Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36tShCAP0BGCMzgMvaJEp4jv3Mc.cer
File: 36tShCAP0BGCMzgMvaJEp4jv3Mc.cer (raw, json)
Hash identifier: NSZXd7/omOJshk911b/6lbEs4qX1TZri8TJpnFTos+8=
Subject key identifier: DF:AB:52:84:20:0F:D0:11:82:33:38:0C:BD:A2:44:A7:88:EF:DC:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FFA934BCA245C98299C51CABD98B132F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/36tShCAP0BGCMzgMvaJEp4jv3Mc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 13 Aug 2026 10:03:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218967
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:93:4b:ca:24:5c:98:29:9c:51:ca:bd:98:b1:32:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 13 10:03:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfab5284200fd0118233380cbda244a788efdcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:ab:4b:41:09:78:f3:68:a6:86:8f:03:86:
b5:71:d7:e0:ec:85:00:39:d2:9b:02:98:b6:b2:56:
f3:ac:a3:9e:b3:57:89:d0:08:8a:b7:d3:57:40:03:
3f:e4:bb:a0:a8:22:dd:e1:e2:cf:42:1f:38:07:17:
6e:4b:9b:52:89:7b:95:50:da:5b:a0:d9:68:fb:e5:
ce:d8:70:26:3e:62:d6:f1:c1:43:c3:7d:b0:a8:4c:
0f:73:aa:84:56:5a:f4:cb:80:93:c7:f2:9b:48:b2:
2c:f7:db:a9:62:43:d3:60:f6:46:92:b9:a3:5a:1e:
38:4d:e1:5e:3b:5b:78:70:4f:b8:4b:67:5d:bf:ea:
7e:d3:e1:71:01:b5:d2:28:28:6e:6e:92:f9:1a:73:
e9:cc:6c:65:98:f9:fc:78:b9:f8:03:7f:c1:a7:51:
8f:d2:66:91:e2:a4:52:9b:07:27:e0:e7:6d:01:78:
9c:38:25:55:c6:d8:92:be:6b:99:0d:a3:9e:e5:d7:
bd:b9:3b:44:c2:c0:91:3d:30:48:7e:f0:32:bc:0a:
7e:2c:0d:cc:d7:ad:8d:26:95:fe:78:85:f8:3a:47:
2a:d8:4e:94:b8:13:5d:3f:9f:8e:e0:0c:62:66:cf:
eb:6e:36:31:70:70:f5:d8:4b:06:79:3e:17:8b:ec:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AB:52:84:20:0F:D0:11:82:33:38:0C:BD:A2:44:A7:88:EF:DC:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/36tShCAP0BGCMzgMvaJEp4jv3Mc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218967
Signature Algorithm: sha256WithRSAEncryption
a7:4b:c7:c2:5a:87:6b:6a:b9:7a:55:b6:59:db:00:9e:19:da:
6d:e3:1d:37:52:a5:8d:cd:75:38:a9:9d:a8:5c:83:10:50:ec:
a1:5f:bb:df:78:28:cc:25:d9:4b:24:00:e1:de:da:a2:85:59:
48:4a:18:72:08:f7:99:2a:c6:71:29:f4:fb:31:2f:5d:d2:49:
53:24:c2:4b:98:92:7b:3e:eb:33:3c:28:0f:c7:f2:3c:3a:95:
77:04:40:1d:a5:35:fb:a5:cb:3a:cf:6c:1b:9f:2f:2a:53:9b:
3d:6a:d3:e0:49:79:15:87:36:8c:6b:05:b1:fb:4c:6b:a1:e1:
39:fc:47:d5:b2:61:00:61:ce:c7:fb:02:13:01:84:87:f0:08:
37:ef:1d:2c:ce:c0:8f:a6:91:c8:3f:b3:9d:df:92:95:b4:54:
32:5d:1f:41:7d:bd:c5:55:52:9c:34:c9:31:52:78:04:cd:68:
62:e8:14:94:a2:9e:90:1e:71:fb:df:92:ec:5b:58:9c:12:da:
7b:9a:2d:5a:e8:55:d5:ee:8e:1b:69:2f:ca:46:9e:10:1f:27:
41:75:fb:8c:df:bb:06:f2:a6:2b:08:f4:7f:db:83:35:4c:40:
af:11:24:ad:f9:45:db:21:53:1a:71:5b:de:02:96:60:42:ec:
b2:7b:fe:17
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZ/6k0vKJFyYKZxRyr2YsTL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODEzMTAwMzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmFiNTI4NDIwMGZkMDExODIzMzM4MGNiZGEyNDRhNzg4ZWZkY2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg2rS0EJePNopoaPA4a1cdfg7IUA
OdKbApi2slbzrKOes1eJ0AiKt9NXQAM/5LugqCLd4eLPQh84BxduS5tSiXuVUNpb
oNlo++XO2HAmPmLW8cFDw32wqEwPc6qEVlr0y4CTx/KbSLIs99upYkPTYPZGkrmj
Wh44TeFeO1t4cE+4S2ddv+p+0+FxAbXSKChubpL5GnPpzGxlmPn8eLn4A3/Bp1GP
0maR4qRSmwcn4OdtAXicOCVVxtiSvmuZDaOe5de9uTtEwsCRPTBIfvAyvAp+LA3M
162NJpX+eIX4Okcq2E6UuBNdP5+O4AxiZs/rbjYxcHD12EsGeT4Xi+zGkwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFN+rUoQgD9ARgjM4DL2iRKeI79zHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzM0NGUy
Yy0xYzU2LTQzYWItODEwOC1lYWY2OGI1OWU1OTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvMzQ0ZTJj
LTFjNTYtNDNhYi04MTA4LWVhZjY4YjU5ZTU5OS8xLzM2dFNoQ0FQMEJHQ016Z012
YUpFcDRqdjNNYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNXVzANBgkqhkiG9w0BAQsFAAOCAQEAp0vHwlqHa2q5
elW2WdsAnhnabeMdN1Kljc11OKmdqFyDEFDsoV+733gozCXZSyQA4d7aooVZSEoY
cgj3mSrGcSn0+zEvXdJJUyTCS5iSez7rMzwoD8fyPDqVdwRAHaU1+6XLOs9sG58v
KlObPWrT4El5FYc2jGsFsftMa6HhOfxH1bJhAGHOx/sCEwGEh/AIN+8dLM7Aj6aR
yD+znd+SlbRUMl0fQX29xVVSnDTJMVJ4BM1oYugUlKKekB5x+9+S7FtYnBLae5ot
WuhV1e6OG2kvykaeEB8nQXX7jN+7BvKmKwj0f9uDNUxArxEkrflF2yFTGnFb3gKW
YELssnv+Fw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:13:56 2026 by rpki-client