Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
File: Q16al_74NTuEg1I3YEaVLdoPq9g.cer (raw, json)
Hash identifier: 3rds4T9yB3fwqIJCJdJ6HJiPpvQC3Nkz61Ss0o19cIg=
Subject key identifier: 43:5E:9A:97:FE:F8:35:3B:84:83:52:37:60:46:95:2D:DA:0F:AB:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CC6B229EEF12565484B46B872295D66CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 07 Mar 2026 05:08:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204539
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:b2:29:ee:f1:25:65:48:4b:46:b8:72:29:5d:66:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 7 05:08:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=435e9a97fef8353b848352376046952dda0fabd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:04:3b:83:d4:b6:18:a3:7a:cf:96:d0:74:
ae:9c:b1:7b:f8:20:ba:c9:d2:c6:a3:93:1b:e0:2c:
1c:ec:56:7f:7d:77:b7:36:7b:bc:73:cd:31:e9:8c:
a9:c8:a4:ac:5b:00:88:d0:57:2d:a5:81:db:32:3f:
d9:41:38:71:01:32:cc:54:3d:c8:91:63:52:6e:25:
cd:5c:83:99:8a:7b:dc:3c:51:4f:48:28:ad:10:5f:
5c:95:3e:b9:48:af:90:dd:cd:f6:a5:96:56:f4:c2:
f7:d3:d4:c5:71:01:9d:78:76:e5:7f:c3:84:f1:28:
d5:9c:a7:ae:28:7e:2f:43:d0:30:87:80:e6:ae:7b:
33:92:ad:64:84:94:ac:a0:de:da:70:23:c8:45:1c:
bc:4b:e7:0a:6c:ff:b9:4f:ce:69:ca:a1:7f:be:5e:
95:87:34:25:42:b5:ea:71:73:0a:6d:82:cd:7d:46:
f2:3a:fc:45:d5:06:9a:ea:1a:29:57:c0:83:30:52:
ce:53:7f:2b:1b:da:69:cf:dd:c7:9c:46:b1:af:c6:
fc:d6:55:64:42:d1:fc:fd:e1:ec:c5:f6:c1:a9:0b:
0c:20:f3:4d:1d:de:d8:ab:aa:c7:e1:c0:77:62:e3:
a2:08:48:fb:35:e7:59:fc:36:68:5e:23:ca:52:23:
c9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5E:9A:97:FE:F8:35:3B:84:83:52:37:60:46:95:2D:DA:0F:AB:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204539
Signature Algorithm: sha256WithRSAEncryption
8f:6d:02:20:d2:67:79:e5:d2:17:8a:8d:a4:d1:ef:08:ca:f3:
d4:f5:d2:d5:ed:f4:b8:a6:82:eb:94:56:48:79:b8:b7:7f:ce:
2e:d4:87:24:3b:3f:db:6b:9d:1c:41:67:f5:72:e2:bb:f4:4f:
ae:4f:c0:5b:3c:d7:0c:c1:b0:60:f2:dc:19:52:7b:a1:87:88:
77:d6:72:95:33:b2:2c:68:76:05:a5:2d:16:87:e0:5b:4d:eb:
41:e5:97:85:de:7a:ef:22:f4:f4:9e:41:cd:2a:09:0c:fd:e9:
6f:c0:5e:38:b9:6b:79:0a:91:bf:52:16:18:d7:a4:c0:d0:d2:
2b:47:9b:a8:ea:11:03:ac:bd:8d:12:98:89:fc:92:ae:12:30:
0b:7a:f5:04:1c:17:3a:cd:17:ff:7c:7f:60:c8:77:45:0a:72:
f0:94:7d:56:5f:5b:41:df:cd:85:f8:7a:a5:e7:f0:b3:86:b0:
44:14:5a:7e:27:d9:67:da:59:19:e8:c5:c5:f3:1e:45:5a:31:
f2:7d:b0:28:b8:65:79:f5:75:33:60:44:4e:bb:00:0b:73:13:
45:4b:4c:fd:9c:84:fa:27:79:91:36:33:0d:d6:cc:69:f1:fd:
f8:30:af:d5:9b:6f:e1:b0:23:6b:12:46:50:ae:c2:47:49:52:
0e:3c:80:2d
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZzGsinu8SVlSEtGuHIpXWbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzA3MDUwODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzVlOWE5N2ZlZjgzNTNiODQ4MzUyMzc2MDQ2OTUyZGRhMGZhYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIEEO4PUthijes+W0HSunLF7+CC6
ydLGo5Mb4Cwc7FZ/fXe3Nnu8c80x6YypyKSsWwCI0FctpYHbMj/ZQThxATLMVD3I
kWNSbiXNXIOZinvcPFFPSCitEF9clT65SK+Q3c32pZZW9ML309TFcQGdeHblf8OE
8SjVnKeuKH4vQ9Awh4Dmrnszkq1khJSsoN7acCPIRRy8S+cKbP+5T85pyqF/vl6V
hzQlQrXqcXMKbYLNfUbyOvxF1Qaa6hopV8CDMFLOU38rG9ppz93HnEaxr8b81lVk
QtH8/eHsxfbBqQsMIPNNHd7Yq6rH4cB3YuOiCEj7NedZ/DZoXiPKUiPJLwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFENempf++DU7hINSN2BGlS3aD6vYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1L2QyNzgy
Ni0zODM4LTRjMmItYWY5My1lODY4MTExMjBjMTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvZDI3ODI2
LTM4MzgtNGMyYi1hZjkzLWU4NjgxMTEyMGMxOS8xL1ExNmFsXzc0TlR1RWcxSTNZ
RWFWTGRvUHE5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMe+zANBgkqhkiG9w0BAQsFAAOCAQEAj20CINJneeXS
F4qNpNHvCMrz1PXS1e30uKaC65RWSHm4t3/OLtSHJDs/22udHEFn9XLiu/RPrk/A
WzzXDMGwYPLcGVJ7oYeId9ZylTOyLGh2BaUtFofgW03rQeWXhd567yL09J5BzSoJ
DP3pb8BeOLlreQqRv1IWGNekwNDSK0ebqOoRA6y9jRKYifySrhIwC3r1BBwXOs0X
/3x/YMh3RQpy8JR9Vl9bQd/Nhfh6pefws4awRBRafifZZ9pZGejFxfMeRVox8n2w
KLhlefV1M2BETrsAC3MTRUtM/ZyE+id5kTYzDdbMafH9+DCv1Ztv4bAjaxJGUK7C
R0lSDjyALQ==
-----END CERTIFICATE-----
Generated at Mon Mar 16 08:09:48 2026 by rpki-client