Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
File: 3fwxxRjdlxX93slYJSfshEjXhA0.cer (raw, json)
Hash identifier: qkl2IYDZWgl8tW4xRE3ejzUyz8JIIpMeTH26v37FJ1U=
Subject key identifier: DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F93223F0FF0F8C7EAC3010DD24CF4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213718
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:32:23:f0:ff:0f:8c:7e:ac:30:10:dd:24:cf:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:4c:4d:ac:33:47:c6:16:d2:0a:27:03:b6:
c1:b7:02:a6:0f:a4:9f:a2:57:ea:ff:7c:e0:21:0b:
24:ad:4f:0c:5f:90:bf:d1:51:37:dc:60:ee:a6:37:
ec:8b:ab:27:6c:e0:d2:86:46:3e:30:d5:76:c3:af:
00:74:06:39:a9:20:bf:4d:f5:f1:87:5d:63:1d:cc:
ac:e1:68:43:1d:ae:8c:e1:28:92:bb:1c:43:af:c9:
37:38:07:3b:27:52:42:e4:43:91:96:17:7e:28:cf:
10:af:44:39:9f:12:b6:a8:cc:15:43:99:17:fd:13:
b9:34:6a:17:d7:5c:bd:0f:65:f6:3f:52:50:4c:e4:
d8:9b:23:1b:76:5a:f8:8d:39:3c:1f:cf:56:24:dd:
85:16:04:dc:9f:bc:d7:cc:2a:e9:8f:03:7c:f5:b7:
81:ce:c2:53:32:5f:d3:5c:91:07:f1:1d:95:7a:71:
ca:b1:50:5e:44:2c:86:f1:35:83:d3:42:8b:4b:7b:
54:0d:14:0c:93:dc:c3:dd:a2:d6:d9:c1:42:e4:39:
95:69:f8:e0:28:14:f4:2e:bf:2e:05:ce:74:73:e7:
39:58:c1:a8:20:ce:66:9f:9d:ef:14:24:e3:ea:29:
34:b0:ad:68:23:bf:dd:b9:9f:e9:e7:a9:52:28:34:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213718
Signature Algorithm: sha256WithRSAEncryption
35:bf:c2:f3:e3:a7:09:08:d6:a4:bb:3f:ba:4d:c8:be:5e:86:
81:94:ca:fe:dc:fe:48:a0:4c:d3:9f:0d:c3:a0:d7:79:c6:a4:
6e:d4:93:02:69:4b:a6:a8:20:12:49:5e:aa:56:de:ac:40:36:
4d:eb:0b:a8:46:53:bc:67:71:92:ba:9f:7d:2d:22:75:08:0b:
85:45:22:b0:34:b7:45:df:36:ba:f3:cd:11:7d:26:ed:b3:66:
3a:3c:77:f3:ce:23:7e:f0:8f:87:9e:85:03:c0:18:20:26:b8:
c0:c9:b2:a0:0f:9c:f3:2c:d2:55:e3:d2:46:b0:5e:8f:f5:6a:
c1:26:08:79:df:a1:dc:f4:12:4a:1e:49:81:f8:73:5e:01:fa:
79:15:a3:69:b9:4c:cf:64:ae:05:3e:2e:56:ad:88:89:c3:b0:
f4:64:7a:4f:f8:88:4b:4a:ed:18:ad:33:ba:f7:b7:dd:5d:06:
54:f3:14:7d:fa:4e:23:3b:e1:2b:04:78:3c:27:77:46:c1:35:
fb:89:92:4c:b2:2a:b3:a3:53:43:e8:61:e2:ba:d2:93:1f:15:
c9:7f:60:b0:ee:40:32:84:37:67:17:cf:57:07:37:08:52:61:
2f:de:20:0b:ea:14:e4:4c:ab:d1:5c:5b:ab:f3:83:01:76:4a:
09:69:da:f4
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZ8Y+TIj8P8PjH6sMBDdJM9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGZjMzFjNTE4ZGQ5NzE1ZmRkZWM5NTgyNTI3ZWM4NDQ4ZDc4NDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYdMTawzR8YW0gonA7bBtwKmD6Sf
olfq/3zgIQskrU8MX5C/0VE33GDupjfsi6snbODShkY+MNV2w68AdAY5qSC/TfXx
h11jHcys4WhDHa6M4SiSuxxDr8k3OAc7J1JC5EORlhd+KM8Qr0Q5nxK2qMwVQ5kX
/RO5NGoX11y9D2X2P1JQTOTYmyMbdlr4jTk8H89WJN2FFgTcn7zXzCrpjwN89beB
zsJTMl/TXJEH8R2VenHKsVBeRCyG8TWD00KLS3tUDRQMk9zD3aLW2cFC5DmVafjg
KBT0Lr8uBc50c+c5WMGoIM5mn53vFCTj6ik0sK1oI7/duZ/p56lSKDSc6wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFN38McUY3ZcV/d7JWCUn7IRI14QNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzk0OTcy
NC04YTM5LTRhMDQtYjVlZS03NzIyYTFkOWFhNDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvOTQ5NzI0
LThhMzktNGEwNC1iNWVlLTc3MjJhMWQ5YWE0MS8xLzNmd3h4UmpkbHhYOTNzbFlK
U2ZzaEVqWGhBMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNC1jANBgkqhkiG9w0BAQsFAAOCAQEANb/C8+OnCQjW
pLs/uk3Ivl6GgZTK/tz+SKBM058Nw6DXecakbtSTAmlLpqggEkleqlberEA2TesL
qEZTvGdxkrqffS0idQgLhUUisDS3Rd82uvPNEX0m7bNmOjx3884jfvCPh56FA8AY
ICa4wMmyoA+c8yzSVePSRrBej/VqwSYIed+h3PQSSh5JgfhzXgH6eRWjablMz2Su
BT4uVq2IicOw9GR6T/iIS0rtGK0zuve33V0GVPMUffpOIzvhKwR4PCd3RsE1+4mS
TLIqs6NTQ+hh4rrSkx8VyX9gsO5AMoQ3ZxfPVwc3CFJhL94gC+oU5Eyr0Vxbq/OD
AXZKCWna9A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:09 2026 by rpki-client