Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
File: 3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer (raw, json)
Hash identifier: TzBUemFH+m24LFaim4MN9PU1Not17e3GRYCQ/914GvU=
Subject key identifier: DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DD6A06CCAA27B138E4A0D09DF0005488A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 29 Apr 2026 00:25:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 43.249.8.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d6:a0:6c:ca:a2:7b:13:8e:4a:0d:09:df:00:05:48:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 29 00:25:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ded5a1224edcf1270ef1b8060985aa87d191aba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:f4:9c:da:ed:8d:a6:98:c6:55:4a:7b:ae:
b0:dc:8c:4f:70:c5:ad:69:7a:75:d4:65:b5:07:e1:
de:4d:18:d0:9f:5f:07:75:42:24:0e:e0:be:f2:8a:
01:8d:43:ae:1e:81:39:89:9c:30:3a:68:98:e8:64:
9a:e3:3f:66:5a:60:a6:b6:39:b7:3c:d5:a1:6a:9a:
2b:c6:47:b5:ce:26:18:1a:fa:73:34:9c:bd:b8:9f:
de:91:b7:71:61:a8:f8:0f:d2:5b:1b:8d:d5:46:f7:
7a:16:ef:72:56:7f:95:25:70:17:a1:6d:33:f6:1e:
0c:a4:d2:53:87:0c:79:2d:7e:98:7d:3f:7c:b3:ac:
57:1b:27:80:0e:03:af:26:34:9b:64:14:53:83:ed:
8b:df:d9:f1:f6:87:64:51:84:b3:31:7a:10:9d:7a:
07:af:c1:2f:9f:f2:2e:fb:f2:12:2e:8e:b3:da:8c:
11:3e:df:49:d2:56:07:65:86:81:69:b3:c0:eb:5a:
bb:62:fe:81:54:98:60:73:60:a4:d7:57:0d:93:ba:
e1:1d:02:e4:22:c6:88:10:05:24:2f:a3:34:7d:1e:
fe:98:ce:f7:91:62:fc:e6:84:e7:6e:af:34:28:ab:
42:7c:38:47:9b:57:1a:f7:a5:ea:6d:74:e5:6d:e0:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.249.8.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:d4:e7:c9:30:0f:eb:c9:7e:a2:8a:31:8f:f5:4b:db:0e:0e:
e1:16:c7:5a:64:60:f2:7c:4f:04:aa:08:da:c9:60:01:78:a7:
af:1a:67:95:88:86:94:a2:24:e1:67:db:70:4b:80:be:e2:b3:
a9:f1:22:f4:76:10:f4:4e:89:78:40:15:93:af:67:b0:44:b9:
82:97:ee:1a:d1:23:35:72:66:c0:a3:e3:9d:b9:76:e6:66:95:
8c:55:1a:8d:15:bc:91:ab:c1:ae:d1:1a:b7:32:30:fe:30:34:
2d:98:01:02:24:d1:83:28:1c:19:e4:d5:8e:ca:16:22:92:50:
ee:70:a6:e5:21:82:89:61:9c:92:de:33:69:83:c1:d6:67:64:
c9:93:8b:ae:8e:ec:5c:56:e6:d5:85:a6:fd:d2:5f:8f:b0:d7:
82:50:48:5d:b3:e4:df:8b:b3:3f:f6:ae:da:f0:dc:af:0c:98:
5c:9c:76:db:25:d1:6f:5c:ef:05:00:7e:ca:6c:e1:3f:69:e8:
53:cb:ff:66:80:10:33:29:81:5b:50:4a:27:20:48:dd:f3:1c:
c8:e1:40:ea:ef:82:3e:8f:83:84:00:53:60:5e:bf:e2:35:e9:
2b:b9:1f:64:20:c5:b7:47:54:72:7b:3b:73:44:a6:f5:d8:7c:
4a:50:48:51
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ3WoGzKonsTjkoNCd8ABUiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDI5MDAyNTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWQ1YTEyMjRlZGNmMTI3MGVmMWI4MDYwOTg1YWE4N2QxOTFhYmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+X0nNrtjaaYxlVKe66w3IxPcMWt
aXp11GW1B+HeTRjQn18HdUIkDuC+8ooBjUOuHoE5iZwwOmiY6GSa4z9mWmCmtjm3
PNWhaporxke1ziYYGvpzNJy9uJ/ekbdxYaj4D9JbG43VRvd6Fu9yVn+VJXAXoW0z
9h4MpNJThwx5LX6YfT98s6xXGyeADgOvJjSbZBRTg+2L39nx9odkUYSzMXoQnXoH
r8Evn/Iu+/ISLo6z2owRPt9J0lYHZYaBabPA61q7Yv6BVJhgc2Ck11cNk7rhHQLk
IsaIEAUkL6M0fR7+mM73kWL85oTnbq80KKtCfDhHm1ca96XqbXTlbeAUswIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFN7VoSJO3PEnDvG4BgmFqofRkaupMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlLzY1OTRk
Zi0wYjVhLTQ2NDAtODZhZC1hZWRlZDkwNGRjYTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvNjU5NGRm
LTBiNWEtNDY0MC04NmFkLWFlZGVkOTA0ZGNhNS8xLzN0V2hJazdjOFNjTzhiZ0dD
WVdxaDlHUnE2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCK/kIMA0GCSqGSIb3DQEBCwUAA4IBAQBf1OfJ
MA/ryX6iijGP9UvbDg7hFsdaZGDyfE8EqgjayWABeKevGmeViIaUoiThZ9twS4C+
4rOp8SL0dhD0Tol4QBWTr2ewRLmCl+4a0SM1cmbAo+OduXbmZpWMVRqNFbyRq8Gu
0Rq3MjD+MDQtmAECJNGDKBwZ5NWOyhYiklDucKblIYKJYZyS3jNpg8HWZ2TJk4uu
juxcVubVhab90l+PsNeCUEhds+Tfi7M/9q7a8NyvDJhcnHbbJdFvXO8FAH7KbOE/
aehTy/9mgBAzKYFbUEonIEjd8xzI4UDq74I+j4OEAFNgXr/iNekruR9kIMW3R1Ry
eztzRKb12HxKUEhR
-----END CERTIFICATE-----
Generated at Sat May 9 13:20:37 2026 by rpki-client