Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
File: QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer (raw, json)
Hash identifier: vsD2ySHQaZ+oYsH3G7ZdUvBFV2LMEREu7i1re4uDb+M=
Subject key identifier: 40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA1FAF2E757884830EA6F6C855577D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.171.216.0/22
IP: 2a0a:e900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:1f:af:2e:75:78:84:83:0e:a6:f6:c8:55:57:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40392849ddd30b1deccc7f68d48a68d08265ab0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:2f:ef:3d:40:69:88:87:ee:57:d2:c3:f4:
6c:df:25:c7:7a:54:96:ae:a2:dc:c5:28:74:1e:91:
19:79:b1:9c:98:da:aa:aa:e3:38:27:f7:6d:6a:ce:
e1:5e:e2:1b:21:b8:e6:23:6f:e4:24:71:1b:f7:a2:
7b:b3:a7:e3:bc:78:60:84:f2:07:3d:21:60:ee:35:
35:f1:a4:b9:38:30:da:b0:2a:2c:d1:ce:94:f5:57:
83:b8:71:5c:17:71:fd:8a:e9:cf:0e:4c:a5:97:5e:
dd:20:e7:2f:60:08:a6:fb:0d:f5:fe:35:00:f1:8a:
ee:2d:af:5b:65:06:cb:a4:b1:ed:5a:96:9a:36:b9:
e8:3b:9f:33:26:21:e9:5e:78:11:36:55:7c:aa:ec:
66:5d:3f:a5:61:7f:7e:d3:86:14:c6:26:80:d4:dc:
45:57:14:13:c6:f2:57:dc:fb:fd:b0:a3:98:d3:8d:
4c:56:4c:ee:61:c1:ac:63:d7:61:1c:da:e8:21:07:
ab:fb:12:64:cb:b8:0b:96:09:d3:17:ff:eb:8a:4a:
82:7a:41:82:61:fa:5a:79:f3:70:58:6c:95:51:7c:
62:cc:7e:88:d7:b1:ab:33:64:f8:67:1a:94:f5:ad:
7a:ef:d7:2f:05:89:8b:e5:6e:63:2e:a3:43:8d:0c:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.216.0/22
IPv6:
2a0a:e900::/29
Signature Algorithm: sha256WithRSAEncryption
38:c9:9b:06:ee:e4:97:a8:fd:8b:45:d5:23:16:86:6e:af:d6:
d7:f3:94:94:b7:fc:bb:d1:7b:d7:d3:36:ce:d3:c4:34:b3:59:
6e:fb:e5:44:ca:ec:e2:cf:6e:45:69:fb:06:5d:12:4f:83:05:
db:37:a0:19:3f:a9:fb:6b:0e:14:29:11:a0:ac:d5:63:f3:e5:
02:b0:d8:5c:50:90:d5:f3:5f:14:4a:df:33:ba:ed:a6:64:28:
94:b6:ff:fd:ee:36:2e:84:22:2c:0a:af:7b:00:11:c9:88:5e:
7d:cb:1a:c0:76:49:00:ec:b9:f9:37:78:ee:ad:64:dd:ae:08:
cd:f2:b0:02:73:1c:29:61:58:0e:cf:81:cf:4a:21:c1:f9:e6:
5f:a3:8c:51:fe:3e:f7:aa:4a:28:6b:d8:68:72:32:a0:2d:e5:
d5:12:46:e7:90:fd:17:03:94:47:86:88:9e:bd:25:f9:79:f1:
74:12:3a:82:a7:8e:f8:8d:cb:38:0e:21:af:ea:40:5c:d2:97:
f7:01:3f:1b:5a:ba:ed:90:54:16:f3:58:72:0d:ad:e7:32:23:
5f:7f:2d:ef:1e:01:6f:03:64:1e:82:9c:01:9d:29:29:6f:3f:
63:7c:1e:be:68:81:7c:5b:9f:d3:41:a3:b1:a6:b0:5e:a7:d4:
88:cd:6d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:11:41 2026 by rpki-client