Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mBiOFp92WtIVgq7onkQrqtaMWnA.cer
File: mBiOFp92WtIVgq7onkQrqtaMWnA.cer (raw, json)
Hash identifier: vVYcTs76+KcP60DSeKBJaGm2v503jCNO/Ga6X7d62sw=
Subject key identifier: 98:18:8E:16:9F:76:5A:D2:15:82:AE:E8:9E:44:2B:AA:D6:8C:5A:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CCDAFF8FA92E289697744AF8EB16EB789
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 08 Mar 2026 13:43:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201421
IP: 2001:678:dc0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cd:af:f8:fa:92:e2:89:69:77:44:af:8e:b1:6e:b7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 8 13:43:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98188e169f765ad21582aee89e442baad68c5a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:59:32:3d:a4:0d:65:cf:fc:a6:6c:3e:ad:
dd:d0:8c:74:0c:0f:6e:75:9a:ef:1f:7d:2d:12:81:
ba:8e:01:f3:3c:2d:ae:6f:0c:00:0a:17:cf:cd:56:
26:75:f1:4a:02:3c:17:ac:01:62:c4:3c:5d:ac:9b:
73:95:2a:07:63:fe:f3:5e:ab:01:0f:b7:c6:e3:97:
78:4d:fd:67:7f:51:2a:01:3d:22:cd:85:8a:77:c3:
b4:42:21:a7:fa:27:c5:9c:0d:85:41:de:f3:5b:4c:
7f:a2:18:bf:7d:7e:da:fc:e8:88:5b:0d:3a:9c:77:
84:64:5c:aa:49:6f:9d:34:3f:f1:b7:e5:0f:b0:5e:
7f:59:c5:6b:1f:56:e1:13:1b:7a:99:11:22:6e:37:
b0:20:32:30:c9:b1:68:df:52:e4:20:85:dd:ad:a9:
35:8f:23:e1:74:4a:fe:58:23:ae:f6:62:25:7e:64:
48:d8:a0:96:91:43:73:f2:11:37:03:c1:71:81:4e:
8f:45:ba:69:9a:eb:41:a2:26:e2:04:24:78:c1:01:
c7:1e:50:1e:62:c9:49:1b:78:ce:5e:21:bc:57:d1:
77:08:35:0c:c7:1f:9a:68:b7:aa:2d:92:10:1f:73:
7a:f7:40:59:32:3d:08:39:54:83:33:55:12:17:89:
1b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:18:8E:16:9F:76:5A:D2:15:82:AE:E8:9E:44:2B:AA:D6:8C:5A:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:dc0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201421
Signature Algorithm: sha256WithRSAEncryption
6b:1b:a1:7b:86:12:3f:56:d9:bd:22:fa:18:4c:0b:36:fa:6f:
4d:c1:c0:83:4a:b9:40:58:6f:2c:a1:34:70:fb:57:95:e9:18:
91:58:57:34:ec:12:07:92:9c:d6:a7:d0:c3:cb:11:fd:2a:5d:
ce:03:2b:7c:23:05:b2:fc:34:82:b1:ad:77:d0:7d:96:32:d6:
e9:2f:3e:2b:ee:2e:72:cc:72:74:ba:e9:e7:30:09:21:68:d4:
6d:41:15:0f:c7:8b:07:58:41:e9:d4:dd:29:83:fc:6a:c6:ef:
5d:83:56:9e:6d:0e:a3:50:8b:79:e2:62:1d:15:fb:98:9d:33:
2e:da:6a:53:13:1e:9e:9d:dd:0c:13:8e:2b:d6:9d:9c:ca:e1:
d1:49:95:58:c7:2e:14:ca:33:ff:51:0c:7d:cf:d5:84:b5:c7:
fa:db:6a:c4:24:72:4e:f4:f7:db:fa:32:f3:34:6d:e6:23:e9:
cc:3d:47:0b:d5:45:5f:a2:ca:34:9c:2c:5a:40:2c:27:62:8c:
4c:2f:c6:94:a7:78:01:13:c9:d1:1c:67:c8:10:4d:e8:2b:e3:
27:03:11:be:7c:66:2b:1b:87:2d:63:24:77:a6:de:6a:e2:c0:
18:d7:d3:bb:9d:07:93:22:83:00:90:e9:69:50:5a:28:f6:21:
1d:60:62:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:18:29 2026 by rpki-client