Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3kX5u4JjMlKIEVvl5OV3-AvJpc0.cer
File: 3kX5u4JjMlKIEVvl5OV3-AvJpc0.cer (raw, json)
Hash identifier: P8lvwRO6pnksNBw1p7ABbq4M+anygp3LRlSAtOFu3O8=
Subject key identifier: DE:45:F9:BB:82:63:32:52:88:11:5B:E5:E4:E5:77:F8:0B:C9:A5:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F4622626E5D03E52B2AC2B301454FCC11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Jul 2026 09:08:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 28949
IP: 81.161.240.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:22:62:6e:5d:03:e5:2b:2a:c2:b3:01:45:4f:cc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 9 09:08:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de45f9bb8263325288115be5e4e577f80bc9a5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f7:7d:2d:66:8a:e4:ee:c2:9d:4a:54:75:28:
32:10:65:64:2f:5b:4a:e3:16:26:28:13:cb:0f:3b:
56:51:c3:db:66:d2:47:69:cd:e3:a1:ab:96:38:6d:
0e:d2:63:c1:c7:9e:ba:bf:20:c9:61:51:b6:ee:49:
6a:69:f7:89:fd:68:61:2e:cf:29:b4:36:aa:a5:0d:
8f:c2:c0:be:f8:ec:a8:9a:b0:ae:97:08:d9:25:26:
50:6d:66:bd:a5:a8:fd:74:cf:c9:12:d1:13:6e:ce:
1b:91:82:f6:89:a7:f4:d3:17:a0:c0:21:36:04:d1:
b4:d5:bc:39:43:12:ff:60:b3:07:96:75:7f:20:98:
fe:8c:d6:f5:16:ce:8a:9f:f9:e2:0c:e9:6f:53:96:
c6:ba:a6:2a:ec:59:cd:2a:a1:3a:85:d3:6e:9f:63:
0f:37:9a:de:24:11:80:cf:23:9f:a1:ad:80:3f:73:
06:41:3c:8c:09:26:cc:c3:46:65:32:fa:b3:80:08:
ed:84:c6:02:be:89:d3:7e:13:41:62:b2:9c:a1:14:
ff:58:d0:13:2e:74:48:de:22:9b:4f:90:34:78:49:
34:af:82:ff:1f:ca:4c:66:70:62:5b:e4:4d:f9:39:
c3:2f:79:d0:ad:ca:2e:b3:89:ee:6e:b8:1c:b1:93:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:45:F9:BB:82:63:32:52:88:11:5B:E5:E4:E5:77:F8:0B:C9:A5:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.240.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28949
Signature Algorithm: sha256WithRSAEncryption
2c:53:d5:1c:37:82:af:71:dd:f8:2b:5b:3a:a9:34:6d:ee:90:
4a:1a:ef:24:4c:30:65:0c:1e:c6:f7:9d:4c:04:2b:0b:5a:2a:
bf:db:ed:fc:86:77:9e:d6:32:7e:e5:11:75:fd:85:0d:78:32:
59:bb:9c:1f:08:28:d2:c9:cb:7e:d5:50:26:27:38:ef:4f:e7:
e3:c4:fd:0c:69:8a:29:1c:de:3b:d3:fd:82:97:07:85:1a:0d:
15:1d:04:86:f3:3d:4a:85:fc:db:7b:d0:2a:91:94:29:28:de:
74:34:4f:30:03:9d:ff:d2:6c:4b:eb:83:1e:01:62:99:94:ab:
48:fd:bd:9f:40:35:b7:ae:a1:73:da:d3:ad:af:94:a9:2f:e4:
07:07:23:e3:a3:2e:66:f7:2a:50:e9:8c:dd:5c:a5:43:38:11:
f3:40:8c:4d:ee:8f:6b:f5:e4:d5:5e:bd:4e:63:02:21:af:c3:
68:5e:70:16:3c:0a:5f:e3:0e:8f:3d:82:63:cf:91:d1:2b:da:
59:9e:61:97:a6:d5:51:86:68:bc:10:ba:2e:ae:dc:6c:04:08:
0c:90:8e:02:86:46:bf:2e:f4:b8:6e:5a:e9:7a:8b:bd:bc:d2:
a8:3b:fd:17:df:05:c5:cd:3d:15:76:5f:d1:df:26:ec:52:14:
14:81:5a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:17 2026 by rpki-client