Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.cer (raw, json)
Hash identifier: BH1NBvg43UbKiIV94Veuki7f13U0yBOLrUnK6hFGR5o=
Subject key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F7EB65ADB0A12C8E883D23C6B2CB3B62D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Jul 2026 08:48:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216031
IP: 91.211.162.0/23
IP: 194.49.111.0/24
IP: 194.49.115.0 -- 194.49.116.255
IP: 194.50.3.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:b6:5a:db:0a:12:c8:e8:83:d2:3c:6b:2c:b3:b6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 20 08:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:0d:85:fc:51:b1:17:df:8b:cd:02:c8:d3:
5f:45:e3:f4:26:5a:93:2d:b5:7a:a2:32:da:82:05:
fb:8a:ab:c4:5b:9e:0a:94:51:96:6c:ca:d6:0d:96:
fb:a0:8a:a4:1a:26:af:ee:a6:34:32:68:0c:3c:e5:
dc:e4:66:94:7c:6b:cb:99:dd:b8:bf:35:e2:03:ce:
f3:6e:91:08:a4:6e:50:c5:38:e7:8b:dc:ca:a6:cd:
ed:fd:80:4b:3c:58:67:dc:ea:8a:fc:ad:a9:1f:5a:
47:7a:e3:c5:e2:5a:4d:fd:4b:39:4e:67:4e:57:8e:
fb:d1:0e:17:28:be:17:a3:fa:bb:4d:e0:8c:ee:55:
a5:c4:08:b8:2f:0c:b0:16:a8:76:94:d4:27:c0:a5:
1a:3d:11:12:4c:19:21:7d:da:61:54:b3:28:06:78:
4f:de:d9:24:ca:0f:87:f3:97:6d:43:5b:dc:64:5f:
28:48:2e:fc:c9:63:af:40:12:57:12:f6:f5:e2:2c:
cb:4f:cf:75:7a:c4:30:23:eb:0d:94:9e:2e:19:1c:
46:4c:78:76:8e:87:f1:86:81:dd:db:6f:69:6b:5d:
78:e3:e9:7a:a5:dd:b8:7d:b5:18:cc:d2:f9:3d:a4:
cd:e4:d8:01:b7:6f:52:81:82:aa:fa:b8:89:60:2d:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.162.0/23
194.49.111.0/24
194.49.115.0-194.49.116.255
194.50.3.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216031
Signature Algorithm: sha256WithRSAEncryption
5c:af:a6:24:a1:de:6f:7c:45:ac:1e:da:42:ed:34:ee:77:4a:
0d:4d:2b:59:9a:be:07:9f:71:09:9d:e6:33:1f:1b:89:8e:ad:
11:19:cf:a7:90:ee:93:7b:af:e3:89:aa:b3:bc:f1:e9:7b:43:
6a:68:9b:64:ad:e0:ff:4c:34:cf:27:bf:89:ff:82:5f:4f:7e:
65:6d:95:ed:1c:d7:2a:66:63:3b:82:00:ce:04:c4:a0:f4:f8:
ca:6a:7b:9a:46:3c:44:1c:8d:d5:9a:a4:dc:68:e2:5d:49:7d:
fa:76:8c:36:25:11:a1:ad:e1:dc:13:be:7c:89:65:c0:bd:af:
93:36:a3:77:8d:31:06:a1:32:40:dc:ef:9c:52:e3:a2:06:cb:
d0:52:03:51:b8:6c:21:d8:99:1e:d8:6a:85:bf:db:78:c0:32:
1c:cf:76:86:6a:26:a6:4b:29:28:1f:a9:32:ea:a1:df:44:62:
23:c4:f1:e9:e8:01:eb:3f:66:5f:6b:e1:02:64:56:a1:01:b3:
c4:7f:f8:bc:c4:4f:d0:69:4b:2b:0f:c8:ef:cd:eb:7a:99:d2:
9b:bd:30:8b:c9:44:b9:bf:38:44:13:71:f4:06:e0:a9:1a:0d:
86:c6:5f:0a:07:38:ff:79:aa:82:a1:5e:55:21:23:b2:49:19:
b2:78:c9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:54:12 2026 by rpki-client