Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer
File: _MziomuQk8lrKlzN3XA0u1zgEvw.cer (raw, json)
Hash identifier: 1Q+pWnj0lYCaOV6bUxFbLqkqsG6Ex3jl9N/Ah/230aw=
Subject key identifier: FC:CC:E2:A2:6B:90:93:C9:6B:2A:5C:CD:DD:70:34:BB:5C:E0:12:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB176BEE8D3D03152903D7D04CE845
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42586
AS: 205857
IP: 77.36.128.0/17
IP: 185.194.244.0/22
IP: 2a00:76c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:17:6b:ee:8d:3d:03:15:29:03:d7:d0:4c:e8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fccce2a26b9093c96b2a5ccddd7034bb5ce012fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:57:62:41:02:a0:68:1c:ca:0b:37:d9:79:
96:39:84:a5:5f:8c:ad:ea:5f:36:3e:52:bc:0a:50:
a6:f5:9a:e5:f6:72:1e:5f:b7:a6:bf:8f:50:5c:41:
5a:5e:8a:89:a1:c7:ae:bf:78:20:6e:f8:64:ac:4c:
3b:8f:b4:2b:7d:cf:0c:a7:f5:0a:85:ab:72:ea:0d:
df:40:fd:d8:1c:2b:f7:a2:0c:6b:fa:9c:f2:5e:96:
ca:87:5a:66:f9:3c:5f:79:c9:3a:50:05:20:d0:bd:
0e:69:66:5a:22:00:d0:b5:22:8b:d5:57:0d:79:55:
be:52:43:37:60:10:30:ba:5c:cc:2c:44:4e:bf:b9:
81:9e:85:88:ba:9a:b7:55:24:c7:c9:96:7b:23:42:
8f:4c:c1:27:e0:52:97:88:ca:45:7c:dc:e4:33:54:
08:82:3e:ff:ff:c3:84:d9:ec:17:f7:73:01:04:16:
4d:8d:91:5c:58:17:9f:59:ac:c6:dc:15:c3:5d:c0:
3c:db:1c:5c:78:c9:9d:8e:2b:c7:da:94:69:92:22:
e5:1f:58:c0:57:95:a5:0e:25:24:cb:9a:7f:79:25:
91:ee:3d:82:0b:8c:3f:73:be:1c:65:ce:b3:16:bb:
d7:83:d4:e2:3c:18:17:16:78:2c:a9:df:2a:aa:42:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CC:E2:A2:6B:90:93:C9:6B:2A:5C:CD:DD:70:34:BB:5C:E0:12:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.128.0/17
185.194.244.0/22
IPv6:
2a00:76c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42586
205857
Signature Algorithm: sha256WithRSAEncryption
0e:9b:40:29:88:2e:6a:06:98:ea:30:d3:ab:dc:d9:32:92:d1:
07:7d:f7:fb:f0:a5:cf:a4:a3:5c:39:99:8d:ec:48:21:b1:ce:
67:d8:75:ac:3a:a0:40:fb:77:41:db:f8:47:20:dd:1f:5b:48:
b9:2c:b9:c2:37:41:45:96:a8:1d:4f:fc:25:dd:db:ce:a0:20:
84:2a:b3:88:b7:6c:99:c5:fd:28:e3:69:f8:cc:77:c0:0f:65:
55:81:f6:81:62:61:f9:b6:7f:22:a8:61:55:76:a7:db:47:98:
17:be:0e:7c:b6:44:ff:1a:84:83:2e:57:d6:59:43:fe:76:22:
09:92:77:99:55:2e:05:ee:2f:97:cd:3e:2a:c1:6a:ab:42:ec:
32:e9:65:60:17:68:07:80:37:d7:f3:d3:c1:c1:ed:47:b3:ad:
b9:f8:51:2d:0e:8d:6b:7e:8e:61:71:6b:2e:73:c2:c3:10:0e:
f8:32:1f:8f:60:b8:33:54:ed:a6:1e:9a:ff:df:ec:1c:44:f9:
51:37:b5:a9:52:a8:02:a7:87:ce:60:0a:b8:bd:aa:28:60:5f:
b9:01:8a:1b:ea:f0:76:05:5d:9c:d8:83:ea:d5:17:b6:ad:4d:
fa:d8:83:c5:c0:c0:4b:d1:69:b8:3b:0d:01:9a:0c:c2:9f:6e:
c4:da:77:a3
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZ8Y+xdr7o09AxUpA9fQTOhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2NjZTJhMjZiOTA5M2M5NmIyYTVjY2RkZDcwMzRiYjVjZTAxMmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKdXYkECoGgcygs32XmWOYSlX4yt
6l82PlK8ClCm9Zrl9nIeX7emv49QXEFaXoqJoceuv3ggbvhkrEw7j7Qrfc8Mp/UK
haty6g3fQP3YHCv3ogxr+pzyXpbKh1pm+Txfeck6UAUg0L0OaWZaIgDQtSKL1VcN
eVW+UkM3YBAwulzMLEROv7mBnoWIupq3VSTHyZZ7I0KPTMEn4FKXiMpFfNzkM1QI
gj7//8OE2ewX93MBBBZNjZFcWBefWazG3BXDXcA82xxceMmdjivH2pRpkiLlH1jA
V5WlDiUky5p/eSWR7j2CC4w/c74cZc6zFrvXg9TiPBgXFngsqd8qqkIrNwIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFPzM4qJrkJPJaypczd1wNLtc4BL8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzBlZTJh
Yi0wN2Q5LTRhODEtYWJmMC1lMGU0YmU2Njk2ZjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvMGVlMmFi
LTA3ZDktNGE4MS1hYmYwLWUwZTRiZTY2OTZmOS8xL19NemlvbXVRazhscktsek4z
WEEwdTF6Z0V2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQHTSSAAwQCucL0MA0EAgACMAcDBQMqAHbAMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCmWgIDAyQhMA0GCSqGSIb3DQEBCwUAA4IB
AQAOm0ApiC5qBpjqMNOr3NkyktEHfff78KXPpKNcOZmN7Eghsc5n2HWsOqBA+3dB
2/hHIN0fW0i5LLnCN0FFlqgdT/wl3dvOoCCEKrOIt2yZxf0o42n4zHfAD2VVgfaB
YmH5tn8iqGFVdqfbR5gXvg58tkT/GoSDLlfWWUP+diIJkneZVS4F7i+XzT4qwWqr
Quwy6WVgF2gHgDfX89PBwe1Hs625+FEtDo1rfo5hcWsuc8LDEA74Mh+PYLgzVO2m
Hpr/3+wcRPlRN7WpUqgCp4fOYAq4vaooYF+5AYob6vB2BV2c2IPq1Re2rU362IPF
wMBL0Wm4Ow0BmgzCn27E2nej
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:23 2026 by rpki-client