Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
File: 3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer (raw, json)
Hash identifier: wZi1TPXXtBTWl/H0Ua7FYnz9pugUKR30atkjjNkyXgk=
Subject key identifier: DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A33F9F76FF051AF4C2427363A99BA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214803
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:3f:9f:76:ff:05:1a:f4:c2:42:73:63:a9:9b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc1f529076f451ed9e0b222cce35dbc97cbdc51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:55:ea:a6:8b:c5:ff:95:f0:1a:ef:23:a6:
25:a3:4a:90:ef:4d:e2:4c:74:dd:ee:97:66:87:81:
bf:9c:fb:41:73:91:10:c7:98:ab:d3:ab:4d:b6:7f:
1f:ff:d1:1e:f4:e4:fb:79:98:3b:a3:ae:ee:42:d3:
e6:b4:c1:e6:54:54:f9:ff:83:d7:61:ae:e5:bb:88:
94:c5:46:16:7b:0e:9b:15:98:cf:17:a7:9f:7b:2d:
16:31:85:4f:93:ea:1b:9d:d1:07:58:3d:1a:7e:e6:
24:21:83:19:ae:4c:23:88:17:6b:45:36:de:86:16:
5f:2d:d8:1e:c2:c5:92:23:b4:b8:6c:ea:5f:9f:0a:
2b:a6:71:ef:14:ce:6d:74:fb:14:e2:04:88:b7:a7:
75:93:b9:3e:52:3b:fe:e4:4f:ec:4f:86:46:9f:88:
72:a1:f9:1e:85:4d:cd:93:25:9b:ab:32:21:8e:bf:
3c:2a:36:29:e8:df:be:64:a8:d0:78:11:54:93:d3:
01:bd:35:45:40:b4:cc:a7:1e:8c:f7:e2:ca:77:c3:
c8:30:c5:f6:4b:b6:b3:96:17:36:b9:48:cb:2f:96:
fa:7e:e2:d3:b1:9b:b6:91:5a:0c:58:cb:0f:45:dc:
a7:d0:ee:38:05:7f:f9:49:2d:2f:e4:ca:44:00:41:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214803
Signature Algorithm: sha256WithRSAEncryption
54:c1:ff:2c:ab:4b:aa:92:c8:82:48:ac:6d:6f:91:32:ba:78:
27:90:a1:49:de:c7:8f:44:e6:5d:4d:bc:5e:24:af:c4:05:b3:
6f:a1:4c:7d:80:fb:36:4d:e5:f1:9d:bc:de:36:96:06:65:35:
41:f9:be:d6:3b:cf:fd:3a:55:c5:4c:31:88:02:47:c4:ef:59:
fa:e4:df:62:35:c1:e8:bb:0d:04:22:4e:fb:a0:0e:e3:75:69:
ce:1d:67:8b:b7:1c:0d:bf:8d:18:0d:f5:41:98:27:45:5b:c9:
47:37:10:83:89:10:70:c9:bd:1a:10:27:53:fd:a3:c7:92:77:
55:d6:62:b9:13:87:7b:3a:fe:73:f6:87:92:4b:59:80:5c:ed:
d4:4d:0f:39:88:c1:cc:f7:dc:cf:fc:73:42:6a:8b:be:6d:2d:
dd:7c:dd:8e:cb:43:1b:9c:97:d6:df:23:14:0a:36:24:a0:dd:
fc:28:88:31:8e:31:0c:bf:9e:60:6a:26:f9:d8:d6:2c:d4:ae:
d4:85:71:06:1b:ca:d6:43:da:d7:a3:ae:fb:0c:a5:15:79:cf:
b5:38:c6:0c:92:53:de:fe:3c:1b:13:db:c2:7e:73:82:94:9b:
e8:d1:f4:44:50:dc:4a:9d:85:29:9b:82:87:a0:d5:3c:57:9b:
00:2c:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:26:54 2026 by rpki-client