Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
File: MU0IhXjsDimwS0PpAUk1hnJjZP0.cer (raw, json)
Hash identifier: JZ030lfp5yJSWluDBDp3Vd3vacKr/7HfW8GwU8adjVk=
Subject key identifier: 31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C65E802D424603CCB95BF1B87EE025
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:17:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 20909
IP: 91.217.171.0/24
IP: 193.178.214.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:5e:80:2d:42:46:03:cc:b9:5b:f1:b8:7e:e0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=314d088578ec0e29b04b43e901493586726364fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:21:e7:c0:2b:e8:9d:fc:1d:59:52:77:64:
d1:5f:2d:0f:f5:bd:b3:21:27:98:05:5c:00:5d:09:
ae:d9:f3:6b:b2:2c:f1:c3:b1:9e:8f:15:9e:37:3f:
50:7e:87:31:20:8e:da:62:1a:2e:b1:e2:98:f1:b6:
f2:1e:6b:6c:a5:11:fe:7b:00:65:fb:97:99:fa:90:
8f:4e:f2:8f:d5:96:d1:39:13:5a:bd:3f:a2:27:a5:
f9:79:7b:f4:a7:26:f5:c8:a4:56:6c:5b:aa:d7:8a:
66:23:6a:2c:f1:14:ab:22:bc:8f:76:96:a7:8c:21:
a3:2a:55:58:93:cc:ab:00:5a:7d:44:4c:b0:27:19:
79:9b:5f:1f:cf:c1:c1:30:fc:31:66:37:2d:91:f1:
eb:b5:e9:ea:1a:6d:c5:67:2d:0f:24:3e:f6:dd:02:
2d:37:ee:b7:93:bb:18:e5:24:98:80:c2:b2:5a:89:
1b:78:92:a3:3f:03:38:92:80:3f:7b:d2:78:6d:59:
24:5d:f2:d0:27:76:31:98:08:c1:2a:c4:b6:80:82:
f4:5f:6b:87:71:f6:01:6a:cd:36:c4:e7:04:fd:b0:
77:7f:b2:d7:a7:23:c7:74:7b:b0:e0:6e:2b:b2:72:
f9:d5:29:62:ad:84:b4:fb:e2:1d:16:57:1b:0e:58:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.171.0/24
193.178.214.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20909
Signature Algorithm: sha256WithRSAEncryption
66:84:54:da:a2:7d:34:dd:58:79:46:4c:37:3b:de:fb:4c:63:
15:70:b5:4f:28:c7:12:09:20:70:d7:c1:55:ee:fb:bc:f5:06:
20:9f:6a:9c:f2:fd:b4:64:59:a5:9b:79:13:59:d5:59:04:4a:
5a:e0:0d:2b:4c:25:36:a7:bf:2a:65:e8:db:f0:78:08:76:c1:
6b:b9:8e:3c:77:3a:07:b7:90:59:76:4f:e7:7e:38:7f:e0:54:
bb:30:35:ef:f2:b0:d5:49:1b:cd:19:84:a0:f4:10:1e:64:0a:
03:22:17:03:49:c9:eb:20:7d:2e:d2:76:7f:47:be:f8:ea:6c:
5c:8d:90:59:2b:7b:cc:e6:a2:52:32:35:5c:ab:03:8f:18:a7:
d0:b0:a7:c7:37:47:0c:e2:0e:64:48:40:84:75:87:30:5f:a4:
d4:67:6d:6f:f4:46:14:50:63:cf:ca:fe:12:59:a5:95:a3:e3:
d4:68:5a:ed:0c:74:8d:04:a9:f1:36:01:6a:89:e1:42:fb:97:
a0:15:b8:4e:38:0d:14:b8:78:70:11:08:38:3a:d9:d9:7a:b9:
10:22:e4:55:b7:2a:44:88:25:fb:75:6c:aa:df:31:78:c5:42:
ab:02:a1:5d:b8:cd:69:c0:40:0a:03:4a:2b:3e:eb:eb:76:15:
2b:61:f0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:58:47 2026 by rpki-client