Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
File: 3virX3TckOn_uo1CmI7Vp3SMHQU.cer (raw, json)
Hash identifier: 2hwFs290Y32L9NQ+hxA3yXEYFHqMe4z4yOvkrm/3QMw=
Subject key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77594398228F89850C1F1295153BCAD3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:18:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210041
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:43:98:22:8f:89:85:0c:1f:12:95:15:3b:ca:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:54:f2:72:44:e4:a4:56:79:4a:31:2e:86:
f8:0a:30:db:8a:b9:63:2e:f2:be:92:56:0a:65:52:
a4:5c:6f:da:04:da:f3:4d:62:a1:70:c3:cd:50:32:
d1:0a:a0:d2:bd:8a:2f:bb:08:2f:36:0d:48:93:f6:
3d:f9:71:7b:6a:21:e4:72:78:29:f2:eb:5d:34:96:
cd:f1:eb:ba:41:21:80:5a:c6:db:e1:20:82:2b:04:
82:9f:e4:be:9e:e8:c2:bc:44:1e:03:9a:d6:27:2c:
8b:e8:2e:45:d5:a0:28:15:c0:e7:45:7d:3d:01:ad:
cb:d9:c4:7c:38:1e:66:2d:67:74:26:8d:98:48:0f:
90:14:f7:a8:3c:d0:cd:cd:5c:49:c8:d8:34:4c:c6:
70:fb:93:ca:7d:fb:2f:c5:28:f1:cc:e6:ca:bc:09:
31:3e:f7:8d:33:5f:02:1a:ba:e0:87:42:56:8e:e2:
cc:93:df:91:39:be:31:7b:6b:e7:9b:f7:c4:45:ac:
26:a2:c5:89:f6:05:f4:a0:73:7e:9e:11:b0:72:33:
33:61:1c:1c:f8:95:2b:1d:8e:da:e9:86:7c:14:65:
c2:0e:68:70:c0:48:15:dd:46:b5:56:d1:fc:a8:f0:
cc:54:01:f3:96:e9:87:86:de:5b:ab:26:c9:ac:aa:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210041
Signature Algorithm: sha256WithRSAEncryption
84:3e:52:68:9e:f2:47:9a:16:54:6a:12:61:16:97:91:b1:41:
2c:14:20:af:9b:d9:1e:b5:45:ae:2d:88:e2:6a:b0:f1:9c:92:
9b:e7:a2:1f:de:cf:fa:30:c7:49:d7:4c:73:9e:f7:f4:87:e8:
6b:04:39:5f:a4:b4:aa:ec:10:0f:95:35:ce:80:4a:6f:91:e2:
4f:00:30:1e:6a:85:d5:0e:fd:ab:4d:c9:63:46:b1:d1:e8:f3:
39:6e:82:34:0a:03:4f:23:5f:8f:b7:34:82:dd:8b:f5:c3:42:
6e:b5:fb:f1:cc:2c:15:34:27:c4:e7:ec:e5:c0:0f:c0:3d:59:
17:92:f4:a5:1f:a7:b2:f7:a2:a8:7f:5f:64:9a:d9:7d:e7:f9:
e9:09:22:4e:eb:ed:a3:79:7a:37:56:12:cb:3f:dc:d9:45:27:
12:a6:d2:d4:de:34:7c:a2:61:c7:22:51:fc:75:0f:22:4e:97:
cf:e8:19:e7:05:ed:57:d1:8c:ec:d9:41:d3:fc:20:92:0c:64:
1d:68:b2:6c:d7:f8:a8:32:eb:c2:24:31:31:7d:3d:6e:d7:d2:
17:e0:5c:94:0b:1a:9a:2d:2d:d8:85:56:1d:fa:66:3b:6c:a3:
78:c0:66:ac:af:60:5d:ec:9d:31:d2:78:93:18:d4:4b:9c:fe:
d4:ce:1b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:55:09 2026 by rpki-client