Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.cer
File: mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.cer (raw, json)
Hash identifier: JjrjBoSfMa0NAXgrfFQGncNxzkKiIFtMrXuO4j1E+TA=
Subject key identifier: 99:3F:99:CC:DC:E1:D7:1A:6C:5E:E8:5B:67:E2:D1:FE:FE:AD:88:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FF0647B5E45D2BDA4BC9CCE6BB0CA559B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 11 Aug 2026 10:35:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 21051
IP: 185.16.8.0/22
IP: 195.211.128.0/22
IP: 2a05:c3c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:64:7b:5e:45:d2:bd:a4:bc:9c:ce:6b:b0:ca:55:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 11 10:35:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=993f99ccdce1d71a6c5ee85b67e2d1fefead8848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:ff:6e:47:39:8a:02:85:d1:34:6d:ff:3e:
ed:2e:f1:73:6e:2e:ec:bb:2c:24:87:b3:31:c2:3e:
92:a3:3b:7d:9e:4e:3e:23:b2:29:db:82:0c:2a:3b:
7e:8d:66:bb:0a:c8:4f:9e:89:f1:f3:41:e8:c4:d6:
df:6c:91:35:35:7d:d9:92:2b:67:30:98:63:90:53:
1d:88:6b:28:2d:5d:76:f5:db:45:b2:f1:57:21:43:
bb:e8:2c:34:6e:05:44:28:ee:0a:23:df:38:77:65:
1e:38:af:18:e7:7e:f0:ba:86:bc:42:1b:54:46:c6:
2d:89:38:71:4e:f7:a7:7a:b9:c7:42:b8:11:a7:7a:
5d:72:fb:50:99:bd:ec:96:17:80:f2:b4:57:36:29:
1b:40:73:89:cf:75:19:2f:5b:ff:d8:ff:ef:54:44:
bf:9b:a6:41:c4:65:95:7c:a4:48:6a:c9:f5:1e:cc:
45:86:f9:19:f2:37:49:26:24:10:08:0b:53:7a:77:
1d:e0:ca:40:79:1d:46:cb:ec:25:b1:36:d6:8d:8a:
0c:9e:1a:2b:a0:21:a5:4e:9e:5c:3e:7d:64:c8:5e:
e8:d0:58:3c:83:01:eb:c5:a3:1f:a9:a0:e0:79:ad:
e9:2a:13:15:ac:94:87:03:7d:1f:e5:e7:13:a4:79:
d2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3F:99:CC:DC:E1:D7:1A:6C:5E:E8:5B:67:E2:D1:FE:FE:AD:88:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.8.0/22
195.211.128.0/22
IPv6:
2a05:c3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21051
Signature Algorithm: sha256WithRSAEncryption
85:79:46:09:56:80:7c:30:37:6d:38:5d:4c:d4:00:44:ce:63:
a0:01:41:2c:e8:ae:77:af:cb:cf:17:7d:69:74:bd:3e:f5:e4:
64:e6:92:98:35:94:4e:8e:c1:6b:33:02:0f:31:ab:87:de:5e:
96:96:8a:e0:ab:57:a2:e4:bf:be:7c:cb:00:2b:03:b3:c7:53:
6a:ae:4d:10:30:be:e4:30:ec:c7:e7:02:7c:01:d1:e0:5e:f2:
47:b9:81:ab:bf:e2:ce:75:07:b3:86:29:21:bc:e3:fa:59:21:
c4:5c:e3:01:82:f7:d2:99:eb:a6:b7:17:6f:66:07:a0:2d:b2:
0a:3b:d5:41:0a:4e:62:62:5c:bc:f1:78:64:1a:b5:b1:57:20:
0e:0e:f9:33:d5:35:41:71:44:e8:b3:37:b9:56:e2:e4:aa:18:
b8:61:bd:c2:6e:49:c4:cf:4d:72:57:a1:04:15:93:b5:52:7c:
53:30:70:9c:ae:57:1b:81:30:fa:b4:7e:3d:e3:4b:36:a0:35:
1d:1b:41:97:24:fe:24:49:fc:23:24:ae:3a:0f:0d:1e:19:76:
47:b0:48:5a:68:08:d7:06:31:5d:b5:6c:83:50:16:39:11:2b:
8b:2d:9b:5c:36:92:49:8d:d0:c4:52:85:9c:f6:58:03:6e:ee:
6d:64:42:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:01:47 2026 by rpki-client