Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
File: ffEy3xPkvlPYJQyMSEICZO72wUw.cer (raw, json)
Hash identifier: ys6kQ1iwLFrPhT4bn9hppFO8LURTHV3L4K+lK++g1dE=
Subject key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198890C949C25CD75CFE499629A3D386AFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 08 Aug 2025 09:39:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31362
AS: 50667
IP: 31.14.16.0/24
IP: 31.14.20.0/24
IP: 31.14.43.0/24
IP: 31.14.53.0 -- 31.14.55.255
IP: 31.14.100.0/23
IP: 37.156.7.0/24
IP: 37.156.245.0/24
IP: 46.102.254.0/24
IP: 77.81.178.0/23
IP: 77.81.190.0/24
IP: 84.247.29.0/24
IP: 84.247.55.0 -- 84.247.56.255
IP: 85.204.23.0/24
IP: 85.204.41.0/24
IP: 85.204.68.0/24
IP: 85.204.116.0/24
IP: 85.204.138.0/24
IP: 86.104.9.0 -- 86.104.10.255
IP: 86.104.124.0/24
IP: 86.104.194.0/24
IP: 86.105.26.0/24
IP: 86.105.170.0/24
IP: 86.106.99.0/24
IP: 86.106.129.0 -- 86.106.130.255
IP: 86.106.134.0/24
IP: 86.106.156.0/24
IP: 86.106.168.0/24
IP: 86.106.170.0/23
IP: 86.107.20.0/24
IP: 86.107.30.0/23
IP: 86.107.52.0/24
IP: 86.107.54.0/24
IP: 86.107.76.0/24
IP: 86.107.181.0 -- 86.107.182.255
IP: 89.32.41.0/24
IP: 89.32.185.0/24
IP: 89.32.191.0/24
IP: 89.32.216.0/21
IP: 89.33.45.0/24
IP: 89.33.86.0/24
IP: 89.33.119.0/24
IP: 89.33.196.0/24
IP: 89.33.238.0/23
IP: 89.33.243.0 -- 89.33.244.255
IP: 89.34.1.0/24
IP: 89.34.5.0/24
IP: 89.34.93.0/24
IP: 89.34.173.0/24
IP: 89.35.55.0/24
IP: 89.35.77.0/24
IP: 89.35.115.0 -- 89.35.117.255
IP: 89.36.19.0/24
IP: 89.36.88.0/24
IP: 89.36.92.0/24
IP: 89.36.148.0/23
IP: 89.36.192.0/24
IP: 89.36.196.0/24
IP: 89.37.108.0/22
IP: 89.37.158.0/23
IP: 89.38.27.0/24
IP: 89.38.137.0 -- 89.38.139.255
IP: 89.38.208.0/22
IP: 89.39.93.0/24
IP: 89.39.126.0/23
IP: 89.39.148.0/24
IP: 89.40.73.0/24
IP: 89.40.77.0/24
IP: 89.40.88.0/23
IP: 89.40.136.0/23
IP: 89.41.63.0/24
IP: 89.42.9.0/24
IP: 89.42.14.0/24
IP: 89.42.35.0/24
IP: 89.42.156.0/23
IP: 89.42.214.0/24
IP: 89.43.38.0/24
IP: 89.43.54.0/24
IP: 89.43.61.0/24
IP: 89.44.88.0/22
IP: 89.44.104.0/24
IP: 89.44.123.0/24
IP: 89.44.125.0/24
IP: 89.44.140.0/23
IP: 89.44.236.0/24
IP: 89.45.46.0/23
IP: 89.47.3.0/24
IP: 89.47.10.0/24
IP: 89.47.42.0/24
IP: 89.47.88.0/24
IP: 89.47.255.0/24
IP: 91.250.247.0/24
IP: 92.114.39.0/24
IP: 92.114.52.0/24
IP: 92.114.108.0/24
IP: 93.113.28.0/24
IP: 93.113.34.0/24
IP: 93.114.96.0/23
IP: 93.115.40.0/21
IP: 93.115.246.0/24
IP: 93.118.39.0/24
IP: 93.119.114.0 -- 93.119.117.255
IP: 93.119.171.0 -- 93.119.175.255
IP: 94.176.128.0/24
IP: 94.176.130.0/24
IP: 94.176.166.0/23
IP: 94.177.30.0/23
IP: 176.126.175.0/24
IP: 176.223.96.0/22
IP: 185.99.88.0/22
IP: 188.208.31.0/24
IP: 188.209.212.0/24
IP: 188.210.89.0/24
IP: 188.210.224.0/21
IP: 188.211.27.0/24
IP: 188.211.30.0/23
IP: 188.211.224.0/22
IP: 188.212.111.0/24
IP: 188.213.32.0/24
IP: 188.213.48.0/24
IP: 188.213.134.0/24
IP: 188.214.141.0/24
IP: 188.214.156.0/24
IP: 188.214.226.0/24
IP: 188.215.70.0/23
IP: 188.215.246.0/24
IP: 188.240.12.0/24
IP: 188.240.198.0/23
IP: 188.240.202.0/23
IP: 188.240.208.0/24
IP: 188.241.104.0/23
IP: 188.241.108.0/24
IP: 188.241.134.0/23
IP: 188.241.184.0/23
IP: 188.241.188.0/23
IP: 217.19.9.0/24
IP: 2a04:fee0::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:0c:94:9c:25:cd:75:cf:e4:99:62:9a:3d:38:6a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 8 09:39:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:08:3e:9b:97:a0:64:6a:d2:e3:2f:c0:c3:
ab:60:3b:75:66:3b:80:7f:29:fe:bf:06:e3:1f:f2:
08:e5:f3:89:0d:c3:f7:a2:be:71:fa:8c:4a:97:da:
e2:7c:83:81:6e:c2:a1:ae:0d:25:05:2b:54:33:45:
a3:df:bf:d1:71:26:ee:e5:0a:f0:a7:74:90:2b:d5:
bd:48:6e:56:7b:9e:39:59:a8:d7:e6:26:12:bb:ad:
16:db:51:9a:ea:83:ea:77:41:a4:b5:4b:38:0e:20:
fb:fd:f2:18:91:1c:3e:00:d5:6f:9b:6b:f8:f1:f3:
68:dd:22:98:d9:5f:de:56:39:d9:40:de:b5:19:79:
46:e8:a8:f2:31:47:aa:a0:8f:84:ac:60:ba:38:ea:
9a:9e:fb:c3:61:76:34:61:8a:8f:4b:45:62:18:0e:
f0:bd:8b:d1:00:0f:06:0f:4c:91:9d:7f:c8:ac:0c:
f9:38:16:6e:92:ff:15:86:4a:8d:15:41:69:3c:4f:
a7:87:d9:7d:63:2d:29:01:88:6f:c5:bf:a1:9a:c2:
a4:ac:02:b4:13:f1:45:b5:c3:0e:cb:0a:52:25:60:
34:92:79:6f:bf:f3:69:2d:a6:3e:74:c1:fb:f5:95:
64:7a:ee:02:98:64:05:4a:80:00:33:b7:5a:f5:d7:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.16.0/24
31.14.20.0/24
31.14.43.0/24
31.14.53.0-31.14.55.255
31.14.100.0/23
37.156.7.0/24
37.156.245.0/24
46.102.254.0/24
77.81.178.0/23
77.81.190.0/24
84.247.29.0/24
84.247.55.0-84.247.56.255
85.204.23.0/24
85.204.41.0/24
85.204.68.0/24
85.204.116.0/24
85.204.138.0/24
86.104.9.0-86.104.10.255
86.104.124.0/24
86.104.194.0/24
86.105.26.0/24
86.105.170.0/24
86.106.99.0/24
86.106.129.0-86.106.130.255
86.106.134.0/24
86.106.156.0/24
86.106.168.0/24
86.106.170.0/23
86.107.20.0/24
86.107.30.0/23
86.107.52.0/24
86.107.54.0/24
86.107.76.0/24
86.107.181.0-86.107.182.255
89.32.41.0/24
89.32.185.0/24
89.32.191.0/24
89.32.216.0/21
89.33.45.0/24
89.33.86.0/24
89.33.119.0/24
89.33.196.0/24
89.33.238.0/23
89.33.243.0-89.33.244.255
89.34.1.0/24
89.34.5.0/24
89.34.93.0/24
89.34.173.0/24
89.35.55.0/24
89.35.77.0/24
89.35.115.0-89.35.117.255
89.36.19.0/24
89.36.88.0/24
89.36.92.0/24
89.36.148.0/23
89.36.192.0/24
89.36.196.0/24
89.37.108.0/22
89.37.158.0/23
89.38.27.0/24
89.38.137.0-89.38.139.255
89.38.208.0/22
89.39.93.0/24
89.39.126.0/23
89.39.148.0/24
89.40.73.0/24
89.40.77.0/24
89.40.88.0/23
89.40.136.0/23
89.41.63.0/24
89.42.9.0/24
89.42.14.0/24
89.42.35.0/24
89.42.156.0/23
89.42.214.0/24
89.43.38.0/24
89.43.54.0/24
89.43.61.0/24
89.44.88.0/22
89.44.104.0/24
89.44.123.0/24
89.44.125.0/24
89.44.140.0/23
89.44.236.0/24
89.45.46.0/23
89.47.3.0/24
89.47.10.0/24
89.47.42.0/24
89.47.88.0/24
89.47.255.0/24
91.250.247.0/24
92.114.39.0/24
92.114.52.0/24
92.114.108.0/24
93.113.28.0/24
93.113.34.0/24
93.114.96.0/23
93.115.40.0/21
93.115.246.0/24
93.118.39.0/24
93.119.114.0-93.119.117.255
93.119.171.0-93.119.175.255
94.176.128.0/24
94.176.130.0/24
94.176.166.0/23
94.177.30.0/23
176.126.175.0/24
176.223.96.0/22
185.99.88.0/22
188.208.31.0/24
188.209.212.0/24
188.210.89.0/24
188.210.224.0/21
188.211.27.0/24
188.211.30.0/23
188.211.224.0/22
188.212.111.0/24
188.213.32.0/24
188.213.48.0/24
188.213.134.0/24
188.214.141.0/24
188.214.156.0/24
188.214.226.0/24
188.215.70.0/23
188.215.246.0/24
188.240.12.0/24
188.240.198.0/23
188.240.202.0/23
188.240.208.0/24
188.241.104.0/23
188.241.108.0/24
188.241.134.0/23
188.241.184.0/23
188.241.188.0/23
217.19.9.0/24
IPv6:
2a04:fee0::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31362
50667
Signature Algorithm: sha256WithRSAEncryption
1f:db:96:60:02:23:4a:16:ed:3a:a7:25:22:b5:8b:28:e8:8e:
0a:ea:02:03:5d:1c:52:4a:02:28:12:37:f5:6c:da:b9:64:0c:
89:af:ec:f5:b8:dc:52:1f:00:b7:33:53:43:47:e7:e3:9a:e1:
03:a9:d1:de:74:3b:b9:fd:ff:8a:6a:a2:72:ef:2c:c6:9f:f4:
bf:89:f0:dc:fc:31:2d:ba:f2:23:90:40:e9:c9:ff:e8:92:b5:
34:06:ad:c5:d5:b1:80:cc:43:1f:7b:63:4f:b0:7d:f2:a6:ea:
bd:66:85:a0:6e:0c:9b:23:00:c2:2d:64:fe:71:bf:67:14:38:
8b:82:e8:90:31:27:54:ef:4a:85:85:15:c4:51:a6:03:7f:e9:
07:97:39:b1:26:0a:37:62:77:ba:7e:8e:36:5d:a6:88:c4:12:
bf:4d:b1:57:60:85:dc:8b:e0:cf:fb:cc:10:46:4e:c4:84:27:
1d:ac:39:62:23:60:d4:b8:2b:57:a0:b9:a7:50:ba:c5:3c:38:
9b:d3:5e:03:cf:ab:66:f8:92:f1:0c:c1:14:5b:05:18:7c:b5:
33:b4:a3:2d:ca:62:37:00:71:4e:a3:a6:60:7e:79:e5:f5:f9:
1e:20:28:0c:75:f1:d2:88:17:76:02:68:eb:a5:f5:d8:04:a3:
94:3e:88:82
-----BEGIN CERTIFICATE-----
MIIJJTCCCA2gAwIBAgISAZiJDJScJc11z+SZYpo9OGr6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwODA4MDkzOTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGYxMzJkZjEzZTRiZTUzZDgyNTBjOGM0ODQyMDI2NGVlZjZjMTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvcIPpuXoGRq0uMvwMOrYDt1ZjuA
fyn+vwbjH/II5fOJDcP3or5x+oxKl9rifIOBbsKhrg0lBStUM0Wj37/RcSbu5Qrw
p3SQK9W9SG5We545WajX5iYSu60W21Ga6oPqd0GktUs4DiD7/fIYkRw+ANVvm2v4
8fNo3SKY2V/eVjnZQN61GXlG6KjyMUeqoI+ErGC6OOqanvvDYXY0YYqPS0ViGA7w
vYvRAA8GD0yRnX/IrAz5OBZukv8VhkqNFUFpPE+nh9l9Yy0pAYhvxb+hmsKkrAK0
E/FFtcMOywpSJWA0knlvv/NpLaY+dMH79ZVkeu4CmGQFSoAAM7da9de7NwIDAQAB
o4IGMTCCBi0wHQYDVR0OBBYEFH3xMt8T5L5T2CUMjEhCAmTu9sFMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlL2MzNzQ5
Ny02Mzc2LTQ2MWUtOTNjNi05Nzc4Njc0ZWRjOTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvYzM3NDk3
LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8xL2ZmRXkzeFBrdmxQWUpReU1T
RUlDWk83MndVdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIDqgYIKwYB
BQUHAQcBAf8EggOZMIIDlTCCA4IEAgABMIIDegMEAB8OEAMEAB8OFAMEAB8OKzAM
AwQAHw41AwQDHw4wAwQBHw5kAwQAJZwHAwQAJZz1AwQALmb+AwQBTVGyAwQATVG+
AwQAVPcdMAwDBABU9zcDBABU9zgDBABVzBcDBABVzCkDBABVzEQDBABVzHQDBABV
zIowDAMEAFZoCQMEAFZoCgMEAFZofAMEAFZowgMEAFZpGgMEAFZpqgMEAFZqYzAM
AwQAVmqBAwQAVmqCAwQAVmqGAwQAVmqcAwQAVmqoAwQBVmqqAwQAVmsUAwQBVmse
AwQAVms0AwQAVms2AwQAVmtMMAwDBABWa7UDBABWa7YDBABZICkDBABZILkDBABZ
IL8DBANZINgDBABZIS0DBABZIVYDBABZIXcDBABZIcQDBAFZIe4wDAMEAFkh8wME
AFkh9AMEAFkiAQMEAFkiBQMEAFkiXQMEAFkirQMEAFkjNwMEAFkjTTAMAwQAWSNz
AwQBWSN0AwQAWSQTAwQAWSRYAwQAWSRcAwQBWSSUAwQAWSTAAwQAWSTEAwQCWSVs
AwQBWSWeAwQAWSYbMAwDBABZJokDBAJZJogDBAJZJtADBABZJ10DBAFZJ34DBABZ
J5QDBABZKEkDBABZKE0DBAFZKFgDBAFZKIgDBABZKT8DBABZKgkDBABZKg4DBABZ
KiMDBAFZKpwDBABZKtYDBABZKyYDBABZKzYDBABZKz0DBAJZLFgDBABZLGgDBABZ
LHsDBABZLH0DBAFZLIwDBABZLOwDBAFZLS4DBABZLwMDBABZLwoDBABZLyoDBABZ
L1gDBABZL/8DBABb+vcDBABccicDBABccjQDBABccmwDBABdcRwDBABdcSIDBAFd
cmADBANdcygDBABdc/YDBABddicwDAMEAV13cgMEAV13dDAMAwQAXXerAwQEXXeg
AwQAXrCAAwQAXrCCAwQBXrCmAwQBXrEeAwQAsH6vAwQCsN9gAwQCuWNYAwQAvNAf
AwQAvNHUAwQAvNJZAwQDvNLgAwQAvNMbAwQBvNMeAwQCvNPgAwQAvNRvAwQAvNUg
AwQAvNUwAwQAvNWGAwQAvNaNAwQAvNacAwQAvNbiAwQBvNdGAwQAvNf2AwQAvPAM
AwQBvPDGAwQBvPDKAwQAvPDQAwQBvPFoAwQAvPFsAwQBvPGGAwQBvPG4AwQBvPG8
AwQA2RMJMA0EAgACMAcDBQIqBP7gMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAnqC
AgMAxeswDQYJKoZIhvcNAQELBQADggEBAB/blmACI0oW7TqnJSK1iyjojgrqAgNd
HFJKAigSN/Vs2rlkDImv7PW43FIfALczU0NH5+Oa4QOp0d50O7n9/4pqonLvLMaf
9L+J8Nz8MS268iOQQOnJ/+iStTQGrcXVsYDMQx97Y0+wffKm6r1mhaBuDJsjAMIt
ZP5xv2cUOIuC6JAxJ1TvSoWFFcRRpgN/6QeXObEmCjdid7p+jjZdpojEEr9NsVdg
hdyL4M/7zBBGTsSEJx2sOWIjYNS4K1eguadQusU8OJvTXgPPq2b4kvEMwRRbBRh8
tTO0oy3KYjcAcU6jpmB+eeX1+R4gKAx18dKIF3YCaOul9dgEo5Q+iII=
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:52:29 2025 by rpki-client