Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3h_yFulFbZ1Dyj68SOP04ED1kDw.cer
File: 3h_yFulFbZ1Dyj68SOP04ED1kDw.cer (raw, json)
Hash identifier: Ukxcq7/Pcx+0iFx5SmfsnTafKx1FhiPQ4mS+qI8LKDg=
Subject key identifier: DE:1F:F2:16:E9:45:6D:9D:43:CA:3E:BC:48:E3:F4:E0:40:F5:90:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A180C98ACA3F56E8F859E92F5DBCE301CE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/3100db-ec6b-4e0a-8c95-42de8a0f70a4/1/3h_yFulFbZ1Dyj68SOP04ED1kDw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/3100db-ec6b-4e0a-8c95-42de8a0f70a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 Oct 2026 04:34:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208588
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:c9:8a:ca:3f:56:e8:f8:59:e9:2f:5d:bc:e3:01:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 28 04:34:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de1ff216e9456d9d43ca3ebc48e3f4e040f5903c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:42:43:df:6c:74:37:97:ef:1f:19:1c:40:d8:
1c:02:a8:14:d8:11:9a:ab:0b:34:7f:b4:4c:ea:eb:
ca:c5:08:b5:fa:67:4d:cf:de:9b:f9:7c:d2:8d:46:
44:71:cb:81:7e:c9:18:2e:a6:de:bb:b6:77:ea:db:
40:92:5d:66:69:bd:38:ca:51:d0:77:64:f6:44:de:
85:90:d6:d8:9b:33:74:78:47:5b:ce:1e:f6:06:2b:
d9:dc:ed:90:0b:06:7b:47:fb:84:46:7e:29:6c:48:
2d:0c:be:10:83:7b:73:bc:47:31:49:67:48:4b:9d:
17:01:13:ef:72:3f:06:5e:ec:78:32:3b:d8:01:3d:
de:75:cf:5e:bb:f3:d2:02:17:58:87:c3:b5:80:8f:
8c:f9:65:4e:b8:03:ff:39:f9:21:d5:4c:19:54:d6:
07:70:ce:61:9e:a9:81:cc:30:e3:24:43:a2:c6:77:
7a:fb:72:59:fd:ca:6c:82:5a:e1:fb:bc:57:c0:cf:
91:b2:ee:cc:1b:46:7c:81:a9:92:16:3a:0f:ea:98:
b4:1b:19:fd:28:7b:1a:2b:33:11:4f:7b:45:0b:18:
cc:24:54:1d:67:3e:82:f9:12:61:ec:00:cd:bf:aa:
d0:f1:2d:82:b6:5b:b5:cf:07:4f:7f:c3:35:b4:1b:
c2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1F:F2:16:E9:45:6D:9D:43:CA:3E:BC:48:E3:F4:E0:40:F5:90:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/3100db-ec6b-4e0a-8c95-42de8a0f70a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/3100db-ec6b-4e0a-8c95-42de8a0f70a4/1/3h_yFulFbZ1Dyj68SOP04ED1kDw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208588
Signature Algorithm: sha256WithRSAEncryption
9b:16:bb:c3:8d:1a:b6:ec:b0:18:7d:1d:ad:8d:62:6c:e0:a7:
da:1f:64:ed:1b:86:cc:6c:6d:e0:e1:21:72:91:3d:75:4c:68:
09:72:87:f0:a0:65:9e:03:83:c2:b0:bf:57:70:d1:f3:11:3c:
a9:f6:85:68:15:2c:55:6b:d4:37:04:bf:ad:43:50:ee:94:62:
52:29:80:00:33:68:bc:82:c3:e4:2d:23:1a:99:a8:ca:6b:13:
4d:26:16:41:8c:a8:d1:e6:41:16:cc:f1:9c:de:fd:46:09:53:
3b:25:c7:a4:99:00:1d:8b:52:4f:e7:54:cf:a3:14:c6:09:2e:
cf:9c:56:cb:93:4a:a0:95:dc:43:0c:ea:c1:4c:37:7c:a8:d6:
05:6b:a9:fe:ef:93:c0:05:ea:88:1c:09:8c:46:07:94:a6:52:
a4:02:38:30:4d:cb:58:81:e0:b9:cd:07:9c:3b:01:45:c9:3c:
a5:18:5e:cb:7d:8b:c7:d7:0f:3d:a6:8c:54:df:f1:6c:00:76:
ac:3f:06:c4:19:66:de:69:97:89:78:85:dc:77:eb:6e:fc:44:
18:07:30:d6:33:5d:15:6a:de:a9:83:1f:45:76:c0:08:6c:bb:
e9:4b:1d:5e:ca:50:d4:ed:a7:b1:e7:d6:32:d5:1b:cd:8d:1b:
b9:d7:5c:17
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAaGAyYrKP1bo+FnpL1284wHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDI4MDQzNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTFmZjIxNmU5NDU2ZDlkNDNjYTNlYmM0OGUzZjRlMDQwZjU5MDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+0JD32x0N5fvHxkcQNgcAqgU2BGa
qws0f7RM6uvKxQi1+mdNz96b+XzSjUZEccuBfskYLqbeu7Z36ttAkl1mab04ylHQ
d2T2RN6FkNbYmzN0eEdbzh72BivZ3O2QCwZ7R/uERn4pbEgtDL4Qg3tzvEcxSWdI
S50XARPvcj8GXux4MjvYAT3edc9eu/PSAhdYh8O1gI+M+WVOuAP/Ofkh1UwZVNYH
cM5hnqmBzDDjJEOixnd6+3JZ/cpsglrh+7xXwM+Rsu7MG0Z8gamSFjoP6pi0Gxn9
KHsaKzMRT3tFCxjMJFQdZz6C+RJh7ADNv6rQ8S2Ctlu1zwdPf8M1tBvC+QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFN4f8hbpRW2dQ8o+vEjj9OBA9ZA8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzMxMDBk
Yi1lYzZiLTRlMGEtOGM5NS00MmRlOGEwZjcwYTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvMzEwMGRi
LWVjNmItNGUwYS04Yzk1LTQyZGU4YTBmNzBhNC8xLzNoX3lGdWxGYloxRHlqNjhT
T1AwNEVEMWtEdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMuzDANBgkqhkiG9w0BAQsFAAOCAQEAmxa7w40atuyw
GH0drY1ibOCn2h9k7RuGzGxt4OEhcpE9dUxoCXKH8KBlngODwrC/V3DR8xE8qfaF
aBUsVWvUNwS/rUNQ7pRiUimAADNovILD5C0jGpmoymsTTSYWQYyo0eZBFszxnN79
RglTOyXHpJkAHYtST+dUz6MUxgkuz5xWy5NKoJXcQwzqwUw3fKjWBWup/u+TwAXq
iBwJjEYHlKZSpAI4ME3LWIHguc0HnDsBRck8pRhey32Lx9cPPaaMVN/xbAB2rD8G
xBlm3mmXiXiF3HfrbvxEGAcw1jNdFWreqYMfRXbACGy76UsdXspQ1O2nsefWMtUb
zY0buddcFw==
-----END CERTIFICATE-----
Generated at Wed Nov 11 18:29:25 2026 by rpki-client