Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3MypmTR5NwhDBa_GrOgSz-ccUmU.cer
File: 3MypmTR5NwhDBa_GrOgSz-ccUmU.cer (raw, json)
Hash identifier: lDWV1M1LmZnjjYw6LwuPFfIT32SLjzr0/QFhYckvl38=
Subject key identifier: DC:CC:A9:99:34:79:37:08:43:05:AF:C6:AC:E8:12:CF:E7:1C:52:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A04A1B3C7F6C6E177F793781B6B74EF5B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/647d89-c04f-48cc-9d7b-a221facafde0/1/3MypmTR5NwhDBa_GrOgSz-ccUmU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/647d89-c04f-48cc-9d7b-a221facafde0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 28 Aug 2026 20:41:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218839
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4a:1b:3c:7f:6c:6e:17:7f:79:37:81:b6:b7:4e:f5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 28 20:41:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dccca999347937084305afc6ace812cfe71c5265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:bd:37:03:a5:73:cf:6f:6e:6e:57:b3:d7:
d2:bb:6a:7d:15:4c:be:f7:1f:5b:25:46:7a:4b:1c:
95:c5:38:69:d9:b0:00:f1:03:7b:c3:29:64:9f:10:
c6:a6:dd:34:a1:21:ca:89:fd:8e:1c:9d:9e:4c:57:
8e:26:55:ba:82:13:ca:91:75:5d:d8:89:8e:91:16:
d3:13:c8:d5:ce:27:ff:e4:bc:f0:ec:8c:39:e6:cf:
b8:39:8c:5a:2e:c5:30:12:4e:b0:28:ac:1c:dd:3e:
89:bd:7c:0f:1c:bd:53:8a:68:c9:fc:81:e3:23:53:
42:3b:20:eb:bc:05:e3:63:db:93:35:f7:10:7c:9d:
b0:d0:f7:44:92:03:58:c5:89:91:44:d4:1f:10:ec:
a4:b7:0b:90:8f:bf:df:bf:58:69:ff:73:7e:b5:4f:
de:d6:6a:26:d2:fa:5c:78:7e:9f:56:81:05:69:61:
b6:35:05:1a:2a:0a:92:a0:c9:95:f0:06:51:c0:18:
e9:e6:1d:70:79:29:8b:6c:77:8a:23:44:00:6b:c7:
6c:41:36:83:9b:88:a9:70:dd:75:ae:32:88:13:54:
38:79:d0:54:fc:21:4b:b2:ec:21:b2:17:ba:80:49:
b4:2c:d5:d0:e5:15:07:b3:f8:a4:65:44:8d:3e:be:
68:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CC:A9:99:34:79:37:08:43:05:AF:C6:AC:E8:12:CF:E7:1C:52:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/647d89-c04f-48cc-9d7b-a221facafde0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/647d89-c04f-48cc-9d7b-a221facafde0/1/3MypmTR5NwhDBa_GrOgSz-ccUmU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218839
Signature Algorithm: sha256WithRSAEncryption
20:db:de:7a:cd:61:15:31:60:05:1f:63:1f:ee:01:03:63:9c:
3a:30:8d:bc:43:61:d2:28:6c:bc:f9:98:68:c6:b1:bf:1d:dd:
49:db:91:1b:c7:35:87:63:53:8c:1d:7e:5c:a7:e8:16:0f:c6:
fc:5f:f0:a4:ae:c8:f1:49:3c:9f:5a:7f:3b:10:8c:89:02:56:
32:7e:14:01:65:56:e0:7d:1d:ed:15:df:c2:ee:a7:e5:a8:e9:
f5:2e:c5:1b:4d:35:c4:88:a9:4c:3a:bd:d9:20:e9:02:91:e8:
04:47:a3:f1:4a:17:7d:95:f7:aa:b7:ad:54:97:37:49:c0:c3:
17:7c:e0:c1:09:c2:06:f2:ae:77:f8:84:2d:a3:c0:8d:a3:00:
7e:16:da:c2:46:2b:61:8c:e5:56:34:e7:28:c7:15:5e:c7:65:
72:3e:4e:4c:7a:0c:53:ca:98:96:77:cd:aa:c6:00:38:96:ec:
48:26:6a:fc:a8:91:42:0f:cc:a0:67:d7:5f:4b:b8:1b:26:90:
16:0f:17:3e:97:b9:12:e6:45:73:38:99:6d:05:08:5f:95:e9:
a0:7e:a8:2f:fe:ec:d8:55:68:39:1e:dd:fd:d1:6a:39:8b:a5:
a5:04:a1:14:d8:d2:aa:e3:86:74:f8:b7:e6:9e:1f:72:c9:33:
ba:22:71:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:15:56 2026 by rpki-client