Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
File: 1-v3j2ZJau-IPw8bZGEx99nBH-54.cer (raw, json)
Hash identifier: mT7eWH966UfA/7mlzCcdM8pB0ZmUNuZ22UAsIxO5zM4=
Subject key identifier: FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C7F77D2B7A4CDCFDE48EF37E4B7966B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:18:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216276
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:77:d2:b7:a4:cd:cf:de:48:ef:37:e4:b7:96:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fe:1b:df:25:d9:98:a2:69:29:35:ee:5f:13:
38:2c:13:9a:aa:95:e3:15:98:cd:b0:dd:48:b9:24:
3e:bc:1d:97:cb:34:8c:f8:99:98:96:9a:05:7c:06:
4d:dc:e9:90:a6:cc:8f:f2:5f:95:27:56:b8:f4:bb:
6a:e4:f5:47:af:94:e2:72:4f:6c:70:50:0a:dd:53:
e8:f8:9c:95:f1:47:ec:cb:ec:b4:a5:05:dc:aa:3e:
24:f9:11:97:5c:aa:5f:7d:e9:6a:d4:2a:66:fe:fc:
6a:99:e6:2c:b7:ea:7a:f5:ae:5c:7e:69:eb:80:33:
ea:0c:2f:49:e0:67:12:f6:18:6e:8f:1f:46:c5:12:
e2:48:f5:c7:a5:41:d9:fd:83:e9:8c:f6:43:e9:cc:
3e:43:88:ad:b1:9f:64:f9:62:28:41:dd:6c:81:6b:
2d:6c:e9:c0:14:4b:3d:e4:56:07:92:98:8a:8f:48:
75:3e:90:90:1b:d9:1d:88:d1:66:a1:f4:c0:03:f5:
cd:ea:25:f4:5d:98:aa:d8:5a:be:50:8e:2c:94:c8:
72:6c:9b:60:eb:f4:ce:8a:62:c6:db:3c:6b:eb:df:
0c:40:f8:2d:28:03:1c:1b:30:b2:af:68:b9:7a:f7:
80:f9:18:78:e9:61:f9:ea:33:be:6e:69:88:50:21:
1a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216276
Signature Algorithm: sha256WithRSAEncryption
a8:57:d6:de:20:a5:61:6b:8a:5e:32:85:c8:2b:83:ee:c0:ec:
2a:96:4c:ee:7e:f2:e5:b9:6c:b5:5a:47:28:b6:74:42:1d:01:
a0:7e:fc:eb:48:ef:d6:94:49:41:0c:a4:12:c9:e1:3e:9c:c4:
4e:f5:3d:82:5c:72:55:e4:0e:06:86:da:ce:b1:e1:f4:89:42:
73:fa:5f:39:04:12:95:92:9a:8d:26:01:6f:65:eb:9f:4b:57:
28:0e:ed:ae:19:94:77:66:1c:0d:7f:65:c6:8f:bc:8a:bb:7c:
ca:35:03:b2:53:bf:c6:b9:83:8e:78:f0:6d:6a:fc:fd:73:73:
42:81:88:4b:47:e3:39:e0:33:af:1e:2f:46:19:09:25:43:cf:
33:7c:15:b1:a8:ed:a9:ff:46:d0:0f:0b:91:03:a8:f7:dd:60:
06:ff:cd:ad:02:42:90:06:76:32:8e:f8:49:fc:4c:12:f9:e5:
6d:01:be:ac:5c:e3:32:fc:ce:c7:6f:12:8f:68:a2:47:dd:b6:
4a:03:d5:d4:99:5e:79:b5:21:fb:0d:0c:f3:dc:f0:05:27:4d:
81:e1:ed:1b:08:0f:7d:e0:cc:1d:cb:72:1c:62:ab:8a:29:72:
6a:c7:fb:6e:2a:e7:c5:a8:90:f1:a6:6a:8f:a5:08:4e:1e:ec:
05:e7:d6:27
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAZt8f3fSt6TNz95I7zfkt5ZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWZkZTNkOTkyNWFiYmUyMGZjM2M2ZDkxODRjN2RmNjcwNDdmYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P4b3yXZmKJpKTXuXxM4LBOaqpXj
FZjNsN1IuSQ+vB2XyzSM+JmYlpoFfAZN3OmQpsyP8l+VJ1a49Ltq5PVHr5Tick9s
cFAK3VPo+JyV8Ufsy+y0pQXcqj4k+RGXXKpffelq1Cpm/vxqmeYst+p69a5cfmnr
gDPqDC9J4GcS9hhujx9GxRLiSPXHpUHZ/YPpjPZD6cw+Q4itsZ9k+WIoQd1sgWst
bOnAFEs95FYHkpiKj0h1PpCQG9kdiNFmofTAA/XN6iX0XZiq2Fq+UI4slMhybJtg
6/TOimLG2zxr698MQPgtKAMcGzCyr2i5eveA+Rh46WH56jO+bmmIUCEaTQIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFPr949mSWrviD8PG2RhMffZwR/ueMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4L2RjOGQw
MC1mMmM0LTQ5OTEtOTg5ZS00M2QxOWRjM2YxMzgvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvZGM4ZDAw
LWYyYzQtNDk5MS05ODllLTQzZDE5ZGMzZjEzOC8xLzEtdjNqMlpKYXUtSVB3OGJa
R0V4OTluQkgtNTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMDTNQwDQYJKoZIhvcNAQELBQADggEBAKhX1t4gpWFr
il4yhcgrg+7A7CqWTO5+8uW5bLVaRyi2dEIdAaB+/OtI79aUSUEMpBLJ4T6cxE71
PYJcclXkDgaG2s6x4fSJQnP6XzkEEpWSmo0mAW9l659LVygO7a4ZlHdmHA1/ZcaP
vIq7fMo1A7JTv8a5g4548G1q/P1zc0KBiEtH4zngM68eL0YZCSVDzzN8FbGo7an/
RtAPC5EDqPfdYAb/za0CQpAGdjKO+En8TBL55W0Bvqxc4zL8zsdvEo9ookfdtkoD
1dSZXnm1IfsNDPPc8AUnTYHh7RsID33gzB3Lchxiq4opcmrH+24q58WokPGmao+l
CE4e7AXn1ic=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:27 2026 by rpki-client