Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
File: 3K8sW-MHpGphaXvKhwvsojTsKkc.cer (raw, json)
Hash identifier: Me3RKw054YXhbJRO4D27fUwMQF+hMC6WP7FnMpqy2Eo=
Subject key identifier: DC:AF:2C:5B:E3:07:A4:6A:61:69:7B:CA:87:0B:EC:A2:34:EC:2A:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F94BB2F57D1C44C2BB5F0BE73C7E37
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.102.28.0/22
IP: 2a06:2240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:4b:b2:f5:7d:1c:44:c2:bb:5f:0b:e7:3c:7e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcaf2c5be307a46a61697bca870beca234ec2a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:11:e8:4b:69:4c:73:07:29:47:87:52:bb:
b2:7e:20:6f:9a:fe:c7:2f:c6:35:bd:dd:c4:76:4f:
49:16:63:9f:16:ad:ae:3c:cf:d6:c0:f2:92:4e:f0:
65:5e:11:78:68:35:de:6f:22:f5:60:a5:c4:24:0a:
98:5f:8e:6c:a3:b1:de:31:b1:c1:4a:d2:08:ac:7a:
f2:58:2f:e5:6e:51:eb:28:be:c3:42:7e:8d:c7:02:
5b:e4:02:0e:8d:9e:d7:fb:ea:c2:40:c0:6b:d2:60:
4a:4f:76:56:96:64:e9:19:fb:65:b1:1f:23:4d:db:
ac:19:c8:b5:be:99:48:b4:da:99:fa:83:89:a5:61:
97:b3:93:65:66:c4:74:9a:11:41:df:57:b8:a5:16:
d2:90:7d:69:b6:8c:8c:42:72:36:12:69:68:bc:d1:
55:41:27:41:4f:e6:8a:89:2b:39:ef:85:e2:6d:19:
91:00:94:17:0e:3a:22:cc:2b:ac:06:da:ba:b6:36:
bb:ee:67:56:7c:20:50:3d:cd:b7:41:f1:5a:2f:54:
61:92:53:db:7f:05:e2:b9:3c:35:cd:db:da:35:45:
46:2c:89:06:bd:ba:09:59:bd:df:75:7b:a2:c2:d5:
4b:54:5a:0a:b8:d9:03:c3:62:ae:6e:5f:16:d9:79:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AF:2C:5B:E3:07:A4:6A:61:69:7B:CA:87:0B:EC:A2:34:EC:2A:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.28.0/22
IPv6:
2a06:2240::/29
Signature Algorithm: sha256WithRSAEncryption
a1:15:cc:fe:64:2c:53:7f:8c:f8:88:b7:8a:76:70:c7:db:78:
1f:d6:dc:6b:4b:fd:e7:38:f7:69:7f:31:20:ac:82:3f:b1:44:
11:0b:6c:53:af:82:b4:94:49:84:53:1d:d5:60:05:83:62:16:
65:39:38:30:d1:dd:d3:40:ce:5b:4e:a6:b2:1f:e4:63:89:a9:
10:55:03:70:05:e6:ac:c2:be:7d:dc:76:f4:70:c7:93:b9:d5:
36:41:2c:c3:ce:b3:5a:a0:73:5b:f0:a2:30:f3:34:6a:22:88:
cb:c4:22:50:ed:5e:77:3e:97:d2:f4:2a:3a:15:85:2e:7b:fb:
f8:87:ac:b0:05:42:c5:01:c2:02:40:98:59:7a:35:5d:e0:38:
79:c8:ab:44:43:71:d9:db:9a:96:31:cb:48:a4:77:13:9f:4f:
1f:78:84:46:3b:84:0d:f4:68:e3:8f:e8:cb:df:e0:07:b6:c8:
a9:17:31:03:e1:cd:32:ca:e8:fb:cf:7a:a9:60:83:21:79:64:
47:83:4c:8d:59:a3:c4:fa:a6:a2:e5:f3:1b:9a:0e:af:e4:b6:
bd:26:5b:f7:98:97:8f:19:38:6e:28:33:55:b6:f8:65:b6:e5:
73:2d:61:3e:38:f0:7c:eb:f1:16:6b:96:a0:d3:02:f1:07:71:
7e:2a:63:2b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZ8Y+Uuy9X0cRMK7XwvnPH43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2FmMmM1YmUzMDdhNDZhNjE2OTdiY2E4NzBiZWNhMjM0ZWMyYTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21AR6EtpTHMHKUeHUruyfiBvmv7H
L8Y1vd3Edk9JFmOfFq2uPM/WwPKSTvBlXhF4aDXebyL1YKXEJAqYX45so7HeMbHB
StIIrHryWC/lblHrKL7DQn6NxwJb5AIOjZ7X++rCQMBr0mBKT3ZWlmTpGftlsR8j
TdusGci1vplItNqZ+oOJpWGXs5NlZsR0mhFB31e4pRbSkH1ptoyMQnI2EmlovNFV
QSdBT+aKiSs574XibRmRAJQXDjoizCusBtq6tja77mdWfCBQPc23QfFaL1RhklPb
fwXiuTw1zdvaNUVGLIkGvboJWb3fdXuiwtVLVFoKuNkDw2Kubl8W2Xk8hQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNyvLFvjB6RqYWl7yocL7KI07CpHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2Lzk0ZjVj
OC1iNDFjLTQ4NWEtYjNkYi03ZDhjYjUzZGMwODYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvOTRmNWM4
LWI0MWMtNDg1YS1iM2RiLTdkOGNiNTNkYzA4Ni8xLzNLOHNXLU1IcEdwaGFYdkto
d3Zzb2pUc0trYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuWYcMA0EAgACMAcDBQMqBiJAMA0GCSqGSIb3
DQEBCwUAA4IBAQChFcz+ZCxTf4z4iLeKdnDH23gf1txrS/3nOPdpfzEgrII/sUQR
C2xTr4K0lEmEUx3VYAWDYhZlOTgw0d3TQM5bTqayH+RjiakQVQNwBeaswr593Hb0
cMeTudU2QSzDzrNaoHNb8KIw8zRqIojLxCJQ7V53PpfS9Co6FYUue/v4h6ywBULF
AcICQJhZejVd4Dh5yKtEQ3HZ25qWMctIpHcTn08feIRGO4QN9Gjjj+jL3+AHtsip
FzED4c0yyuj7z3qpYIMheWRHg0yNWaPE+qai5fMbmg6v5La9Jlv3mJePGThuKDNV
tvhltuVzLWE+OPB86/EWa5ag0wLxB3F+KmMr
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:34 2026 by rpki-client