Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Mujvx40_4JsoZJ4PBIDUwiGwMbE.cer
File: Mujvx40_4JsoZJ4PBIDUwiGwMbE.cer (raw, json)
Hash identifier: o/miw9I6Kvl2LP+exfnyRep9nztKJOxrceC4NTe19RA=
Subject key identifier: 32:E8:EF:C7:8D:3F:E0:9B:28:64:9E:0F:04:80:D4:C2:21:B0:31:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A17A225D858256418537C670A3277CB44D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/1/32E8EFC78D3FE09B28649E0F0480D4C221B031B1.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 26 Oct 2026 21:33:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201279
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:22:5d:85:82:56:41:85:37:c6:70:a3:27:7c:b4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 26 21:33:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32e8efc78d3fe09b28649e0f0480d4c221b031b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:92:36:bc:e0:4e:f6:0b:d4:64:a0:ee:8b:
ff:2d:0f:50:af:fb:b0:a0:d2:4c:5f:8e:15:6c:3b:
b9:ec:96:9c:eb:1a:59:b3:a2:bd:c9:48:c8:ee:fa:
e3:5c:7a:9d:0c:47:33:9e:3c:b2:4a:a5:9d:92:9a:
1b:86:b4:20:b4:11:44:87:26:59:a3:dc:d1:a0:68:
06:d0:34:bb:85:ac:f4:40:5e:2f:21:47:4a:c3:13:
2e:14:e4:09:84:79:1b:f3:e4:f6:0b:92:a8:c0:1d:
ab:67:4b:85:56:88:be:37:0e:04:20:cf:d5:12:8e:
ed:76:3b:aa:c0:06:b4:3b:9b:eb:91:b1:29:b9:a5:
78:df:44:3b:19:ae:2a:fb:af:df:53:65:cc:4e:f9:
e5:10:fd:31:3e:06:1c:a9:f2:72:ba:23:33:32:df:
ea:21:99:64:3b:d3:d4:1d:60:8c:42:94:38:9f:97:
b8:58:0f:9a:ad:f6:50:dc:97:ef:81:18:d9:46:5d:
10:ba:cb:2a:ce:7d:dd:bd:0f:dc:47:5d:c5:4f:a3:
8c:38:da:86:47:8b:6e:4c:40:a7:26:37:c8:21:69:
0d:70:50:98:64:0b:1d:d7:43:81:62:c9:31:15:f8:
99:01:6b:34:f9:cd:ca:ad:52:a8:f9:5c:3e:54:7f:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E8:EF:C7:8D:3F:E0:9B:28:64:9E:0F:04:80:D4:C2:21:B0:31:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6dcff427-2ad5-4392-a64c-af61d7084842/1/32E8EFC78D3FE09B28649E0F0480D4C221B031B1.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201279
Signature Algorithm: sha256WithRSAEncryption
b1:fb:51:c6:8d:d6:d3:83:b6:04:ad:bb:92:45:db:7c:cd:32:
31:28:4d:f4:6d:0f:58:43:42:07:99:c0:f7:78:39:91:e6:9b:
82:f3:7d:d7:87:d1:ec:64:d6:5a:81:b8:16:2d:e6:5f:a4:17:
2e:dc:d8:e3:09:78:2b:47:d2:d8:fe:29:d9:38:ce:8d:ff:28:
1a:9b:fe:77:73:73:c1:7d:5d:68:17:74:6c:65:00:1a:c7:0a:
7d:a6:0a:74:f3:20:36:fa:a9:5b:e6:ef:36:c7:d2:eb:06:5f:
af:6d:2a:97:d9:2d:90:f2:25:32:00:28:56:45:9f:fd:af:7a:
16:07:9a:10:9e:bb:ab:26:be:02:a3:8b:55:64:46:86:a5:00:
0e:b5:38:09:73:00:9c:7f:1f:ea:9c:ce:85:ee:20:77:be:79:
1a:d4:b5:2f:fb:2b:28:5f:ce:d4:16:37:c9:b1:b6:39:0c:84:
3d:6f:38:ec:7c:de:83:c7:fd:3a:6a:94:a4:e7:9a:62:10:67:
27:05:57:2d:a8:39:e4:07:47:73:c2:65:be:e9:eb:c4:87:9e:
8a:5b:81:7b:2a:36:b2:da:95:6d:2a:f1:5b:e0:13:95:6a:92:
ba:0e:cb:f5:f8:0e:28:23:bd:77:12:88:70:4a:97:b4:68:b6:
97:bc:44:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 05:18:38 2026 by rpki-client