Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3aYlyUiBFZZabdCk8ILfO0LZSUg.cer
File: 3aYlyUiBFZZabdCk8ILfO0LZSUg.cer (raw, json)
Hash identifier: vem9TUfvTjBRwGlGwHC0pKcXHEP8XiH3wDDZy6jfzKs=
Subject key identifier: DD:A6:25:C9:48:81:15:96:5A:6D:D0:A4:F0:82:DF:3B:42:D9:49:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C94F3EEF2D7318C5FADA7C1BBA3FF4444
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/3aYlyUiBFZZabdCk8ILfO0LZSUg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Feb 2026 13:19:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200642
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:f3:ee:f2:d7:31:8c:5f:ad:a7:c1:bb:a3:ff:44:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 25 13:19:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dda625c9488115965a6dd0a4f082df3b42d94948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d7:71:67:d5:31:d3:06:95:7b:fa:a9:47:d6:
8d:61:63:b7:af:f5:a3:30:65:52:d6:6d:cd:e9:0d:
25:2e:a4:50:a8:f3:13:e6:35:ee:31:e3:41:0c:4b:
c5:9d:56:4f:52:5b:9e:30:85:f0:8f:b1:1d:0f:f4:
41:a7:f6:86:dd:8f:8d:2f:16:ed:8c:13:c1:dd:da:
f4:a6:13:f0:01:c0:67:84:f7:49:b9:f7:07:e7:a4:
79:8a:2d:55:47:11:34:b3:20:a0:9f:d9:ae:23:1b:
12:96:a2:3a:9a:a9:d8:a6:bb:31:2d:25:c8:0a:57:
52:b8:fc:95:ca:bc:97:b7:2c:57:f2:73:ce:90:7b:
50:3a:4c:5d:c1:92:53:7e:67:f7:00:18:9b:47:7a:
7c:54:62:78:a5:e6:d3:c7:5a:20:2c:33:7d:4c:9f:
91:04:80:a0:14:5a:58:85:94:da:b7:09:49:06:ef:
ac:8a:82:63:a6:ca:a4:a8:3b:d6:e5:e4:17:3b:ad:
4a:fc:77:e8:ed:95:a2:80:58:47:b4:8a:72:db:e9:
e1:44:b4:7b:2f:ec:30:ad:c1:d0:91:f4:b7:bf:f8:
42:64:b7:f4:c6:ef:96:42:8f:3b:d4:f4:9c:29:db:
e2:a8:69:bd:c8:95:63:4a:56:75:cf:1f:63:c4:c1:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A6:25:C9:48:81:15:96:5A:6D:D0:A4:F0:82:DF:3B:42:D9:49:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/3aYlyUiBFZZabdCk8ILfO0LZSUg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200642
Signature Algorithm: sha256WithRSAEncryption
4a:26:8d:4b:0a:c6:0f:d5:d4:79:dc:34:3b:ba:3f:64:07:f5:
f1:69:00:10:ea:fc:c3:24:ea:cf:05:a5:f6:c4:7b:af:aa:83:
4a:99:18:a3:00:4d:d7:49:41:9c:62:05:48:e0:8f:70:d5:35:
c3:50:79:60:ae:31:03:7c:9a:04:d1:0f:6d:6e:ae:a1:0b:c7:
ce:9f:3e:11:d3:91:db:a1:5e:15:76:39:10:ea:f4:b1:4f:75:
a1:5f:46:36:a7:01:e7:c0:9e:59:de:be:ce:43:81:af:88:38:
18:25:29:95:2e:04:cf:21:b5:66:87:c9:b3:45:94:ba:6a:7b:
92:1c:a4:0c:79:14:a4:ce:97:55:da:1c:c3:a7:a5:40:80:7d:
a5:25:4f:c7:0c:e5:0a:9c:f3:57:dc:c5:24:41:74:7f:2a:45:
b3:96:29:2d:de:69:5a:47:52:c2:fc:f8:84:dd:0a:84:e2:07:
62:3d:7a:e2:c3:0e:81:17:1a:bd:b5:3c:68:8b:35:c5:16:5e:
a3:53:9b:c0:3e:fe:8d:21:c1:74:de:05:63:52:88:ed:6b:cd:
a7:4c:d4:73:82:64:ec:26:b4:0f:3e:df:6f:62:f9:54:a4:0d:
9c:e5:0e:70:4a:ab:ee:fc:1d:e9:8d:6f:ff:9d:d5:b1:22:a3:
ca:b5:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:49:52 2026 by rpki-client