Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
File: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer (raw, json)
Hash identifier: VJHuik5PDbK2Nvh/TlXydG8weUVhsZwUES/xPfoUnyg=
Subject key identifier: DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C569C3435A22D47113438C5D9AC952612
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Feb 2026 10:46:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:67c:714::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:9c:34:35:a2:2d:47:11:34:38:c5:d9:ac:95:26:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 13 10:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5e:01:42:3c:28:69:5a:a7:36:13:3a:35:77:
ae:78:7c:7c:87:a1:e6:8d:a6:f4:3a:37:f5:ff:08:
70:2f:5c:1b:42:1e:71:d8:60:6a:14:4f:d1:7b:91:
ad:33:c5:65:6f:ba:4f:6d:e7:88:ab:38:d5:20:20:
13:7e:79:6e:ab:d1:51:27:21:fb:1c:c9:85:df:9f:
f0:99:80:3c:1e:17:22:68:f8:71:6b:0c:d2:4c:75:
9d:23:c7:8c:f3:96:e2:67:55:6c:57:3b:d8:67:de:
c8:f9:b6:9e:f6:5a:85:bd:83:94:6a:35:ea:1e:0d:
65:2f:05:29:41:90:7a:0d:21:5a:3a:4b:33:12:c0:
64:b4:07:a7:82:e6:23:b7:c8:3e:2f:f2:6c:4b:4a:
51:c4:af:32:f8:85:a8:b8:6f:eb:51:4b:4c:c8:6d:
1b:83:79:b1:4d:bc:ec:c9:9b:8b:1e:2d:26:47:99:
95:ee:5d:8f:85:07:1f:36:32:8b:c6:2b:36:92:53:
d7:fc:a0:d1:61:61:35:dc:d3:9d:92:a8:0d:de:71:
6a:a6:e7:e1:53:91:15:20:20:96:5a:73:1d:7a:15:
3c:7e:70:a5:a1:ad:b8:35:0b:36:14:6a:f1:33:a0:
73:bc:a9:ca:06:fe:24:b5:ab:fe:d3:8e:69:49:64:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:714::/48
Signature Algorithm: sha256WithRSAEncryption
a5:6f:f8:3b:ed:fe:cf:6e:db:a6:81:9d:ec:1e:80:a4:9a:e8:
c8:fd:66:f0:56:30:40:c6:2e:00:01:ed:b8:39:c5:55:88:6b:
28:53:70:3a:6d:18:a6:e7:ca:db:41:f0:2b:2f:83:64:e4:94:
99:3f:c1:49:ce:8a:1b:49:74:48:53:eb:27:fc:1b:a8:04:da:
02:9d:58:15:f8:05:61:f5:64:51:3d:f4:aa:b5:8f:99:55:dc:
5c:76:1d:b8:87:6c:ae:6d:3d:4a:bc:44:09:8a:59:cb:41:6f:
65:3d:f8:b7:f0:4f:e7:de:6c:9e:e8:a1:27:06:80:55:22:b3:
58:8b:51:32:7f:33:74:62:43:88:14:5f:08:24:76:01:c9:ba:
26:7c:4a:e8:57:ba:eb:bb:8d:b1:09:4e:2e:f3:7c:0d:8f:74:
6b:49:42:10:46:cb:e6:ea:64:1a:6f:a7:6c:c2:66:40:40:5d:
b7:7a:2d:27:25:e6:32:8a:ae:60:cc:d5:61:2e:15:ee:eb:2e:
6b:2f:17:f4:2f:63:b0:e3:16:82:92:2f:7c:10:ae:ef:fe:7e:
ac:65:cc:9a:a4:0f:4b:a6:ce:6c:60:7c:f5:61:60:56:21:0b:
f8:2c:3a:d0:a0:35:9a:5e:ef:5f:a5:c0:1d:ca:de:f7:b5:06:
e8:f6:50:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:26:20 2026 by rpki-client