Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
File: K3BccjJSLxtRhLGpI61d9azKgpY.cer (raw, json)
Hash identifier: n5X+FDbrDaIbxxGKGM4whsiydZhH61z8rkA/WJ4rqRk=
Subject key identifier: 2B:70:5C:72:32:52:2F:1B:51:84:B1:A9:23:AD:5D:F5:AC:CA:82:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F94470AF96732461999D7CB3EF967FAB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 24 Jul 2026 13:18:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198389
IP: 167.104.112.0/21
IP: 176.103.168.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:47:0a:f9:67:32:46:19:99:d7:cb:3e:f9:67:fa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 24 13:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b705c7232522f1b5184b1a923ad5df5acca8296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:f9:37:da:13:28:f8:b3:2a:e5:d6:ed:01:
b4:c0:df:29:14:fc:02:df:55:14:f5:22:74:6a:51:
96:d4:12:86:b4:e3:b0:b3:40:31:b8:d0:9c:f4:f6:
ec:df:2e:26:df:33:9f:7a:24:b6:39:9f:07:78:ac:
e8:c8:4a:5b:cc:b1:e9:d4:84:c0:9c:0d:e5:69:a8:
02:5a:35:16:88:d0:cf:92:70:da:8f:db:9b:f0:f0:
e4:95:f7:58:5b:73:b9:79:eb:33:06:18:3a:03:94:
51:5f:4d:77:27:e6:23:1a:12:6d:79:bb:eb:aa:23:
c1:eb:6a:1f:88:74:3b:af:db:8e:3a:7f:48:d1:49:
aa:c9:7c:69:c7:f7:5c:75:b0:ef:13:b5:79:d6:ab:
83:d2:12:f4:cb:e2:96:f4:db:ef:33:ff:77:59:dc:
86:81:3c:6c:f7:41:5e:27:9e:e0:47:cd:ed:e6:e2:
ed:ad:29:0f:0b:2f:82:28:32:64:6d:17:65:48:d0:
d6:54:03:45:89:66:74:61:6f:99:64:f6:c2:ac:ac:
8c:47:af:b3:56:b7:4e:5f:ea:0e:d8:7d:05:89:7d:
6b:ae:c8:88:ce:01:46:38:c4:01:d8:62:8f:8e:41:
a4:51:25:e0:b5:14:f7:35:d9:66:e0:f6:65:7c:9d:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:70:5C:72:32:52:2F:1B:51:84:B1:A9:23:AD:5D:F5:AC:CA:82:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.104.112.0/21
176.103.168.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198389
Signature Algorithm: sha256WithRSAEncryption
99:0b:67:63:28:be:6a:81:81:01:71:9d:cb:ec:ac:5f:37:0e:
d1:79:28:6c:99:88:ea:ff:9c:cc:fa:c4:92:94:09:56:39:13:
c7:e0:67:2d:85:75:7d:2b:ab:47:8b:92:2d:f1:51:76:81:bd:
2b:e5:4a:5c:0a:8f:af:b8:0e:3c:f2:79:22:56:7b:95:4e:dd:
57:c7:6f:ad:53:6b:dc:ea:57:80:46:19:ac:30:2e:e0:89:3c:
42:8b:02:80:58:b9:c4:c9:f6:86:2a:57:2d:ba:04:85:37:a1:
98:51:ec:89:59:1f:86:2e:56:18:fd:b6:56:00:a8:7b:ea:de:
64:1e:8c:5c:68:5f:87:ea:40:d3:a2:27:07:65:7e:49:c0:56:
d1:96:75:04:fd:2b:94:be:1d:7d:90:ed:e4:0a:c0:28:10:00:
15:5f:79:ac:d1:d5:8e:4f:86:f9:3a:f2:19:26:d7:ce:a1:42:
69:dd:7d:0f:a2:ba:15:bf:81:c2:ab:e8:a4:d2:00:d2:f8:dc:
a1:c5:0e:d6:eb:65:6f:0e:00:81:f7:78:f2:a7:85:46:6e:a7:
17:90:d6:12:ae:77:92:bd:65:a8:ee:c2:4d:34:cd:61:ef:36:
f6:aa:fd:8d:1a:fb:3b:71:f8:89:eb:d3:cc:3b:2b:b8:a9:79:
9c:ed:6f:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:49:45 2026 by rpki-client