
Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer
File: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer (raw, json)
Hash identifier: kloc/nrWe9/wcvk+eeSX6JoMmmyXDmR2yLVQQl3Fsok=
Subject key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5A56845F24C52424D3DF437A12400933AB82B78C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 21 Feb 2026 22:58:10 +0000
Certificate not after: Sat 20 Feb 2027 23:03:10 +0000
Subordinate resources: IP: 103.139.88.0/24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 21:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:56:84:5f:24:c5:24:24:d3:df:43:7a:12:40:09:33:ab:82:b7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Feb 21 22:58:10 2026 GMT
Not After : Feb 20 23:03:10 2027 GMT
Subject: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:86:5e:b5:ce:56:cc:9f:68:30:d3:47:c5:
bf:78:bf:c8:8b:e9:c3:da:4b:68:cd:dc:76:a3:f9:
b5:64:df:a8:01:d6:a5:16:e6:f2:28:c9:71:7b:ef:
af:5c:ae:32:f9:db:3e:1f:2a:53:8e:aa:dc:b1:b6:
2c:88:22:ba:5a:f8:00:93:7b:1c:9d:85:a1:04:a4:
7e:b8:4d:b2:93:35:6a:a2:dc:37:35:69:dc:f5:20:
87:44:c4:0a:ed:f0:94:4f:61:aa:73:d5:d5:d2:7f:
15:8f:81:93:d9:06:f4:63:9f:bc:23:c5:09:c3:df:
4b:16:12:c6:2c:ba:f3:f1:cd:78:d2:3a:e3:9b:56:
b7:f9:45:4b:72:93:e0:36:2f:f1:8a:ca:cc:a9:3c:
84:3d:8c:a4:3f:42:8b:7b:e8:ae:2c:82:8b:9e:ae:
5b:39:41:a6:fa:d3:38:01:13:55:be:7e:36:a3:74:
d2:ea:3a:9a:df:46:da:f9:13:b1:27:eb:1e:66:f6:
df:37:12:60:f0:2e:69:f8:46:89:68:0d:e2:c0:14:
b6:55:fa:8d:1a:dd:67:56:51:1a:2e:a5:c4:d5:bf:
ee:56:04:80:9f:58:0a:46:2f:6b:0a:8a:43:a1:7a:
ca:e9:bd:66:f2:a4:0b:98:7a:e9:f2:56:06:03:f9:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.139.88.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:4b:a7:be:0f:55:00:69:b3:04:78:de:98:2a:ee:c2:32:19:
76:26:79:1f:08:51:45:b3:95:27:16:c8:d6:31:7a:d1:4a:54:
17:38:0a:ac:f3:24:f4:4b:7a:c0:d1:cc:06:37:34:f1:83:9b:
5b:4e:8f:a6:5a:2c:eb:c7:41:53:be:99:8f:9c:03:34:3f:61:
30:30:d0:0b:9f:33:14:32:46:30:b7:e1:cd:0a:6d:a3:85:62:
b1:7e:5f:81:ef:67:c8:00:36:e8:0e:d2:72:2a:0a:4a:fa:f5:
41:84:16:f3:93:dd:2f:3b:00:67:03:bf:ab:17:c1:e5:d8:58:
a6:d9:67:7c:2a:2a:d7:e4:28:7b:e6:53:e0:4e:0a:48:e9:54:
d5:70:dd:88:e5:a1:22:78:b9:88:3b:3e:9f:b2:3a:4e:aa:e8:
1c:c6:6e:5d:57:6d:9c:d4:be:5d:3b:dd:15:0c:74:e5:b0:4b:
aa:d4:ac:51:53:76:eb:31:41:f6:77:e9:4d:5a:b7:2c:00:74:
b5:51:0c:12:64:a9:07:c5:14:96:38:59:55:b0:f5:9f:82:e8:
23:1d:8a:12:f2:b0:3c:ed:37:76:2d:6b:c5:f6:1e:31:6c:54:
71:1e:82:58:c1:dd:57:c7:b1:f7:f2:cd:37:38:0f:7e:01:6a:
bf:bd:5d:dc
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUWlaEXyTFJCTT30N6EkAJM6uCt4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjAyMjEyMjU4MTBaFw0yNzAyMjAyMzAzMTBaMDMxMTAvBgNV
BAMTKEMzRjAyQzJBRjM4MjM3N0FEQTlCNTFGMkVBMzcwRTc0NTQxMkQxREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMYZetc5WzJ9oMNNHxb94v8iL
6cPaS2jN3Haj+bVk36gB1qUW5vIoyXF7769crjL52z4fKlOOqtyxtiyIIrpa+ACT
exydhaEEpH64TbKTNWqi3Dc1adz1IIdExArt8JRPYapz1dXSfxWPgZPZBvRjn7wj
xQnD30sWEsYsuvPxzXjSOuObVrf5RUtyk+A2L/GKysypPIQ9jKQ/Qot76K4sgoue
rls5Qab60zgBE1W+fjajdNLqOprfRtr5E7En6x5m9t83EmDwLmn4RoloDeLAFLZV
+o0a3WdWURoupcTVv+5WBICfWApGL2sKikOhesrpvWbypAuYeunyVgYD+TxpAgMB
AAGjggLRMIICzTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTD8Cwq84I3etqb
UfLqNw50VBLR3zAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv
NmxRWGMuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMy
My1hOTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8wgYsGCCsGAQUFBzAKhn9y
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxMDk4
YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8xL0MzRjAyQzJBRjM4MjM3
N0FEQTlCNTFGMkVBMzcwRTc0NTQxMkQxREYubWZ0MDwGCCsGAQUFBzANhjBodHRw
czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGeLWDANBgkqhkiG9w0BAQsFAAOCAQEAn0unvg9VAGmzBHjemCruwjIZdiZ5
HwhRRbOVJxbI1jF60UpUFzgKrPMk9Et6wNHMBjc08YObW06Pplos68dBU76Zj5wD
ND9hMDDQC58zFDJGMLfhzQpto4VisX5fge9nyAA26A7ScioKSvr1QYQW85PdLzsA
ZwO/qxfB5dhYptlnfCoq1+Qoe+ZT4E4KSOlU1XDdiOWhIni5iDs+n7I6TqroHMZu
XVdtnNS+XTvdFQx05bBLqtSsUVN26zFB9nfpTVq3LAB0tVEMEmSpB8UUljhZVbD1
n4LoIx2KEvKwPO03di1rxfYeMWxUcR6CWMHdV8ex9/LNNzgPfgFqv71d3A==
-----END CERTIFICATE-----
Generated at Mon Feb 23 03:49:14 2026 by rpki-client