Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer
File: gc-3wMI0noD-5RtHgxU1Es2dodI.cer (raw, json)
Hash identifier: Whx3AcPrCZVKrQFJwTjUvjrJ1Hqctltk0mQFUjA8cvs=
Subject key identifier: 81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5B6ECC76558E6F3F733D28AA9BFC40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:18:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210449
IP: 146.19.224.0/24
IP: 178.211.141.0/24
IP: 2a12:1080::/29
IP: 2a13:7600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:6e:cc:76:55:8e:6f:3f:73:3d:28:aa:9b:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81cfb7c0c2349e80fee51b4783153512cd9da1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:26:7a:75:85:29:cc:0b:32:42:df:f1:88:
70:a0:c2:28:f9:11:26:cd:0a:9f:90:e7:55:51:70:
5a:e7:e0:f6:37:ea:5b:57:7d:d3:33:79:e3:60:78:
98:d2:83:9f:7b:8c:c5:00:d7:29:7e:ad:2b:5d:95:
ef:51:74:f6:7f:a9:37:dd:4d:41:85:44:76:1c:f5:
dd:d9:13:aa:29:94:26:b4:1d:25:e5:62:d1:3d:e4:
e1:49:2b:04:8a:5d:28:4d:56:d9:8c:c7:be:0f:12:
91:e8:a5:86:fe:44:68:2e:88:66:70:23:47:98:ae:
a9:4c:c3:19:38:17:5e:19:fc:ff:28:7e:90:75:0f:
5a:4f:5d:1c:29:b4:b2:ba:68:82:bc:a2:5f:78:eb:
27:f2:6c:93:0f:c9:f7:8c:04:84:2b:76:03:4e:f4:
d8:dc:93:93:61:ba:e0:e7:90:f5:9e:07:46:1b:de:
21:82:55:37:f6:73:f9:e6:b8:2f:26:22:87:11:78:
aa:6f:cc:e2:9d:b6:fa:ee:df:98:2d:03:59:1b:51:
f2:ec:9a:9e:a2:29:50:6c:65:8c:33:f3:21:91:d4:
3b:3a:ac:df:a7:a1:0c:a5:14:a6:c3:b8:c8:ed:80:
06:81:4f:5e:40:ec:6b:e3:02:31:40:b5:af:9c:bb:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.224.0/24
178.211.141.0/24
IPv6:
2a12:1080::/29
2a13:7600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210449
Signature Algorithm: sha256WithRSAEncryption
8e:50:c7:c4:b2:1b:5b:50:d7:77:1d:8e:88:3e:02:23:f7:18:
7b:5b:ba:62:55:79:9e:90:59:bf:10:e7:56:63:e8:6f:27:f3:
1c:2c:2f:61:4d:8b:0f:1a:c0:cd:c3:8c:73:fc:56:f8:0e:b9:
2a:b4:30:dd:98:c2:a7:bc:7e:9b:92:3b:cc:ef:18:e2:2d:58:
75:d4:fd:73:76:2b:32:38:f5:db:9a:5b:82:2c:52:ea:6f:5f:
1d:b1:9f:87:ae:92:ed:0f:7c:1c:31:67:eb:45:d2:b3:a0:1e:
55:b9:c7:18:10:5f:64:84:ab:67:96:c5:74:cd:46:17:ea:ef:
23:cd:1f:dc:de:23:18:d2:7b:4a:06:df:24:fc:05:5e:74:30:
b1:c6:5a:90:3c:3b:a4:49:93:36:3f:2e:6c:ee:8b:73:59:e5:
20:48:e2:2f:11:60:43:98:c0:e5:70:72:45:68:01:01:66:f2:
88:04:ad:e5:73:63:04:00:2e:e5:8b:09:e3:c1:d1:3b:63:e1:
bd:c7:99:e8:d0:ae:e4:77:f9:cb:40:19:8d:bb:a5:e8:58:47:
34:e9:9a:67:d0:50:94:93:99:a4:78:85:47:86:89:82:b6:d8:
b5:53:65:12:63:d6:58:9d:ad:21:f9:ed:a8:82:1c:97:e9:87:
81:4d:e8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:10:16 2026 by rpki-client