Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
File: P2TX2Py26n88U-wAJA2Owcl3Zqc.cer (raw, json)
Hash identifier: k3z9nhv8gwtBbdvvVvHRzv3ofq4ARdwjMya1Fstdpqg=
Subject key identifier: 3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C94937DFA43DDB0863F23932896C3DE88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Feb 2026 11:33:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212080
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:93:7d:fa:43:dd:b0:86:3f:23:93:28:96:c3:de:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 25 11:33:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f64d7d8fcb6ea7f3c53ec00240d8ec1c97766a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:8c:d6:fd:c9:87:b8:43:99:89:af:f6:69:
3a:ae:11:24:45:49:d9:a0:48:37:a9:ba:99:72:6a:
65:d3:12:51:ad:10:ca:20:d1:65:14:12:23:de:7f:
5a:33:ee:65:a7:02:44:b4:a5:9f:27:76:f5:a2:df:
1c:cb:ff:6b:54:bc:60:ff:bd:a1:2a:c1:d4:ee:44:
27:20:54:1d:90:a3:fc:5d:7c:e2:eb:aa:c3:a3:39:
c9:a3:e9:0c:9c:26:35:b0:c0:0f:aa:6d:68:2c:a6:
3e:80:ea:be:07:1e:eb:1b:cb:0a:60:b3:47:ad:f6:
71:bc:6f:66:29:46:a6:29:ba:c1:2d:22:d3:92:0d:
3d:2e:8f:25:7e:48:f9:14:df:00:b0:42:df:ba:9d:
0a:c6:23:4b:6b:b3:4d:46:a2:5b:7d:a9:55:db:92:
b6:55:9c:5b:2d:52:54:6f:5c:67:4f:c3:40:40:d2:
00:90:e0:9f:d2:f7:13:0a:e1:dd:40:d7:35:11:e1:
38:55:a0:7d:8a:7a:00:26:8e:23:71:2a:89:ab:46:
b7:40:62:46:13:51:71:4a:5e:50:e3:ac:78:5a:97:
76:3d:2d:ba:2b:c3:2a:56:18:60:44:9b:d9:13:5b:
d3:5f:c2:b0:0b:49:24:5a:64:86:d2:5b:7e:18:03:
96:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212080
Signature Algorithm: sha256WithRSAEncryption
8a:86:6c:d8:a3:0b:50:b8:82:12:e8:7f:1a:83:88:f7:16:63:
22:04:b3:f5:01:44:69:ca:57:57:9e:38:8e:26:f5:37:5a:9a:
6f:4c:f4:03:7f:92:d6:e2:a2:25:ff:6e:b7:03:b4:a3:15:d0:
52:2e:d5:1b:f9:a0:eb:47:22:13:2b:82:67:ea:4d:5d:f5:b0:
b2:5e:f7:51:41:13:87:e0:73:84:f6:9f:54:9d:83:b7:ed:0c:
63:5b:58:51:e2:ce:90:2a:eb:78:fa:49:44:09:03:e1:6c:f1:
59:2d:e4:52:74:62:9b:0a:7c:ba:bb:fa:96:fe:81:56:07:f2:
6d:53:97:5f:1d:c8:da:56:f0:4f:0d:28:8b:87:6b:94:35:a2:
7c:7c:60:bf:3c:28:0a:ff:5e:6a:78:30:f1:37:d6:33:cd:20:
92:66:dd:85:c0:06:c7:f5:9f:7d:aa:05:4d:69:f8:83:38:4c:
2b:1b:0b:80:9b:31:30:eb:83:90:20:4e:83:b2:3d:b6:c0:d6:
bc:c9:b1:ae:d7:b1:c0:07:78:b6:f6:7b:15:66:37:b1:e8:52:
11:df:af:a1:b3:bc:b0:5f:12:a9:d2:e8:3a:52:ed:85:ec:85:
bb:64:c6:7e:64:57:4e:3f:ea:fc:a5:aa:5d:7d:d8:38:36:e4:
07:54:8d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:43 2026 by rpki-client