Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3JhLri1u5Uj8gG3OzUArccc3NKA.cer
File: 3JhLri1u5Uj8gG3OzUArccc3NKA.cer (raw, json)
Hash identifier: zf6iookI4F78kkCtEH+l0X5eKg06Fm+ymD0bO2qikrI=
Subject key identifier: DC:98:4B:AE:2D:6E:E5:48:FC:80:6D:CE:CD:40:2B:71:C7:37:34:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D7631C62643120C9D640686832FA24A17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 10 Apr 2026 07:01:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199353
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:31:c6:26:43:12:0c:9d:64:06:86:83:2f:a2:4a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 10 07:01:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc984bae2d6ee548fc806dcecd402b71c73734a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:23:13:8f:84:ff:7e:4f:6c:26:87:4e:83:
08:0c:44:09:85:1b:59:b1:8a:c5:fb:a9:9a:69:80:
8f:61:60:83:1f:95:33:85:1b:98:9a:45:e8:2e:ae:
d4:f4:c5:02:2d:44:fe:83:bd:84:50:9c:7a:72:27:
ad:d4:8c:d8:27:9a:af:0b:7f:f8:a5:42:2e:d3:9f:
ac:b5:db:a6:b9:e0:f4:1b:c1:fa:e5:5f:ea:bc:d3:
20:ee:cd:4c:72:15:b1:da:19:13:38:4a:f7:94:85:
bc:39:f3:69:64:48:01:36:d7:08:82:6e:e0:d2:54:
8d:60:e2:65:b6:8b:fc:0e:55:93:82:49:33:d3:f5:
bd:f1:30:46:f0:41:d7:0b:47:aa:79:45:99:2b:ce:
dd:04:15:88:df:c1:11:25:e3:3b:5c:8b:73:97:05:
80:b7:b9:42:a0:93:bd:d1:c2:2b:de:9d:5b:ea:71:
96:ce:0d:12:9b:5c:07:34:9d:cc:ff:37:27:7f:8e:
78:7f:50:e7:82:56:27:b0:bc:f8:cf:a9:8c:79:4e:
36:8a:f8:a0:d0:32:42:07:ac:47:3a:f4:05:b2:1d:
8b:2a:77:b1:70:b3:e9:76:e3:cf:e3:b8:15:d3:99:
c9:41:7b:44:3b:42:31:cd:51:71:8b:a5:60:1f:9b:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:98:4B:AE:2D:6E:E5:48:FC:80:6D:CE:CD:40:2B:71:C7:37:34:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199353
Signature Algorithm: sha256WithRSAEncryption
a8:d4:dd:dc:48:0c:5c:1f:cc:ab:96:82:af:e3:69:e0:00:f7:
54:9d:85:26:82:b3:9a:2b:dd:c1:20:96:42:8c:5a:0e:40:4d:
47:15:14:73:5a:61:eb:67:b3:bf:db:8a:81:eb:1a:d2:8f:53:
d2:d2:b1:ab:39:48:ad:ec:63:25:a7:6b:c5:e3:52:86:57:9f:
d3:46:01:ab:8a:c1:e5:23:ab:70:19:45:83:78:87:26:c0:08:
ba:cd:c2:63:8f:e5:0a:c5:f3:9e:fc:a4:be:34:f1:c6:c5:67:
af:81:3a:82:a5:e3:ba:7e:43:d7:3f:05:68:ab:0e:d0:70:94:
6f:ef:11:2c:92:9d:8b:90:b1:71:aa:f1:44:a3:a2:ce:f6:10:
d8:58:1f:fa:6f:7f:2c:6e:4c:7d:c6:86:c1:7d:f7:62:98:49:
c0:b4:ef:d7:8b:81:1b:c7:4c:1c:13:fa:04:ce:ba:30:40:de:
15:8b:1a:11:20:61:4c:7a:39:a0:8b:08:ca:5b:a2:97:47:2d:
c9:ae:8e:53:a6:a6:79:72:fb:30:bb:ab:04:40:32:cb:e0:c2:
14:f9:49:5e:a3:9b:2a:9c:c1:ec:6d:e6:98:72:77:55:d2:69:
43:42:0d:b3:b2:79:e6:01:05:ec:05:a7:3a:66:1a:ac:e3:b1:
0f:5f:49:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:07:57 2026 by rpki-client