Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.cer (raw, json)
Hash identifier: PoUO84m9quKbZ2yzyo7Wqlvo01G178wlFsNpsKwu+gc=
Subject key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA7373B5A535899FCA08011310CD7E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:20:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215411
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:37:3b:5a:53:58:99:fc:a0:80:11:31:0c:d7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:eb:44:b0:1e:2b:fe:bf:9d:97:1b:e8:8c:
26:c1:00:6f:42:1f:a3:68:27:dc:38:38:0e:23:a0:
ca:81:ef:f4:91:33:ec:3c:0b:f1:7d:ca:82:f3:f8:
44:38:7e:ea:a1:13:67:c2:70:69:0c:e5:30:6b:a1:
db:f2:bf:0e:f6:65:00:aa:d3:d0:84:94:d1:9d:b9:
77:26:68:ff:aa:47:5c:07:93:6c:51:96:97:3b:28:
7b:c0:e9:63:e9:46:59:b2:ff:5e:b2:48:e6:51:a6:
69:ec:5e:9d:17:3f:f0:60:ea:5d:75:58:c3:c5:1e:
2c:01:c1:3b:4a:b7:cd:57:a1:76:47:e5:7a:be:48:
c4:67:e5:43:00:20:d1:a6:f0:f8:bf:4b:aa:09:11:
0b:6e:08:86:b6:06:5b:af:77:0e:81:f2:aa:cd:25:
7c:d3:b4:1d:18:2a:f8:16:5b:de:80:2a:59:0b:e7:
ed:fc:09:4e:9b:dd:0d:f7:72:3c:b4:45:88:18:e5:
e9:04:91:2a:32:45:2d:71:4b:ab:47:36:d2:ba:e9:
46:83:e4:7a:4b:65:09:fd:ba:c7:be:ba:d9:26:c0:
d4:88:9b:69:9a:65:15:0d:af:d0:7c:c6:3f:da:38:
bc:c0:e4:51:bb:44:60:fd:35:d6:5d:0f:ab:b9:c9:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215411
Signature Algorithm: sha256WithRSAEncryption
83:11:24:d8:12:23:d7:59:8e:6f:8a:67:3c:9d:02:0d:eb:8a:
6c:53:a4:cf:b2:83:50:41:54:04:3c:24:06:a6:1b:fe:81:07:
aa:6e:fe:ba:8c:44:fb:87:6f:8d:5c:d2:82:88:72:5e:9e:39:
a7:54:60:12:ab:e9:35:97:4c:0e:b8:be:bd:65:84:1e:71:e5:
8d:9f:24:96:aa:7f:67:5f:51:c0:54:28:e2:11:66:99:43:50:
27:c1:49:f7:d5:c6:2c:29:e8:74:2c:20:cd:8a:2e:25:85:6f:
fb:3c:51:ed:bc:42:6a:1b:5f:a8:12:a8:23:89:96:1f:af:c0:
79:3d:84:a3:1a:f5:f0:f3:6e:c3:16:fa:8d:51:cc:ca:56:21:
bb:cc:b5:5c:80:9a:9f:51:8f:f2:4a:ff:ec:23:18:9b:c8:ef:
e0:e4:da:ec:bc:1e:85:99:3a:07:8a:6d:67:88:ef:d7:57:8a:
99:77:0b:ec:c4:16:76:6e:20:48:8b:38:4c:16:60:ce:c5:7c:
2e:64:97:5b:f3:c7:1a:bb:b4:50:6f:f6:e5:3f:d7:27:ee:b6:
8e:23:21:6c:e1:7a:7f:dd:a1:df:ba:2d:82:f4:13:6d:1b:89:
fb:62:2c:26:3d:53:04:27:58:61:92:77:fc:1a:f6:6b:22:26:
a1:3d:39:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:03:07 2026 by rpki-client