Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
File: mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer (raw, json)
Hash identifier: BZpPi52Xs9YZrfbr9zrRluQA9Cvl/6MT6nRBL/fjYm8=
Subject key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A34F1D04FB195A59D32D682215E94E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39228
IP: 81.21.48.0/20
IP: 2a02:24c8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:4f:1d:04:fb:19:5a:59:d3:2d:68:22:15:e9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a961a121c520054df4ce59e5592ac68b0506bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:a0:ae:b6:43:83:3f:c6:12:7a:33:c8:00:
7b:a6:3e:15:0c:26:c4:17:37:db:f3:24:07:19:cd:
cc:54:63:3e:ec:06:6a:07:40:ec:d0:48:e3:7c:61:
62:e8:f8:9b:44:1f:d6:0e:a8:e8:b5:77:f0:ff:d7:
49:14:ce:4f:3f:ea:c1:a1:6d:b2:67:b0:c8:bb:e7:
05:26:44:be:f0:5f:19:bf:30:5d:a8:a5:9f:6b:08:
d6:22:70:b3:ec:5b:3d:e2:2e:8e:8b:66:25:39:71:
b7:8e:fe:d3:d8:cb:de:22:f2:a9:45:92:76:85:0a:
3c:ca:55:9e:46:f4:93:db:56:2f:d9:96:a5:27:13:
5e:aa:84:39:5c:2e:e0:fe:d7:31:2d:7e:ca:16:8e:
63:2c:74:10:99:95:1a:d3:0c:11:85:db:a6:90:26:
38:7a:9c:7e:bc:34:78:2e:a7:fd:8d:33:38:4f:2a:
f8:f8:a4:da:0c:92:1a:e8:05:f2:a5:8d:67:74:ac:
c8:86:92:d8:04:b0:54:4d:d4:7a:2c:91:d1:6e:9a:
81:b6:79:b4:c3:f5:8c:f8:28:e8:31:cc:3d:65:fe:
d7:9f:fa:c3:22:51:90:c7:a2:98:a3:51:89:d1:9c:
2f:50:dc:b4:81:8c:77:4b:b2:2c:b4:ec:06:2a:e5:
dd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.48.0/20
IPv6:
2a02:24c8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39228
Signature Algorithm: sha256WithRSAEncryption
57:8a:10:ce:09:cf:77:14:3d:f7:a8:90:ae:07:0c:57:aa:68:
83:ba:1a:7a:ef:a4:3c:64:97:89:70:0f:62:7a:f3:4c:6b:53:
49:d8:d7:27:55:06:8a:7f:35:77:ea:f3:12:04:d7:23:4f:03:
30:67:e8:6e:04:ef:d6:0b:77:63:8e:8a:74:19:b7:30:cf:28:
79:d2:bc:8d:e7:bd:67:cf:e0:79:38:93:c1:61:6a:52:1e:04:
c7:a4:71:97:75:f1:c5:7d:74:bb:13:9d:13:b6:26:f8:38:d5:
d1:30:0d:ca:b4:c3:b7:0f:b9:7e:06:42:6b:2c:d8:d2:0e:be:
d4:f6:6b:80:ca:ee:02:7d:8c:c0:9a:d0:0e:aa:25:fe:3d:c1:
d9:02:3f:ca:e3:b7:0f:8b:4f:7d:ab:33:21:67:37:a9:0e:c5:
55:9d:97:8d:b9:38:a7:50:87:42:0b:d3:12:ae:47:c2:ba:8a:
43:ad:cb:14:24:ed:4a:d4:d3:5a:c5:3b:5a:4b:3b:12:ef:d7:
4a:61:42:f2:4e:a0:a1:82:7f:79:93:b9:c9:00:83:ae:37:6c:
d8:45:ed:1e:8c:2b:37:03:9f:c5:b9:20:ae:de:89:61:6b:45:
84:7e:2f:28:8b:39:e2:66:a6:9b:06:5f:dd:9e:bb:89:b1:55:
74:c7:51:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:45:31 2026 by rpki-client