Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mfjXrl5OvAIjSnse4rebl2DbOq8.cer
File: mfjXrl5OvAIjSnse4rebl2DbOq8.cer (raw, json)
Hash identifier: uNHjsp4d5/SWLdbAS981nCYpAvhUYdrbes40m5+rtsg=
Subject key identifier: 99:F8:D7:AE:5E:4E:BC:02:23:4A:7B:1E:E2:B7:9B:97:60:DB:3A:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CB00565B9AF72B5A11C62941206EDE837
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Mar 2026 19:27:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60443
IP: 185.87.68.0/22
IP: 2a05:bfc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:05:65:b9:af:72:b5:a1:1c:62:94:12:06:ed:e8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 2 19:27:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99f8d7ae5e4ebc02234a7b1ee2b79b9760db3aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:65:e4:2a:5d:c0:35:9e:91:08:70:f4:cc:
b6:ba:ff:64:d4:9b:69:90:4b:63:8a:aa:a2:ed:cf:
7f:90:01:40:ea:1e:79:42:24:c6:8d:c8:ed:59:f0:
89:fb:fa:3b:3b:c2:30:7e:26:94:c2:bb:25:30:1f:
e1:46:b6:e7:e9:53:7b:6b:5b:9d:bd:66:5f:0d:66:
6f:73:d4:64:c9:d8:c7:d1:af:ac:80:44:74:5c:5d:
c8:c8:98:10:d7:e0:14:c4:a8:86:aa:eb:34:27:96:
4c:20:78:6d:d9:d8:e2:2b:76:6a:6e:10:22:f4:50:
bf:22:13:9c:3d:8a:6d:16:d2:d4:5c:71:a7:91:40:
46:a1:3c:c1:d6:66:98:e7:f1:7f:86:3e:fd:6e:35:
aa:e5:e9:44:76:b0:71:90:c5:2f:cf:14:14:a0:6e:
62:53:35:0f:76:5c:15:68:6d:ad:65:55:ae:c6:47:
0b:b7:50:ba:90:c9:83:76:ca:fb:2b:b5:c8:3d:d5:
ed:64:a3:9a:e6:ed:f5:ab:3f:61:79:b0:d4:ef:f1:
b4:44:f5:32:77:b7:ca:51:04:98:b2:16:69:90:be:
ed:20:d1:a6:5e:f5:d3:f3:2c:26:a3:b6:e3:1e:f0:
c7:d3:3a:0b:8c:cb:0c:06:0c:f7:00:e6:af:a7:85:
19:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F8:D7:AE:5E:4E:BC:02:23:4A:7B:1E:E2:B7:9B:97:60:DB:3A:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2cd1ba-49a5-4452-981c-7de0ad04a4dc/1/mfjXrl5OvAIjSnse4rebl2DbOq8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.68.0/22
IPv6:
2a05:bfc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60443
Signature Algorithm: sha256WithRSAEncryption
7e:dd:49:bf:e3:60:df:2f:26:3d:16:d3:a9:e5:8f:76:54:66:
e4:42:4d:88:2a:98:c4:52:4f:63:fd:01:09:18:3d:94:0f:eb:
26:00:39:0b:db:4f:ce:fc:07:fd:db:c2:fd:03:e3:05:96:4d:
7a:5a:19:fb:12:9b:1e:36:97:7c:80:71:b6:45:fa:c0:40:5f:
e8:94:33:df:78:5b:a6:71:a9:3d:40:5d:7e:3a:aa:73:82:91:
08:5a:86:59:0e:dc:8e:a2:96:9b:9d:a9:dc:e8:ab:28:69:ef:
37:cf:d5:33:7b:bb:b8:14:25:83:ed:e2:ae:10:d0:e9:50:76:
8a:39:66:d2:31:82:0c:1f:8d:50:9c:b0:82:63:8e:e3:ba:49:
b4:7f:2a:81:07:2c:e7:4f:ec:8a:07:4d:bc:40:24:7f:72:77:
93:1d:67:e5:d6:ef:4a:17:38:c3:05:fc:19:87:2a:a0:30:36:
55:38:d9:61:af:6e:f6:50:46:32:c6:58:0a:9c:8c:e9:e9:e9:
6f:20:51:e0:84:2f:11:86:dc:fd:77:2e:b4:4e:b8:62:6c:94:
22:17:f1:04:78:a0:84:93:88:9d:07:52:1a:40:c9:e3:3b:92:
ae:07:56:69:94:61:cc:bb:50:e3:b1:c3:ed:c3:16:48:7b:77:
5e:73:96:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:13:15 2026 by rpki-client