Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer
File: 3cHKqpDJHGKtslTJSjfVxfecXxw.cer (raw, json)
Hash identifier: IhlBbIDpyIfU7uD+JObiZ6GWm7HqVuyeFEQreJwlico=
Subject key identifier: DD:C1:CA:AA:90:C9:1C:62:AD:B2:54:C9:4A:37:D5:C5:F7:9C:5F:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE2DDE5734FAB8AB7B694E8F0C330E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50107
IP: 45.66.24.0/22
IP: 2a09:6140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:2d:de:57:34:fa:b8:ab:7b:69:4e:8f:0c:33:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddc1caaa90c91c62adb254c94a37d5c5f79c5f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fe:cc:55:46:45:1f:62:b1:9f:57:c1:d1:82:
63:31:d1:7a:88:bc:ae:e1:62:76:47:b0:69:92:f5:
2c:36:ca:a0:92:1b:2e:00:6b:ee:69:77:04:e4:47:
61:ea:8c:30:66:76:13:5c:bc:85:1b:b3:f3:c1:81:
38:02:78:b8:ae:c4:a0:d9:16:20:6c:56:ae:95:64:
8e:32:03:ff:cc:be:a4:e4:f6:b3:8f:0f:cb:7c:90:
84:70:83:01:99:b3:88:ff:b3:a5:bd:40:43:ab:ec:
23:ca:48:dd:fc:1c:b9:34:0c:ce:b8:4d:6c:c0:25:
7e:65:ec:89:6c:f7:68:8c:dd:19:5e:d5:47:fb:e0:
4c:8a:a1:75:c9:ed:55:c3:54:92:76:f2:4b:2f:9d:
c1:ed:71:f2:55:54:3a:d2:9b:cc:41:bb:0f:78:7c:
8e:b1:48:b7:cf:3d:f8:3c:f4:48:52:56:96:95:ed:
bd:99:85:1c:d0:c7:d3:85:51:22:f1:8f:45:9f:ae:
8c:05:36:66:c1:4f:f1:3b:f0:87:c8:80:60:c4:35:
fb:9b:8a:11:d7:b6:61:f8:12:8f:da:75:e2:e9:a8:
26:99:11:b1:22:0e:06:42:68:22:bd:a6:84:23:42:
07:b4:f5:09:e8:65:86:38:d2:fe:08:62:f1:1a:c3:
fa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C1:CA:AA:90:C9:1C:62:AD:B2:54:C9:4A:37:D5:C5:F7:9C:5F:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.24.0/22
IPv6:
2a09:6140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50107
Signature Algorithm: sha256WithRSAEncryption
89:bd:61:6c:39:d5:d8:7e:6d:71:87:bd:7d:46:f4:d5:2e:cc:
cc:8d:ce:19:c0:f1:37:4c:70:56:6d:4c:7b:d4:c3:06:ef:60:
24:f2:5a:e3:21:e0:50:45:1d:4f:27:60:b1:c4:9e:05:f2:d2:
26:c1:ce:a3:c9:95:81:54:80:f8:aa:e5:89:0b:a0:e1:f4:f6:
99:9f:67:cc:2a:7d:f2:f8:9e:2c:f7:5f:4c:c1:14:bf:a4:a6:
85:b7:c2:2f:7f:d6:2c:54:7b:9a:37:fe:88:c9:9f:67:88:1b:
8b:71:d1:17:76:04:20:84:88:73:98:aa:03:d4:ad:64:4b:68:
11:e5:e6:cb:04:76:45:61:49:e7:d7:40:e9:0d:a5:68:72:5f:
5f:fe:4a:46:fc:12:21:54:5f:2c:28:c7:58:a1:13:e1:87:96:
83:56:a8:5f:6b:3e:07:10:06:2e:de:e4:08:24:a1:df:08:12:
a1:65:ab:f4:e0:b8:09:10:e1:34:02:10:38:a9:2b:17:21:6b:
a6:05:d4:d3:a5:17:d0:28:d1:25:57:ea:8a:41:37:4c:11:16:
eb:65:6d:51:2e:b9:fb:7a:7c:9c:d0:8c:1c:c6:0f:83:c9:98:
be:f5:e4:41:25:11:d5:67:e4:30:70:b5:b1:e9:a7:ea:a0:76:
cf:f2:e5:d7
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZ8Y7i3eVzT6uKt7aU6PDDMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQyODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGMxY2FhYTkwYzkxYzYyYWRiMjU0Yzk0YTM3ZDVjNWY3OWM1ZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v7MVUZFH2Kxn1fB0YJjMdF6iLyu
4WJ2R7BpkvUsNsqgkhsuAGvuaXcE5Edh6owwZnYTXLyFG7PzwYE4Ani4rsSg2RYg
bFaulWSOMgP/zL6k5Pazjw/LfJCEcIMBmbOI/7OlvUBDq+wjykjd/By5NAzOuE1s
wCV+ZeyJbPdojN0ZXtVH++BMiqF1ye1Vw1SSdvJLL53B7XHyVVQ60pvMQbsPeHyO
sUi3zz34PPRIUlaWle29mYUc0MfThVEi8Y9Fn66MBTZmwU/xO/CHyIBgxDX7m4oR
17Zh+BKP2nXi6agmmRGxIg4GQmgivaaEI0IHtPUJ6GWGONL+CGLxGsP6CQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFN3ByqqQyRxirbJUyUo31cX3nF8cMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2L2FhMDM3
Yy0zMmNlLTQ0MDYtYjBiYy04OTk0OWZjYzdhZmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvYWEwMzdj
LTMyY2UtNDQwNi1iMGJjLTg5OTQ5ZmNjN2FmYi8xLzNjSEtxcERKSEdLdHNsVEpT
amZWeGZlY1h4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLUIYMA0EAgACMAcDBQMqCWFAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDDuzANBgkqhkiG9w0BAQsFAAOCAQEAib1hbDnV2H5t
cYe9fUb01S7MzI3OGcDxN0xwVm1Me9TDBu9gJPJa4yHgUEUdTydgscSeBfLSJsHO
o8mVgVSA+KrliQug4fT2mZ9nzCp98vieLPdfTMEUv6SmhbfCL3/WLFR7mjf+iMmf
Z4gbi3HRF3YEIISIc5iqA9StZEtoEeXmywR2RWFJ59dA6Q2laHJfX/5KRvwSIVRf
LCjHWKET4YeWg1aoX2s+BxAGLt7kCCSh3wgSoWWr9OC4CRDhNAIQOKkrFyFrpgXU
06UX0CjRJVfqikE3TBEW62VtUS65+3p8nNCMHMYPg8mYvvXkQSUR1WfkMHC1semn
6qB2z/Ll1w==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:29 2026 by rpki-client