Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.cer (raw, json)
Hash identifier: DTvlP1Tbwab00D0OF4lN3CaZNI5H1Ek3x2Ov7Ax+hdg=
Subject key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ECAAFA53E05BD635DEC8B6FC1B8E81
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216031
IP: 194.49.111.0/24
IP: 194.49.115.0 -- 194.49.116.255
IP: 194.50.3.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:aa:fa:53:e0:5b:d6:35:de:c8:b6:fc:1b:8e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:0d:85:fc:51:b1:17:df:8b:cd:02:c8:d3:
5f:45:e3:f4:26:5a:93:2d:b5:7a:a2:32:da:82:05:
fb:8a:ab:c4:5b:9e:0a:94:51:96:6c:ca:d6:0d:96:
fb:a0:8a:a4:1a:26:af:ee:a6:34:32:68:0c:3c:e5:
dc:e4:66:94:7c:6b:cb:99:dd:b8:bf:35:e2:03:ce:
f3:6e:91:08:a4:6e:50:c5:38:e7:8b:dc:ca:a6:cd:
ed:fd:80:4b:3c:58:67:dc:ea:8a:fc:ad:a9:1f:5a:
47:7a:e3:c5:e2:5a:4d:fd:4b:39:4e:67:4e:57:8e:
fb:d1:0e:17:28:be:17:a3:fa:bb:4d:e0:8c:ee:55:
a5:c4:08:b8:2f:0c:b0:16:a8:76:94:d4:27:c0:a5:
1a:3d:11:12:4c:19:21:7d:da:61:54:b3:28:06:78:
4f:de:d9:24:ca:0f:87:f3:97:6d:43:5b:dc:64:5f:
28:48:2e:fc:c9:63:af:40:12:57:12:f6:f5:e2:2c:
cb:4f:cf:75:7a:c4:30:23:eb:0d:94:9e:2e:19:1c:
46:4c:78:76:8e:87:f1:86:81:dd:db:6f:69:6b:5d:
78:e3:e9:7a:a5:dd:b8:7d:b5:18:cc:d2:f9:3d:a4:
cd:e4:d8:01:b7:6f:52:81:82:aa:fa:b8:89:60:2d:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.111.0/24
194.49.115.0-194.49.116.255
194.50.3.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216031
Signature Algorithm: sha256WithRSAEncryption
13:52:79:69:6b:76:d6:cd:ee:85:2e:97:6e:2f:23:00:7a:ca:
05:ac:23:77:e8:42:52:61:bc:48:92:82:c8:e8:c3:d1:df:e8:
86:0e:78:6c:ef:91:15:94:35:6b:a3:fc:99:93:49:89:f8:ae:
75:f9:2a:ea:0d:c1:4b:5e:0e:5b:8a:d9:54:6a:ed:a0:1f:6a:
5b:ee:58:5f:aa:fe:83:62:5f:c7:52:d8:7d:72:99:da:a4:79:
a0:d9:4e:26:0f:b1:81:88:8f:e7:7f:f4:2b:78:13:1e:a8:46:
b4:2d:ad:63:94:aa:a1:b3:e7:5c:e2:08:d0:62:d1:10:30:8a:
75:a3:45:b0:ab:d9:0b:32:6e:3d:5a:f7:3e:84:5d:96:30:bf:
29:59:80:14:a6:28:0b:7f:9b:37:0e:84:3e:5e:ac:d7:b0:09:
13:a8:e6:5e:bd:89:e1:40:e7:bc:60:c4:f3:f9:67:a3:df:f5:
ee:63:78:ad:08:d8:60:c2:bc:92:e9:9b:30:76:04:9d:c3:19:
d8:b9:3e:2c:45:3f:e4:09:cf:7e:69:cb:97:b0:0d:06:d0:a8:
95:b0:48:07:38:e7:82:d5:4f:e0:89:d9:6b:9d:a8:5d:48:68:
7a:04:ea:28:3a:1b:19:62:3c:91:48:72:0d:1f:a4:5b:08:ec:
80:fb:ae:99
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAZt57Kr6U+Bb1jXeyLb8G46BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2NhNTIyMTk2ZmQwOWJhZTczOWI2YmQyMzIyZTVlYjkwZGE0ZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywcNhfxRsRffi80CyNNfReP0JlqT
LbV6ojLaggX7iqvEW54KlFGWbMrWDZb7oIqkGiav7qY0MmgMPOXc5GaUfGvLmd24
vzXiA87zbpEIpG5QxTjni9zKps3t/YBLPFhn3OqK/K2pH1pHeuPF4lpN/Us5TmdO
V4770Q4XKL4Xo/q7TeCM7lWlxAi4LwywFqh2lNQnwKUaPRESTBkhfdphVLMoBnhP
3tkkyg+H85dtQ1vcZF8oSC78yWOvQBJXEvb14izLT891esQwI+sNlJ4uGRxGTHh2
jofxhoHd229pa1144+l6pd24fbUYzNL5PaTN5NgBt29SgYKq+riJYC3RkQIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFNzKUiGW/Qm65zm2vSMi5euQ2k+5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzY0OWFm
MC0xMzJjLTQ1MzMtOWZiYy0zYjI1MGFlMTg5MzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvNjQ5YWYw
LTEzMmMtNDUzMy05ZmJjLTNiMjUwYWUxODkzNi8xLzNNcFNJWmI5Q2Jybk9iYTlJ
eUxsNjVEYVQ3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUF
BwEHAQH/BCQwIjAgBAIAATAaAwQAwjFvMAwDBADCMXMDBADCMXQDBADCMgMwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDA0vfMA0GCSqGSIb3DQEBCwUAA4IBAQATUnlp
a3bWze6FLpduLyMAesoFrCN36EJSYbxIkoLI6MPR3+iGDnhs75EVlDVro/yZk0mJ
+K51+SrqDcFLXg5bitlUau2gH2pb7lhfqv6DYl/HUth9cpnapHmg2U4mD7GBiI/n
f/QreBMeqEa0La1jlKqhs+dc4gjQYtEQMIp1o0Wwq9kLMm49Wvc+hF2WML8pWYAU
pigLf5s3DoQ+XqzXsAkTqOZevYnhQOe8YMTz+Wej3/XuY3itCNhgwryS6ZswdgSd
wxnYuT4sRT/kCc9+acuXsA0G0KiVsEgHOOeC1U/gidlrnahdSGh6BOooOhsZYjyR
SHINH6RbCOyA+66Z
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:51:29 2026 by rpki-client