Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.cer
File: P2pJtJ3ArZj3BhUSlD8TqyM1qo8.cer (raw, json)
Hash identifier: 0/VBEOqLiG4qhACao709GLV4OMxwTW2ZFiZEXHVnc/k=
Subject key identifier: 3F:6A:49:B4:9D:C0:AD:98:F7:06:15:12:94:3F:13:AB:23:35:AA:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A163B6B892A8C3AE15070F3C2BC1C9E333
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Oct 2026 13:04:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.169.132.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:b6:b8:92:a8:c3:ae:15:07:0f:3c:2b:c1:c9:e3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 22 13:04:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f6a49b49dc0ad98f7061512943f13ab2335aa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:65:7b:49:4e:c1:13:64:1d:c1:ed:58:8c:
3b:06:d8:8c:13:df:b1:cf:5b:8e:e5:d7:fb:ea:e1:
96:25:2c:bc:0c:cc:dd:5d:71:4d:35:3d:4d:32:cd:
4e:30:7e:ad:c7:a1:7e:46:e6:13:da:2c:89:44:9d:
87:e1:59:32:bd:c1:be:ff:66:40:cc:ff:76:ae:8c:
f8:cd:b4:6b:0b:9f:ac:6d:26:d9:f1:22:a6:13:7e:
35:36:a2:f7:a0:ba:c4:35:ae:b5:7a:2f:9a:74:43:
9a:76:62:96:43:b7:ee:d3:36:bb:32:7b:78:63:88:
63:e8:77:9e:67:8c:43:db:21:aa:06:af:16:40:5f:
51:0b:9c:bb:39:c0:f0:ae:68:38:7d:a8:b7:c0:9e:
43:04:1c:f3:67:c4:35:15:2e:21:16:77:ad:a2:75:
0a:09:84:57:6a:b8:6f:d9:92:ae:04:be:1e:92:e6:
50:df:c6:74:1c:ff:5e:bb:1a:22:59:39:6c:b8:51:
4a:7a:6b:79:24:d4:c4:06:54:77:12:aa:1e:1a:b1:
6d:b4:d0:7a:e4:26:30:58:2f:e8:e0:75:87:77:3d:
04:39:cf:64:18:f4:ca:b6:d0:a8:e1:04:00:00:0d:
ce:8b:e8:99:2c:2f:56:ca:b0:21:f7:cd:49:de:fc:
6d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6A:49:B4:9D:C0:AD:98:F7:06:15:12:94:3F:13:AB:23:35:AA:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.132.0/22
Signature Algorithm: sha256WithRSAEncryption
05:43:70:91:b1:07:86:e8:f3:b4:15:fe:dc:6e:9e:0d:56:f2:
ba:06:fa:47:b7:54:b7:04:0b:b9:a1:50:69:a9:46:8b:35:c1:
63:ff:f8:86:06:2c:73:ce:7a:ae:57:8d:ff:ab:b8:4e:28:27:
b8:ee:f6:d4:ca:08:78:cb:1b:a3:9f:b4:79:58:e8:b4:57:4d:
9f:ec:ac:ed:d1:73:d0:7e:ba:60:05:21:bd:4a:34:0c:f7:f0:
ca:01:a8:31:39:66:3f:ab:e8:ca:21:8e:22:dd:10:05:6e:63:
c8:2e:e4:67:7f:4c:90:92:57:ec:1d:86:4d:bb:c5:cc:d2:85:
dd:8e:d1:4e:81:db:ff:48:96:c0:d4:d2:5f:71:cf:f2:29:97:
cc:ba:61:ab:37:5f:c3:24:90:6e:76:2e:2c:10:20:15:7c:5a:
9f:2c:ea:6f:23:59:e3:bc:00:c9:c3:c5:bd:1a:c7:d9:d8:f6:
01:2e:96:50:b0:59:90:a2:d4:8b:7b:aa:a6:a5:f3:ed:8b:70:
05:ff:9a:ae:2e:ef:f5:50:5f:84:5e:0b:22:76:a7:08:59:4a:
35:99:29:e3:9b:99:13:a6:1d:43:8c:bd:12:ba:2e:6f:4c:1a:
3b:b8:07:60:2c:e4:53:3b:6e:28:a0:a3:75:cf:36:10:f1:72:
d7:1f:80:40
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAaFjtriSqMOuFQcPPCvByeMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDIyMTMwNDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjZhNDliNDlkYzBhZDk4ZjcwNjE1MTI5NDNmMTNhYjIzMzVhYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dxle0lOwRNkHcHtWIw7BtiME9+x
z1uO5df76uGWJSy8DMzdXXFNNT1NMs1OMH6tx6F+RuYT2iyJRJ2H4VkyvcG+/2ZA
zP92roz4zbRrC5+sbSbZ8SKmE341NqL3oLrENa61ei+adEOadmKWQ7fu0za7Mnt4
Y4hj6HeeZ4xD2yGqBq8WQF9RC5y7OcDwrmg4fai3wJ5DBBzzZ8Q1FS4hFnetonUK
CYRXarhv2ZKuBL4ekuZQ38Z0HP9euxoiWTlsuFFKemt5JNTEBlR3EqoeGrFttNB6
5CYwWC/o4HWHdz0EOc9kGPTKttCo4QQAAA3Oi+iZLC9WyrAh981J3vxtaQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFD9qSbSdwK2Y9wYVEpQ/E6sjNaqPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzkzNDY3
MC1jZWExLTQ2NTktOWQxMS1kMmY5OGM3YWFiMTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvOTM0Njcw
LWNlYTEtNDY1OS05ZDExLWQyZjk4YzdhYWIxOS8xL1AycEp0SjNBclpqM0JoVVNs
RDhUcXlNMXFvOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwqmEMA0GCSqGSIb3DQEBCwUAA4IBAQAFQ3CR
sQeG6PO0Ff7cbp4NVvK6BvpHt1S3BAu5oVBpqUaLNcFj//iGBixzznquV43/q7hO
KCe47vbUygh4yxujn7R5WOi0V02f7Kzt0XPQfrpgBSG9SjQM9/DKAagxOWY/q+jK
IY4i3RAFbmPILuRnf0yQklfsHYZNu8XM0oXdjtFOgdv/SJbA1NJfcc/yKZfMumGr
N1/DJJBudi4sECAVfFqfLOpvI1njvADJw8W9GsfZ2PYBLpZQsFmQotSLe6qmpfPt
i3AF/5quLu/1UF+EXgsidqcIWUo1mSnjm5kTph1DjL0Sui5vTBo7uAdgLORTO24o
oKN1zzYQ8XLXH4BA
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:40:39 2026 by rpki-client