Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
File: cMbVNbDydaJhhfj03KWA0m16l0Y.cer (raw, json)
Hash identifier: FX9iCXOsWTzgaef6GgLO/ViE6s6NC9s+lHNyaVoBAtM=
Subject key identifier: 70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CED3F1A7E87A69B5B889CFC19B2D6C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:18:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204183
IP: 80.173.200.0/22
IP: 2a0f:c000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:3f:1a:7e:87:a6:9b:5b:88:9c:fc:19:b2:d6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e0:16:99:2a:4b:c3:65:0e:e2:c2:77:60:91:
6d:2b:e2:ce:1f:d6:36:31:e5:8b:de:19:87:a3:96:
75:a3:4f:4b:92:28:e0:a6:a9:2f:54:3f:be:b8:73:
0d:89:11:d7:ad:48:36:1d:64:a8:26:f1:a6:2f:45:
05:b0:93:d2:23:9b:44:c7:72:88:df:b0:bf:9e:b4:
d8:95:81:93:5a:ae:16:69:cf:89:40:71:d8:75:d0:
3d:c6:49:ac:43:9a:ef:3d:3d:f0:c6:62:78:71:fd:
cc:56:24:92:2f:05:d9:ef:68:96:03:1d:23:51:a0:
9e:16:66:63:50:79:6a:2a:30:4f:3d:68:46:13:87:
5b:5a:07:63:10:b2:be:af:c2:f0:a7:32:cd:6b:68:
50:7c:b0:e8:f1:16:10:9b:d9:70:0a:28:56:56:0a:
32:77:9d:d0:d1:35:5c:cc:49:77:84:94:f8:cf:8b:
83:75:0e:c8:5a:54:ec:2a:5d:a1:9c:e7:ea:4a:d0:
d2:32:72:e0:39:81:cb:b1:f5:8e:09:f9:ca:eb:40:
f2:e0:36:b3:ae:08:c3:d0:0d:31:a7:36:66:db:f6:
31:cc:0e:c9:c1:35:de:57:37:95:fb:e2:7c:40:a2:
3c:b6:93:16:36:78:b7:64:ef:67:75:45:62:94:e3:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.173.200.0/22
IPv6:
2a0f:c000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204183
Signature Algorithm: sha256WithRSAEncryption
22:a5:4a:62:9e:5f:a6:84:89:26:52:c2:38:f5:a1:24:c2:f7:
01:a9:cc:ac:b9:77:ec:70:38:81:54:fe:8e:fc:2b:0d:e2:c9:
28:76:f6:03:01:40:c4:24:39:81:5b:70:90:26:d7:f8:92:81:
51:29:6c:b1:5b:48:d2:6f:08:0a:2b:b4:8b:cb:43:58:bd:db:
b2:95:e8:b4:e4:c3:01:95:27:ac:49:7d:70:9f:57:2c:0a:87:
43:4b:64:58:9a:71:19:66:9d:4d:b6:d2:5d:bf:5d:ba:b0:52:
8e:52:e3:25:aa:90:7d:a5:41:e4:da:c7:27:d6:d4:2e:94:9e:
9b:87:eb:1e:af:ab:97:2a:e0:cd:b6:7e:21:f4:30:5b:96:65:
04:4a:a8:87:3c:fa:32:6e:6b:46:01:ed:f7:b1:31:e6:39:f0:
40:e4:7e:66:da:37:c8:2b:50:ec:60:58:f3:b2:44:bf:6d:f6:
ee:19:58:40:56:cf:83:41:d1:d7:56:e2:ea:13:ad:d1:8c:07:
19:3b:00:04:46:34:a8:57:40:1e:fa:ec:4d:12:2f:cc:1e:bd:
86:ba:ab:23:c6:73:cb:18:a5:3f:47:b3:38:ad:27:b0:c5:71:
05:19:df:90:49:94:f6:36:87:06:ff:3e:1e:90:4d:2f:33:6f:
cc:1f:82:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:06:25 2026 by rpki-client