Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
File: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer (raw, json)
Hash identifier: Rlqu2VV2bDhhXrb02KZfqBau1i1P02Ns2vqGjDSSI8s=
Subject key identifier: DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198CDD94CC4233FFEFBA29E3E30284A9B2D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 21 Aug 2025 18:17:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205211
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:d9:4c:c4:23:3f:fe:fb:a2:9e:3e:30:28:4a:9b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 21 18:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:9b:27:c8:07:76:87:17:55:b7:ae:3e:29:
ed:2e:93:b2:59:37:7b:6e:a2:ef:98:52:0c:49:a8:
71:b0:75:32:2d:01:b6:70:17:b5:c2:11:ce:b8:20:
b2:72:54:e8:55:da:71:34:ee:09:76:8b:56:ac:42:
61:2f:04:6e:ce:fc:c0:fa:ef:40:ee:bf:90:67:6f:
3a:6d:3d:d5:84:bd:0c:eb:77:f6:01:2e:04:dc:50:
57:a6:23:dd:57:74:82:b2:0c:29:98:2e:b1:95:e9:
e0:95:af:31:2a:5e:ad:ed:ac:15:e7:01:fd:6f:f2:
56:a0:df:38:38:00:85:11:fb:29:ac:ea:16:f0:e4:
26:c5:a8:44:c3:d8:dd:52:1b:ff:3c:26:12:a8:89:
36:02:dc:61:65:ac:6f:4e:ee:56:f6:5d:ad:11:1e:
9d:35:dc:95:6c:8f:66:a2:e6:7a:78:2e:70:88:d5:
ec:dd:3b:35:1b:83:6e:cf:bf:50:f6:e9:ec:bb:54:
b1:2b:45:de:73:23:4f:fe:5d:e0:24:3b:fb:79:97:
a5:ef:0e:9d:81:c1:10:e3:03:11:a3:c4:76:f7:12:
6b:0b:93:b5:63:0d:d0:e3:88:50:24:e6:d1:bd:51:
9e:50:7a:dc:6c:77:24:50:25:be:c5:13:34:b7:f2:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205211
Signature Algorithm: sha256WithRSAEncryption
72:2f:ff:9a:f2:e1:17:5c:38:8d:aa:d4:be:bd:2e:3d:2c:b1:
00:4c:13:30:c5:8c:7f:ec:f4:b8:0b:d5:7e:6f:22:1e:35:16:
eb:ed:99:dd:fd:1d:77:0d:c7:b5:d2:32:63:24:d2:e0:d7:2c:
28:f9:ac:60:54:ab:97:1f:5d:92:40:f6:2b:1a:2d:43:43:f9:
b9:79:52:09:23:6b:96:31:22:08:de:bd:37:12:f1:0d:85:16:
ef:ee:7d:f1:e0:9d:fd:99:1b:dc:38:94:bd:41:e4:4c:22:83:
75:a0:57:8c:ba:81:6e:e8:98:d7:7f:94:c3:6a:d7:d4:ce:79:
de:e1:09:ae:06:48:51:dd:cb:03:20:6c:b9:87:28:6f:8d:eb:
d7:3b:7a:4c:e7:f2:02:50:d1:9c:c8:85:2a:a5:fe:29:b4:56:
27:c6:4b:b8:65:4c:02:ee:58:3b:ba:86:0c:62:bd:55:79:b3:
48:22:11:3b:bf:1a:75:47:60:d8:7a:a2:cb:7f:b4:3a:69:83:
f0:d5:d4:95:62:d7:ea:01:f4:17:a9:ab:ac:64:b7:42:13:9d:
de:e8:9f:39:78:38:8b:49:53:82:fb:8f:77:97:84:04:06:46:
57:fb:90:0e:a9:b9:90:7c:79:9b:d5:ba:cd:04:e7:4a:69:b7:
c0:18:ea:cf
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZjN2UzEIz/++6KePjAoSpstMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwODIxMTgxNzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDM4NzMzMDNkMmQ2ZTIzOGE1YmQ4NWVkNTg2N2I2NDMxNThmYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjSbJ8gHdocXVbeuPintLpOyWTd7
bqLvmFIMSahxsHUyLQG2cBe1whHOuCCyclToVdpxNO4JdotWrEJhLwRuzvzA+u9A
7r+QZ286bT3VhL0M63f2AS4E3FBXpiPdV3SCsgwpmC6xlengla8xKl6t7awV5wH9
b/JWoN84OACFEfsprOoW8OQmxahEw9jdUhv/PCYSqIk2AtxhZaxvTu5W9l2tER6d
NdyVbI9mouZ6eC5wiNXs3Ts1G4Nuz79Q9unsu1SxK0XecyNP/l3gJDv7eZel7w6d
gcEQ4wMRo8R29xJrC5O1Yw3Q44hQJObRvVGeUHrcbHckUCW+xRM0t/IavwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFN04czA9LW4jilvYXtWGe2QxWPwUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzVlMjhk
YS0zMmUxLTQwYjktYmIzMC1kM2RiMjc3ZWNkZmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvNWUyOGRh
LTMyZTEtNDBiOS1iYjMwLWQzZGIyNzdlY2RmYS8xLzNUaHpNRDB0YmlPS1c5aGUx
WVo3WkRGWV9CUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMhmzANBgkqhkiG9w0BAQsFAAOCAQEAci//mvLhF1w4
jarUvr0uPSyxAEwTMMWMf+z0uAvVfm8iHjUW6+2Z3f0ddw3HtdIyYyTS4NcsKPms
YFSrlx9dkkD2KxotQ0P5uXlSCSNrljEiCN69NxLxDYUW7+598eCd/Zkb3DiUvUHk
TCKDdaBXjLqBbuiY13+Uw2rX1M553uEJrgZIUd3LAyBsuYcob43r1zt6TOfyAlDR
nMiFKqX+KbRWJ8ZLuGVMAu5YO7qGDGK9VXmzSCIRO78adUdg2Hqiy3+0OmmD8NXU
lWLX6gH0F6mrrGS3QhOd3uifOXg4i0lTgvuPd5eEBAZGV/uQDqm5kHx5m9W6zQTn
Smm3wBjqzw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:10:48 2025 by rpki-client