Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ON76XfCMaJj9cbwmEcvj-QO0Rc.cer
File: 3ON76XfCMaJj9cbwmEcvj-QO0Rc.cer (raw, json)
Hash identifier: 2sIlYB6zPJ7Lm19XEp4bUnR8E5ZfvvTjXD6vwCIPvzc=
Subject key identifier: DC:E3:7B:E9:77:C2:31:A2:63:F5:C6:F0:98:47:2F:8F:E4:0E:D1:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F0388E44AD0949D93B574BF87595D6212
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bf4a4-3161-411e-b01d-3bfb04a76ecc/1/3ON76XfCMaJj9cbwmEcvj-QO0Rc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bf4a4-3161-411e-b01d-3bfb04a76ecc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jun 2026 10:45:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219349
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:88:e4:4a:d0:94:9d:93:b5:74:bf:87:59:5d:62:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 26 10:45:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dce37be977c231a263f5c6f098472f8fe40ed117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:b9:05:fb:dc:89:c7:17:f1:6a:0c:ee:6c:
45:be:24:cc:ee:19:fa:08:45:bf:90:9d:72:73:a6:
7f:f1:6f:13:a9:e6:2f:ab:74:d1:b9:a7:b5:48:66:
b1:77:c6:54:c8:e9:34:bc:1f:ea:a4:6a:25:95:43:
7e:eb:e1:3a:07:d1:36:2b:f8:17:3f:56:7d:8f:9b:
9f:ec:96:30:b0:ac:7c:30:65:a6:1b:86:53:ca:5f:
36:3f:7e:bb:f1:06:2a:6c:e1:f8:01:ba:02:a4:71:
b1:58:19:c2:04:71:fb:3d:47:a7:3a:83:7c:cc:09:
88:a6:a0:2e:70:24:5b:7e:6d:d1:3c:ad:ca:c9:9c:
21:0a:8c:50:42:89:8a:75:7c:84:63:e0:81:de:8d:
40:28:e4:6f:46:15:05:f8:f6:19:8e:7d:aa:c0:ec:
25:08:06:e5:56:f8:f0:24:5c:61:84:46:ba:e8:40:
a6:7a:96:fa:3b:6e:cd:3a:ec:7c:49:1e:3a:c6:c8:
ee:44:43:99:10:c6:bf:c5:9f:89:63:95:65:3d:6b:
73:34:1d:f0:12:f5:03:7f:b6:6e:a4:3a:6b:a9:2e:
82:78:9b:62:ac:e9:c3:05:b9:9a:a4:70:ce:b2:a5:
7b:a6:0b:87:9d:50:fb:83:75:31:71:ec:9e:8f:be:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E3:7B:E9:77:C2:31:A2:63:F5:C6:F0:98:47:2F:8F:E4:0E:D1:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bf4a4-3161-411e-b01d-3bfb04a76ecc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bf4a4-3161-411e-b01d-3bfb04a76ecc/1/3ON76XfCMaJj9cbwmEcvj-QO0Rc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219349
Signature Algorithm: sha256WithRSAEncryption
6c:42:1b:e6:06:ae:d0:76:35:39:71:db:12:ff:c4:79:d5:71:
c6:e9:36:cb:78:a3:0d:ff:ed:c8:7b:66:48:e0:fb:b5:e6:3a:
54:d3:54:93:da:62:dd:94:50:3f:73:11:cd:84:63:f2:dd:28:
65:fe:c9:c6:28:06:4a:94:8e:e7:e8:a2:2a:ec:45:62:e3:51:
00:83:87:e4:4c:43:aa:8b:28:53:02:df:af:17:57:c4:89:61:
53:43:ec:62:0a:8e:0c:db:90:51:33:90:a3:2c:d5:ee:e6:10:
91:74:a6:65:45:83:7f:33:7f:55:a4:50:d6:19:3f:48:aa:a8:
2b:34:dc:14:38:cc:ac:0b:8f:57:c2:7d:f7:43:aa:de:42:7a:
70:d0:47:e3:21:09:10:88:fb:1b:64:a1:d4:04:f3:01:57:48:
33:7d:4d:f6:9c:28:37:92:45:e0:aa:6b:5a:78:6d:f0:a5:d2:
3b:56:f9:07:60:4f:55:c5:92:84:ff:3f:fb:60:7c:d5:77:68:
c0:0a:57:ff:cb:75:f3:a5:15:25:0d:25:46:4b:e2:81:97:b8:
82:6d:49:e3:ed:98:86:b4:39:15:dc:99:5e:60:3d:f6:53:9e:
9d:6f:4a:0a:82:7a:52:9a:4a:f0:b1:56:28:00:57:d1:4a:6b:
a8:1d:86:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:31 2026 by rpki-client