Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
File: mfyNwqfBufMroZV_9JLcC6TyYP8.cer (raw, json)
Hash identifier: kozxvFsmnkk7ZUe6iH3/yZubsLXOBGUqg2bPoTkR6cs=
Subject key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019781E29812F76EDE3C3FC2E420DDA07C5A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Jun 2025 07:13:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208073
IP: 152.114.207.0/24
IP: 2a05:66c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:e2:98:12:f7:6e:de:3c:3f:c2:e4:20:dd:a0:7c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 18 07:13:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:a3:0f:da:ce:3f:50:d6:6e:e1:de:3c:e0:
9a:6c:62:21:6f:fc:e2:77:df:9f:e4:22:8e:9a:f1:
40:d5:36:4f:bc:91:11:bc:0d:b6:0b:49:15:02:6c:
6c:47:9c:bc:98:71:36:b6:b4:3b:a0:6f:30:b0:68:
41:c6:31:76:6b:70:13:8f:f3:84:42:aa:7a:8f:c8:
d6:2c:b3:82:98:19:ce:cb:9d:cf:f3:0e:56:75:ab:
24:40:29:50:c9:a4:17:b5:36:71:74:82:e6:2c:8d:
9c:9f:c5:e4:59:70:bd:8c:33:f7:1d:07:cb:8f:1f:
2f:aa:39:70:53:7c:79:fa:b2:ed:14:7c:bc:3f:60:
e8:f2:0b:9d:7c:01:83:b5:a5:08:0a:84:08:8f:fd:
bf:6a:0c:c9:d2:c2:87:9a:9a:28:ec:3f:58:84:99:
88:9f:04:ef:95:e0:26:ca:5a:85:52:6c:e8:84:28:
1a:dd:d0:c9:5b:90:34:50:6c:9b:c0:49:72:6d:c0:
18:21:f4:0e:e3:96:48:81:0e:87:37:e1:8c:ef:61:
62:36:57:63:2a:f1:bd:3c:42:63:f5:15:df:c6:65:
f0:7f:ef:97:da:86:ac:8b:a6:fb:d9:5c:83:c8:fe:
38:54:ed:66:6c:b8:a6:8f:cc:78:e5:1e:0e:3f:03:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.114.207.0/24
IPv6:
2a05:66c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208073
Signature Algorithm: sha256WithRSAEncryption
42:ed:53:80:83:22:fc:77:61:ea:b7:97:0f:fa:4f:2a:9c:76:
49:87:30:e8:8f:d8:f1:5b:e3:59:2d:49:55:34:87:99:7e:c8:
97:9d:85:f3:3f:75:52:1e:ac:54:83:7c:0e:21:87:c5:87:04:
ab:71:40:13:45:56:ab:ed:f0:93:99:93:a4:83:e2:cc:06:06:
36:e7:64:de:37:cc:f9:40:77:9f:b6:b6:dc:3d:6f:8b:78:9a:
9f:f8:2b:7f:5e:ab:e8:08:c1:39:94:cc:95:e6:30:54:cd:70:
14:d8:d4:80:56:05:fb:10:4c:2c:d7:12:bd:19:6b:06:97:8a:
70:f8:98:2e:a6:58:e2:38:ba:4b:55:11:ae:ce:67:43:97:b7:
72:44:55:54:bf:d2:fc:fa:51:5d:ef:21:5f:3d:ce:99:45:89:
b4:6a:bf:02:5b:f2:80:40:0b:17:59:74:aa:6d:0b:f3:66:62:
88:17:ee:f4:e1:73:54:d8:58:d9:d4:93:b0:97:13:10:31:18:
32:00:26:19:d2:e3:3b:28:e9:93:f9:2f:2e:b7:e0:96:f7:6e:
89:06:34:66:18:11:8c:74:98:e2:5f:0f:f9:72:00:1a:3a:ea:
58:9f:0c:a6:4e:c3:4f:60:64:8a:67:1f:91:59:5e:b3:bc:d3:
69:6b:aa:ae
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZeB4pgS927ePD/C5CDdoHxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNjE4MDcxMzIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWZjOGRjMmE3YzFiOWYzMmJhMTk1N2ZmNDkyZGMwYmE0ZjI2MGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvWjD9rOP1DWbuHePOCabGIhb/zi
d9+f5CKOmvFA1TZPvJERvA22C0kVAmxsR5y8mHE2trQ7oG8wsGhBxjF2a3ATj/OE
Qqp6j8jWLLOCmBnOy53P8w5WdaskQClQyaQXtTZxdILmLI2cn8XkWXC9jDP3HQfL
jx8vqjlwU3x5+rLtFHy8P2Do8gudfAGDtaUICoQIj/2/agzJ0sKHmpoo7D9YhJmI
nwTvleAmylqFUmzohCga3dDJW5A0UGybwElybcAYIfQO45ZIgQ6HN+GM72FiNldj
KvG9PEJj9RXfxmXwf++X2oasi6b72VyDyP44VO1mbLimj8x45R4OPwPuQQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJn8jcKnwbnzK6GVf/SS3Auk8mD/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1LzUyMDVi
OC05OGNmLTQwNDItYTBjZS1lNGM2NzQxYzgwMmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvNTIwNWI4
LTk4Y2YtNDA0Mi1hMGNlLWU0YzY3NDFjODAyYy8xL21meU53cWZCdWZNcm9aVl85
SkxjQzZUeVlQOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAmHLPMA0EAgACMAcDBQMqBWbAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMsyTANBgkqhkiG9w0BAQsFAAOCAQEAQu1TgIMi/Hdh
6reXD/pPKpx2SYcw6I/Y8VvjWS1JVTSHmX7Il52F8z91Uh6sVIN8DiGHxYcEq3FA
E0VWq+3wk5mTpIPizAYGNudk3jfM+UB3n7a23D1vi3ian/grf16r6AjBOZTMleYw
VM1wFNjUgFYF+xBMLNcSvRlrBpeKcPiYLqZY4ji6S1URrs5nQ5e3ckRVVL/S/PpR
Xe8hXz3OmUWJtGq/AlvygEALF1l0qm0L82ZiiBfu9OFzVNhY2dSTsJcTEDEYMgAm
GdLjOyjpk/kvLrfglvduiQY0ZhgRjHSY4l8P+XIAGjrqWJ8Mpk7DT2BkimcfkVle
s7zTaWuqrg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:50:20 2025 by rpki-client