9:13:dc:c2:
5e:1f:88:38:c6:d1:5a:f2:1d:08:c4:a1:bf:b8:7f:
b6:fe:45:41:3e:d4:87:1b:53:c4:2a:ce:b3:4f:04:
81:ca:cd:37:f9:aa:d2:f0:e8:e4:c9:3e:2b:aa:48:
55:c7:90:e8:c8:ec:c1:a9:7c:b9:55:16:a7:f3:05:
b4:36:ed:ce:f5:3b:36:98:b6:38:31:f5:5a:8c:57:
18:73:c3:e4:24:08:17:f8:86:b9:49:20:62:2d:38:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.51.255.0/24
193.23.163.0/24
IPv6:
2001:67c:1820::/48
2001:67c:2c6c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205037
Signature Algorithm: sha256WithRSAEncryption
7d:29:ec:b3:cb:ac:1b:80:52:1a:0b:42:46:cb:9e:94:f0:65:
df:c3:b9:74:84:99:19:73:57:b5:57:ee:65:01:a9:b7:22:dd:
e7:eb:57:5b:ea:58:62:63:21:39:75:5e:5c:fa:fb:60:04:3e:
39:bc:df:83:1f:b1:d5:f5:56:79:85:8e:4b:1e:cb:13:1c:ae:
8a:f6:de:9f:dd:18:0f:ed:ff:09:8c:af:b1:f7:c4:11:b7:b5:
2a:c9:b9:c8:4c:96:fa:7f:95:3e:cf:c8:03:b8:a8:35:e1:39:
26:df:16:01:58:2e:53:aa:49:af:cb:c7:b4:40:46:db:77:b7:
c5:d6:8c:9e:ce:2f:98:60:eb:70:a2:3e:33:df:83:80:2f:a9:
b6:5a:a7:14:ef:f9:c8:cd:b3:96:4c:9a:ed:ac:0f:ac:4b:30:
96:84:14:a5:3f:29:52:83:2f:fb:52:ca:c0:65:82:88:c8:68:
58:c4:ed:91:d8:72:ed:1a:d0:c6:d9:0e:6d:dd:45:0d:f9:3f:
0a:8f:65:18:04:ed:57:e2:da:67:8f:b9:b7:51:6b:59:a0:f0:
19:d7:82:ee:3d:fd:cd:ec:c4:2e:47:2b:32:0b:f8:1a:3c:b7:
4d:8f:d2:3d:b2:c9:ff:cd:aa:2c:eb:c3:63:da:67:49:3d:8f:
ec:f7:4d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:07 2026 by rpki-client