Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer (raw, json)
Hash identifier: LucJNIR8dINv6PHkXHRaKrRhfzIcB3JXm9KhRPv6Dcc=
Subject key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5AE7501E000D74C7870BD8F3432DEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:18:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205914
IP: 185.72.16.0/22
IP: 2a03:3da0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:e7:50:1e:00:0d:74:c7:87:0b:d8:f3:43:2d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:ca:da:3a:88:f9:e9:00:da:ea:03:99:f3:
43:be:3b:77:4e:47:f6:b2:29:26:1a:ae:b1:0e:1a:
1c:28:cf:cc:9e:88:04:b3:c8:0d:c4:ae:a3:be:ba:
13:39:52:0b:14:94:c5:cd:d5:8a:89:48:10:d5:5f:
a2:c3:fb:bc:f3:29:30:42:77:64:9a:d3:3c:29:70:
99:7a:9e:60:67:6b:fd:c8:3e:98:aa:2a:18:d8:5f:
36:68:c5:b7:5f:98:cc:f6:d8:4c:6d:fa:9d:ab:d7:
bd:d9:ce:3a:8f:24:e9:7a:0a:ed:a0:7d:33:c2:19:
06:4f:80:c0:41:b5:b8:e5:ce:fc:1c:8e:51:ab:4c:
ae:50:16:8d:c6:92:5c:c4:99:89:7b:3a:42:91:f8:
b5:02:6d:01:e1:25:eb:d5:d2:44:4f:4a:63:aa:8e:
a0:6e:f1:98:de:91:36:e5:f0:e2:e2:0e:8f:43:db:
71:74:4e:55:94:9c:70:3d:08:e5:fd:ed:19:e5:38:
4f:ed:9a:39:20:49:3d:08:6a:60:d0:65:5d:cc:ee:
7a:34:1f:d9:be:b5:3a:6b:9a:cc:92:e9:fc:7b:b1:
6e:cd:55:5e:97:57:4b:0a:24:1b:a5:b3:b5:36:71:
39:2b:ae:3b:08:ab:a7:31:dc:82:ca:7e:fd:59:8c:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.16.0/22
IPv6:
2a03:3da0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205914
Signature Algorithm: sha256WithRSAEncryption
3e:46:aa:d1:9a:9b:6a:0b:d0:dc:17:48:82:11:24:7c:be:db:
78:8f:c2:e2:0a:d4:9e:34:87:4a:27:4c:d7:f0:9f:f3:9e:75:
c7:d5:3f:10:d6:23:62:49:a6:28:a3:ab:94:26:14:b4:59:e1:
b8:f4:87:2b:d3:4a:f9:56:03:28:09:78:99:e6:6a:04:d9:3f:
6b:5a:a4:aa:2a:c8:fc:89:e5:b3:c5:51:1d:28:05:81:b6:18:
77:6b:2a:29:92:d6:94:44:4a:5c:f0:6b:47:03:1a:e7:47:87:
44:32:1d:2d:0e:47:44:6b:a8:4c:e0:67:46:de:b1:73:88:6a:
72:33:42:45:76:1e:5d:bc:3c:b8:75:dd:86:1e:fb:d8:8a:95:
11:f6:ad:c1:fa:69:38:9c:e1:15:4c:ba:0c:d9:5a:93:a9:1f:
2c:c1:01:db:b9:97:46:6e:eb:c1:75:ec:ca:8d:d8:0e:fb:19:
f4:ae:87:3f:52:9c:12:4b:87:8a:69:06:d7:f9:bd:71:a9:60:
24:68:ae:5a:36:2e:4a:9c:47:c2:02:7c:a3:9b:a7:8e:2e:24:
7d:cc:5d:25:b1:99:01:05:48:18:cf:0d:a6:a9:57:5a:69:3c:
aa:57:21:ae:a4:ba:94:f1:71:ef:e2:25:37:72:2c:07:15:75:
71:fb:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:40:58 2026 by rpki-client