Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ma-3caS5EQsRSqgHr7cIaxplN54.cer
File: Ma-3caS5EQsRSqgHr7cIaxplN54.cer (raw, json)
Hash identifier: ORI7CQjLMkiI5D3bD2+QGcsxwqGaE6fJCyab/4/FI/8=
Subject key identifier: 31:AF:B7:71:A4:B9:11:0B:11:4A:A8:07:AF:B7:08:6B:1A:65:37:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C809153FE0EB774181F88A7F01DDBE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/Ma-3caS5EQsRSqgHr7cIaxplN54.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:19:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215066
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:91:53:fe:0e:b7:74:18:1f:88:a7:f0:1d:db:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:19:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31afb771a4b9110b114aa807afb7086b1a65379e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:61:0a:f8:9c:d8:00:b4:7f:9f:95:ee:71:
7d:fd:17:9c:dd:7e:cb:82:6c:d7:8d:be:e1:dd:f0:
0c:60:92:bc:11:a6:25:ec:a1:19:83:53:65:ec:75:
3a:91:d7:5b:0b:d3:42:cb:9f:9d:a5:e9:69:05:3c:
0e:44:0d:7a:f1:28:50:fd:af:a5:1a:c2:39:11:e7:
b4:b1:3a:89:8a:56:70:a3:3c:f7:82:bf:fb:28:74:
fb:46:c5:78:39:96:6c:f8:2e:61:2a:62:d8:b2:43:
d8:7c:d2:7a:96:95:a0:07:06:8c:08:dc:14:be:23:
51:0e:be:46:fb:8d:07:78:c8:69:eb:7e:24:a4:ab:
63:58:0d:66:dd:d7:d9:3c:99:2d:88:78:f9:38:fb:
40:b0:c7:da:f0:dc:66:0c:9f:48:17:8f:72:9d:e8:
55:07:f8:63:10:fb:90:17:e2:f1:5e:a2:5e:82:47:
e2:e9:56:4c:5d:6a:82:79:aa:2d:ea:17:68:a2:fb:
5b:df:83:ce:e3:4a:4d:c4:0f:4a:70:4f:87:3e:eb:
03:76:76:97:44:6d:ee:f4:c9:8a:60:77:7f:cf:57:
1c:e3:70:0d:7f:11:7e:d4:fe:d1:18:5c:4d:cd:ae:
6f:88:c9:9d:5f:8b:ca:73:2f:16:7c:5d:11:55:85:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AF:B7:71:A4:B9:11:0B:11:4A:A8:07:AF:B7:08:6B:1A:65:37:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/Ma-3caS5EQsRSqgHr7cIaxplN54.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215066
Signature Algorithm: sha256WithRSAEncryption
7b:7e:e9:7a:65:87:54:00:de:e8:c6:8a:a4:f0:d9:bc:b0:02:
c3:48:40:d5:1d:00:82:dd:66:89:5e:74:6d:06:d3:5c:18:7b:
71:11:aa:69:74:4f:c3:a7:33:33:a5:af:0b:fc:de:f2:0a:c1:
26:1f:48:fd:e0:53:25:a1:60:03:0c:12:f3:65:6a:28:a5:70:
60:e7:a3:a1:a9:45:a5:39:69:f0:c5:82:5e:a5:ee:02:c2:2a:
c8:af:87:36:01:31:82:a6:d5:d3:41:23:3c:db:a8:c1:47:de:
44:a6:1a:00:66:d0:28:34:99:b2:41:95:40:59:c7:dd:58:1e:
7c:5c:df:32:9c:eb:6b:8e:f0:94:f3:59:c0:b7:63:7f:18:03:
ff:a2:a4:b1:a3:ea:12:73:07:26:3d:26:49:cb:56:79:79:f7:
ed:bb:61:2c:90:94:61:dc:b1:d2:4d:2b:42:ac:19:9e:2f:df:
7f:95:47:13:6b:cf:ab:b6:f5:81:f9:0a:11:61:2f:d2:6b:18:
cb:68:ce:57:2c:3d:99:df:6c:24:45:c0:c5:7d:64:68:93:5e:
f4:a5:42:62:14:b8:c2:2a:0e:3f:68:24:eb:c7:94:d5:07:09:
54:b7:6b:18:56:3e:01:07:99:3a:dc:86:20:aa:70:37:6d:6e:
1c:81:01:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:25:38 2026 by rpki-client