Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
File: x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer (raw, json)
Hash identifier: PzujLhcbdHyGK7efmM9zPGFqwEc5pRZpgs2khC1uYcE=
Subject key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C7A90A5C029D18395965075088AFAE12F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 20 Feb 2026 10:20:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 31.22.104.0/21
IP: 43.230.84.0/22
IP: 103.49.128.0/22
IP: 194.54.68.0/24
IP: 2a14:9900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:90:a5:c0:29:d1:83:95:96:50:75:08:8a:fa:e1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 20 10:20:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:9f:1c:34:8e:2a:27:fb:c7:70:ba:b0:0d:
0a:26:4d:d0:3e:48:fa:44:4e:70:cf:73:55:05:6d:
d4:61:cb:46:32:7e:95:eb:e6:fb:4f:93:79:d8:c3:
75:86:b5:6c:9c:67:fa:dd:38:c4:95:84:76:8f:49:
73:de:40:4c:d5:32:ff:dc:f5:40:c5:65:a6:7b:1b:
e9:99:e4:c1:95:d9:72:8c:80:fd:4b:38:95:c9:c3:
8a:c5:b9:78:7b:32:72:a0:b2:c0:07:dd:9a:97:cc:
96:41:a5:73:4c:78:20:3f:52:57:97:76:f0:e7:0f:
99:e6:ac:93:e5:67:cb:95:f1:60:8d:e2:af:19:df:
ba:d1:6b:57:c6:d6:67:81:80:66:43:9f:b6:b6:c1:
c2:e0:bd:62:90:e1:0b:a5:e8:c8:e9:96:3f:1c:e0:
9a:3d:0e:7f:9c:97:17:e2:d4:8c:de:80:e0:0a:8a:
3d:2b:3f:e4:16:77:e5:cb:bf:c2:17:0d:7b:ab:d7:
76:94:2b:9f:df:27:42:fa:b7:33:9b:8f:54:b8:40:
03:2b:2d:fc:dd:d4:65:ef:84:44:6f:ac:7f:c3:d2:
9e:a9:e8:39:38:f7:7f:c3:a2:44:53:a0:f4:7f:2c:
3e:6e:d8:ee:e9:2d:6a:32:a8:a0:b6:1d:e9:9f:48:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.104.0/21
43.230.84.0/22
103.49.128.0/22
194.54.68.0/24
IPv6:
2a14:9900::/29
Signature Algorithm: sha256WithRSAEncryption
1d:75:cc:34:b7:d8:64:5b:5a:2d:6f:73:c1:d1:20:32:64:1b:
69:16:3c:c8:56:38:61:1b:b3:d4:63:f1:09:1f:29:d9:e8:29:
d2:b8:24:66:89:c3:5f:cf:28:08:61:14:be:39:99:5f:fb:f7:
17:38:03:3b:2d:ef:57:dc:07:de:8d:9d:24:34:75:22:d4:7c:
5a:16:d8:bf:9d:7a:fe:a9:60:d2:eb:cb:e9:e3:25:df:85:b1:
b3:f5:67:ea:1f:f3:83:21:88:b6:87:ed:54:f2:f9:d4:6b:ec:
39:9f:e2:52:40:11:03:b0:f7:97:60:92:3b:6b:2b:58:2f:27:
2f:f6:3e:13:ad:95:dd:e2:b7:e7:79:e4:81:6b:16:ec:57:a9:
2e:d9:f5:83:f8:5a:92:16:9c:00:ed:82:6a:3e:62:bd:2a:ab:
15:63:d7:f3:ad:77:a7:14:1e:69:6a:23:2a:aa:9f:0b:e4:a5:
45:06:04:1f:a9:a6:74:7b:3c:42:46:b7:f5:66:bc:2e:b7:5b:
2c:c8:83:8e:12:1c:64:ba:8a:44:c9:e0:e5:e8:09:38:be:12:
3e:5f:b7:11:4f:25:6f:e7:f2:53:7f:4d:ed:10:45:6c:43:fa:
72:c9:81:f2:21:2d:cc:5a:e2:f5:a9:fb:eb:ee:9c:31:46:42:
8c:0b:0f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:24 2026 by rpki-client