Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
File: mPArXPtBclCOBze_Jc1dIqAdxFo.cer (raw, json)
Hash identifier: 9AO2ALGWd//9jzSMXUIs206pStRW6pVi0oPMtq3ONGk=
Subject key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F8A237FAEC2994D91DBC62521B0C51FA1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 22 Jul 2026 14:03:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 143.246.36.0/22
IP: 193.104.120.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:23:7f:ae:c2:99:4d:91:db:c6:25:21:b0:c5:1f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 22 14:03:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:f5:23:f5:ea:82:60:22:93:f5:46:cc:75:
15:7d:1b:6b:d1:3f:90:fd:9b:cf:b7:70:ef:f8:c1:
d9:cb:f9:6d:22:7e:2a:53:ed:0e:08:2c:db:2c:15:
5c:23:83:9c:97:35:ee:38:9d:d9:14:ac:a6:c1:7a:
1f:c7:86:ce:f0:f5:bd:4c:06:6b:0f:a4:58:b1:c2:
33:5b:f9:e4:fe:d7:11:50:53:fa:b2:50:94:ec:87:
6a:46:2f:f6:f5:5b:10:fc:56:9c:85:96:a2:60:18:
1e:18:2c:02:04:20:47:43:6a:80:2e:0c:01:75:e4:
c1:0f:68:ef:97:b1:c5:ad:11:bc:fb:fa:27:21:f8:
09:3d:25:2f:7c:13:dc:74:42:55:50:26:47:42:05:
03:7a:7b:69:08:e7:b6:78:9c:27:e4:02:37:f5:38:
8d:80:0f:75:f6:84:77:e0:e3:82:3b:67:06:8e:ae:
a9:6a:24:a0:00:3c:24:59:8b:b2:72:4a:cb:10:9a:
c7:72:b9:a1:c0:24:31:fd:63:0e:31:c3:c4:52:6e:
83:6e:9d:58:90:67:05:ef:da:d5:9e:1d:5f:2c:f1:
c2:c6:9b:71:99:0e:a0:ca:9d:76:0d:86:1a:a3:a5:
b5:42:18:d7:b1:f7:91:a5:ea:b5:87:3c:dc:70:e7:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.36.0/22
193.104.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b8:55:e6:19:51:5e:21:ef:fc:a2:5f:1a:06:b0:72:9f:c2:
00:0e:3b:79:27:a8:f5:88:36:ea:90:97:51:04:f2:58:cf:dd:
9c:f3:c6:e2:46:5b:26:05:3f:1b:83:64:11:9c:d1:99:aa:c1:
f8:27:8d:dd:e5:b4:3c:83:7c:07:40:15:4f:7d:9c:cd:a4:95:
e3:ae:ed:45:ce:30:b7:77:dc:2d:f8:47:24:8e:44:2a:db:54:
e1:8a:17:c9:1b:3d:51:a9:71:0a:8a:58:f8:1a:54:68:c6:33:
19:e2:18:d8:3c:f8:9b:e9:dd:fa:7e:c6:e3:6f:04:66:50:28:
2c:9e:df:78:8b:f8:8e:b5:96:2a:fb:b5:60:db:ba:a3:a9:9a:
6b:e3:ca:a7:08:37:1a:93:14:8a:86:48:4a:0b:96:2a:31:aa:
71:8b:41:58:c2:0c:82:de:c3:24:c5:6d:49:29:e0:59:68:8d:
23:7a:04:42:19:31:e4:ed:f4:43:62:20:7b:cf:10:01:ec:b8:
18:a8:a6:cc:bc:75:b6:e0:be:27:d8:0a:3d:70:fe:8f:21:fc:
e4:b7:72:fa:fc:03:fb:ae:ec:4e:37:d9:6e:19:c6:56:66:a2:
7a:5a:06:48:ac:3c:68:be:02:81:82:f7:70:d1:bd:d0:3c:5f:
e0:f4:df:6b
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAZ+KI3+uwplNkdvGJSGwxR+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNzIyMTQwMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGYwMmI1Y2ZiNDE3MjUwOGUwNzM3YmYyNWNkNWQyMmEwMWRjNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoD1I/XqgmAik/VGzHUVfRtr0T+Q
/ZvPt3Dv+MHZy/ltIn4qU+0OCCzbLBVcI4OclzXuOJ3ZFKymwXofx4bO8PW9TAZr
D6RYscIzW/nk/tcRUFP6slCU7IdqRi/29VsQ/FachZaiYBgeGCwCBCBHQ2qALgwB
deTBD2jvl7HFrRG8+/onIfgJPSUvfBPcdEJVUCZHQgUDentpCOe2eJwn5AI39TiN
gA919oR34OOCO2cGjq6paiSgADwkWYuyckrLEJrHcrmhwCQx/WMOMcPEUm6Dbp1Y
kGcF79rVnh1fLPHCxptxmQ6gyp12DYYao6W1QhjXsfeRpeq1hzzccOc53QIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFJjwK1z7QXJQjgc3vyXNXSKgHcRaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzQzZDMw
MS1mODFhLTQ5MmUtOTIyYy1jOTcxZGM3MTNiMWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvNDNkMzAx
LWY4MWEtNDkyZS05MjJjLWM5NzFkYzcxM2IxZi8xL21QQXJYUHRCY2xDT0J6ZV9K
YzFkSXFBZHhGby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCj/YkAwQAwWh4MA0GCSqGSIb3DQEBCwUAA4IB
AQCjuFXmGVFeIe/8ol8aBrByn8IADjt5J6j1iDbqkJdRBPJYz92c88biRlsmBT8b
g2QRnNGZqsH4J43d5bQ8g3wHQBVPfZzNpJXjru1FzjC3d9wt+EckjkQq21ThihfJ
Gz1RqXEKilj4GlRoxjMZ4hjYPPib6d36fsbjbwRmUCgsnt94i/iOtZYq+7Vg27qj
qZpr48qnCDcakxSKhkhKC5YqMapxi0FYwgyC3sMkxW1JKeBZaI0jegRCGTHk7fRD
YiB7zxAB7LgYqKbMvHW24L4n2Ao9cP6PIfzkt3L6/AP7ruxON9luGcZWZqJ6WgZI
rDxovgKBgvdw0b3QPF/g9N9r
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:00:58 2026 by rpki-client