Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3vw_66cpuK0Ll5OtsmpPoyg4bjY.cer
File: 3vw_66cpuK0Ll5OtsmpPoyg4bjY.cer (raw, json)
Hash identifier: Ru2Q01SRJAP4lXxJ+uPy6ervmvlTMSMU6rratS05BIU=
Subject key identifier: DE:FC:3F:EB:A7:29:B8:AD:0B:97:93:AD:B2:6A:4F:A3:28:38:6E:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAFA9A7CBCAE38D278DF14AE63A5B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/3vw_66cpuK0Ll5OtsmpPoyg4bjY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204091
IP: 192.76.164.0/24
IP: 192.76.171.0/24
IP: 192.83.216.0/24
IP: 192.94.78.0/24
IP: 195.138.197.0/24
IP: 2a13:3700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:fa:9a:7c:bc:ae:38:d2:78:df:14:ae:63:a5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=defc3feba729b8ad0b9793adb26a4fa328386e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:01:18:a4:e4:c6:7f:74:76:a8:14:17:59:
e2:60:d1:2b:5d:9e:de:cd:80:a1:22:0c:40:17:12:
45:3c:42:b3:bf:04:f9:ba:a8:6e:32:8b:6a:43:62:
26:dd:41:af:1d:d1:15:34:1b:2c:5f:70:e8:f0:e5:
e1:f3:14:e1:bf:ea:eb:4e:08:49:85:bb:4e:c6:6e:
5f:e3:73:4a:d0:1d:1b:d4:e1:22:9a:2f:de:28:e8:
7a:10:94:5b:b0:5a:37:03:a2:9c:31:59:2c:dc:16:
32:6b:03:20:84:cd:44:5e:fb:76:f3:bb:57:f7:ef:
60:30:7c:2e:82:a5:c5:f1:2d:a1:4b:bc:30:a6:a3:
99:fe:82:81:94:13:3a:94:ba:7d:00:95:b8:72:93:
50:3f:a3:16:27:ac:57:a1:04:21:bd:ff:03:8c:d1:
9e:fa:43:b4:93:89:ca:4c:62:79:6a:2f:b0:f5:e0:
f5:21:29:94:95:5c:25:b2:5c:ba:d7:6c:52:76:2c:
28:3e:3c:45:a7:90:03:32:de:77:8f:c0:8b:8f:4e:
05:2a:ad:ba:e6:d9:c2:bb:24:5b:34:6b:18:f5:f8:
d6:ff:03:51:4b:f7:d5:36:be:40:2f:a7:f4:c7:3c:
e4:43:55:64:85:ba:68:7a:fc:aa:f8:62:dc:ad:42:
f1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FC:3F:EB:A7:29:B8:AD:0B:97:93:AD:B2:6A:4F:A3:28:38:6E:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/3vw_66cpuK0Ll5OtsmpPoyg4bjY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.76.164.0/24
192.76.171.0/24
192.83.216.0/24
192.94.78.0/24
195.138.197.0/24
IPv6:
2a13:3700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204091
Signature Algorithm: sha256WithRSAEncryption
8a:51:37:88:57:c5:03:ad:bd:12:30:79:87:09:a5:5a:c7:f2:
52:2f:40:98:20:92:a7:d8:56:87:ad:13:0f:2b:24:50:a4:b2:
73:a3:3a:e2:08:50:12:d5:64:8b:36:72:58:78:51:bd:f3:25:
dd:b1:41:f5:33:33:8c:6e:c4:4b:d0:ba:ec:af:da:27:59:56:
16:5d:71:e4:09:11:a3:2b:8a:4b:ef:64:0b:48:7a:ce:61:0b:
00:a0:68:f3:12:96:66:98:6b:3a:91:48:2a:4e:52:aa:b8:e5:
34:60:24:bc:64:02:d1:fc:fd:5e:41:45:56:2e:4d:75:31:2b:
ca:44:1a:a8:ca:9b:1e:e2:27:06:7d:9e:23:47:ab:8d:ae:bf:
50:a8:90:f4:71:3b:ca:da:14:81:b0:ec:89:d5:59:a6:aa:c8:
90:88:10:01:5e:af:e3:80:c4:65:30:ed:c6:16:b5:13:3b:53:
71:94:13:35:c0:fa:b3:ca:b3:92:3a:c7:1c:b0:46:01:eb:4a:
b8:82:a9:ed:1d:90:b9:75:a4:9d:4a:45:6f:5c:99:15:61:fa:
b3:f1:12:01:24:0d:52:07:37:09:59:4f:ff:2e:aa:d8:fd:16:
3b:13:e5:ee:5f:3b:ac:5d:4c:2a:d8:f9:85:0c:3f:63:1f:4b:
0b:56:ac:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:28 2026 by rpki-client