Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
File: QO7W1Efa1FnC39mMFNADLQ1RpyU.cer (raw, json)
Hash identifier: 6T4EoxTAJVC8afbJT25Y1AUZzKKzqngJtXy/YeYP134=
Subject key identifier: 40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CD3C9AFDC084DD88F1678C55783BEE02A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 09 Mar 2026 18:08:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213877
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d3:c9:af:dc:08:4d:d8:8f:16:78:c5:57:83:be:e0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 9 18:08:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:8e:f8:37:77:b1:81:0d:1b:04:cb:2e:97:
35:3a:bb:e6:83:d2:f6:25:d6:84:24:f8:26:73:fb:
24:cc:4d:7d:6e:c8:dc:ad:fd:72:af:0b:a9:79:21:
e1:0d:04:77:e0:2f:6e:75:36:80:82:99:80:39:2b:
12:dd:0c:7f:c4:cf:42:02:5a:d0:8c:91:fc:d2:11:
5d:a9:e1:d5:ba:de:9a:b5:15:b6:0c:bc:fc:ed:5c:
df:1b:7f:f0:bb:0d:30:2d:ea:4b:64:13:25:2f:59:
8e:1b:16:3a:78:49:06:3e:76:c4:53:f2:32:d0:7d:
c0:9f:e4:27:10:28:65:67:d9:fc:40:e2:7c:7b:33:
99:44:38:cf:08:97:01:ef:d6:8c:7c:a9:0e:42:e3:
3e:d3:1c:34:c0:bb:5e:68:89:0f:49:84:bc:97:38:
7f:65:35:b8:0a:ce:9f:fe:b9:9b:d3:eb:34:6c:5f:
03:18:74:ee:07:39:5b:e4:8f:ff:00:29:2e:2e:6f:
27:26:9a:c7:83:8b:6b:71:62:e1:e9:c8:e8:7b:e4:
15:08:e2:31:e8:cb:46:c9:55:4e:d6:16:7b:b3:19:
6a:67:f2:a2:37:ab:88:86:3b:b1:fa:ac:63:1d:2c:
55:5c:e0:30:13:59:b3:cb:e1:b9:f3:d2:be:4e:f1:
90:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213877
Signature Algorithm: sha256WithRSAEncryption
6c:11:93:57:88:bb:9d:84:e7:df:91:b3:c6:c6:f4:95:5c:e2:
cf:e6:78:56:46:0f:92:8c:b4:2d:15:00:0d:b9:20:d0:3a:df:
ac:77:b9:27:01:18:0f:68:75:20:f4:59:d6:bc:45:02:51:77:
5c:6c:81:2a:3a:ec:ac:29:4e:b2:9a:2e:16:82:51:79:68:f8:
ea:a2:ab:d3:e1:0b:6d:26:c8:31:a2:89:e7:09:7d:6e:b0:76:
3c:3a:66:d9:88:58:70:70:d0:3a:d3:a2:a2:5f:ab:c5:8b:4d:
64:3c:30:56:01:3f:86:46:2a:2e:7c:a2:1d:f3:53:a7:3d:d1:
bb:20:b3:c3:62:4b:06:8b:15:0f:82:34:a2:b5:06:1f:9c:72:
9b:02:aa:0d:10:a8:cf:5c:81:8a:b2:87:04:53:c7:3e:01:44:
31:6b:9e:ac:6e:a2:ce:88:dd:7d:5a:c0:3c:5d:6d:e3:06:26:
be:e4:0f:cc:e6:24:cb:6e:98:a2:63:b8:44:8f:16:49:f3:da:
cb:91:1d:66:1c:f2:0f:66:34:18:20:18:33:cb:60:df:83:59:
06:0d:b1:b8:f4:00:90:9f:e6:37:9f:7b:82:d3:8a:11:94:2d:
1e:f8:36:a9:52:db:20:17:68:aa:55:22:9e:f0:11:05:37:69:
b8:85:8c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:15:51 2026 by rpki-client