Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.cer
File: MiDNbPP4Ze9s-gQiLCI88g7n4Eg.cer (raw, json)
Hash identifier: M3MEwBLGngbovyJo1acqhQUwtffz9HM8cPn1aRt75Rc=
Subject key identifier: 32:20:CD:6C:F3:F8:65:EF:6C:FA:04:22:2C:22:3C:F2:0E:E7:E0:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB7ECAEB355F303AD437342FB017A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201661
IP: 185.53.152.0/22
IP: 2a04:cdc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:7e:ca:eb:35:5f:30:3a:d4:37:34:2f:b0:17:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3220cd6cf3f865ef6cfa04222c223cf20ee7e048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:70:b6:56:67:53:e5:e9:e6:d7:21:3a:77:
ec:47:bb:bf:38:44:fa:b7:2a:50:63:89:14:02:b2:
1d:32:1f:06:5d:e8:b3:a8:e7:d7:6d:6e:10:33:1b:
b1:02:dd:7b:2d:ab:46:03:75:16:c2:29:d4:9e:67:
bb:2e:1f:31:7c:ba:40:4a:4f:ea:b1:a8:d5:1f:90:
bb:8c:58:9f:e9:82:85:92:50:38:09:e9:a1:34:c7:
05:21:bc:86:89:7e:22:67:55:9c:32:d3:cc:67:4f:
91:c2:ca:f1:33:62:7d:20:fc:73:eb:f7:a1:ab:7f:
bb:45:2d:fe:54:b7:4c:7e:5f:41:3e:57:df:91:f6:
f2:39:e3:9a:f3:ee:83:02:55:32:da:cb:83:50:29:
b3:ed:e9:31:0d:e9:b2:7a:3e:af:db:b6:e0:30:9a:
b6:22:cd:e0:2e:42:6d:ff:12:4e:a6:ed:42:94:72:
cd:ef:ad:5c:d2:38:56:22:2c:11:68:5e:8f:5d:69:
cf:e9:78:b6:53:2d:51:28:ec:ab:4c:93:b8:c7:8b:
9f:33:44:79:bf:7d:82:40:20:73:a8:8e:03:5e:c6:
eb:c4:69:c9:e8:78:c1:cc:9f:6c:f1:e3:bf:eb:2a:
fa:5f:d4:63:59:0e:cb:9a:0f:26:f3:e4:7b:22:dd:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:CD:6C:F3:F8:65:EF:6C:FA:04:22:2C:22:3C:F2:0E:E7:E0:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.152.0/22
IPv6:
2a04:cdc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201661
Signature Algorithm: sha256WithRSAEncryption
4f:b8:21:79:78:d5:6b:2f:9d:3d:a4:fc:34:6b:63:dc:ca:3c:
7f:ae:f3:db:bd:3d:ea:82:d7:41:3c:96:1f:9a:e0:55:e6:b0:
0c:a6:85:62:f1:4e:7e:a9:27:d7:f6:e6:0c:8f:8c:69:a6:11:
62:27:55:00:fd:59:35:3e:4f:7c:4b:6c:26:46:7b:72:fd:d1:
9c:1c:0e:d7:a4:e0:e9:99:0c:bb:1f:69:b4:6e:fd:0f:48:34:
a5:78:39:ae:13:ed:d0:18:10:b0:d3:34:cc:0d:66:33:dd:e2:
15:51:74:52:25:fa:20:ad:e3:3e:db:08:ce:15:61:db:2e:3b:
da:5c:78:c2:49:f4:78:18:19:dc:58:be:18:12:b6:30:a4:5c:
7e:cc:d6:bd:d5:80:28:74:dc:55:12:36:aa:f6:fa:21:56:37:
6a:85:a5:3a:c3:57:b2:0c:f1:e1:7d:9f:e9:91:87:38:23:9b:
3b:5d:4d:ec:71:18:71:44:d7:0e:1a:ae:f5:ea:72:41:ad:33:
8e:1b:32:93:03:cc:fa:d8:f9:d0:18:ee:da:40:77:0e:c1:5b:
5e:79:86:75:be:c5:c0:52:21:dd:df:ce:8d:18:b5:26:6f:60:
4e:bd:6d:b8:a9:86:ee:3e:94:07:c2:ad:21:6d:fb:ba:14:4b:
f2:d8:cb:10
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZ8Y+37K6zVfMDrUNzQvsBenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjIwY2Q2Y2YzZjg2NWVmNmNmYTA0MjIyYzIyM2NmMjBlZTdlMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxJwtlZnU+Xp5tchOnfsR7u/OET6
typQY4kUArIdMh8GXeizqOfXbW4QMxuxAt17LatGA3UWwinUnme7Lh8xfLpASk/q
sajVH5C7jFif6YKFklA4CemhNMcFIbyGiX4iZ1WcMtPMZ0+RwsrxM2J9IPxz6/eh
q3+7RS3+VLdMfl9BPlffkfbyOeOa8+6DAlUy2suDUCmz7ekxDemyej6v27bgMJq2
Is3gLkJt/xJOpu1ClHLN761c0jhWIiwRaF6PXWnP6Xi2Uy1RKOyrTJO4x4ufM0R5
v32CQCBzqI4DXsbrxGnJ6HjBzJ9s8eO/6yr6X9RjWQ7Lmg8m8+R7It2yPQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFDIgzWzz+GXvbPoEIiwiPPIO5+BIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2VmMjE5
Mi1mMmQ5LTRhNTYtOTNmNi0xNzM4MjUzOWIwMDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZWYyMTky
LWYyZDktNGE1Ni05M2Y2LTE3MzgyNTM5YjAwMC8xL01pRE5iUFA0WmU5cy1nUWlM
Q0k4OGc3bjRFZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuTWYMA0EAgACMAcDBQMqBM3AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMTvTANBgkqhkiG9w0BAQsFAAOCAQEAT7gheXjVay+d
PaT8NGtj3Mo8f67z27096oLXQTyWH5rgVeawDKaFYvFOfqkn1/bmDI+MaaYRYidV
AP1ZNT5PfEtsJkZ7cv3RnBwO16Tg6ZkMux9ptG79D0g0pXg5rhPt0BgQsNM0zA1m
M93iFVF0UiX6IK3jPtsIzhVh2y472lx4wkn0eBgZ3Fi+GBK2MKRcfszWvdWAKHTc
VRI2qvb6IVY3aoWlOsNXsgzx4X2f6ZGHOCObO11N7HEYcUTXDhqu9epyQa0zjhsy
kwPM+tj50Bju2kB3DsFbXnmGdb7FwFIh3d/OjRi1Jm9gTr1tuKmG7j6UB8KtIW37
uhRL8tjLEA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:34:57 2026 by rpki-client