Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.cer (raw, json)
Hash identifier: MRrTDFZUgzUsTsGpYNUmh6Ne6nUwxaylBB640Z7+dQA=
Subject key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F03FE3F75D11854F7A275B55442BF1BA9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jun 2026 12:53:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 41653
IP: 45.141.172.0/22
IP: 85.8.203.0/24
IP: 91.199.0.0/24
IP: 95.128.40.0/21
IP: 176.121.248.0/22
IP: 178.212.228.0/24
IP: 185.66.232.0/22
IP: 194.105.152.0/23
IP: 195.14.22.0/24
IP: 2a02:ec0::/32
IP: 2a0e:cec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:fe:3f:75:d1:18:54:f7:a2:75:b5:54:42:bf:1b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 26 12:53:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:b6:76:5d:aa:22:7f:03:be:52:16:f0:9f:
f6:d0:d7:30:ea:c1:4d:95:b7:bd:80:af:8b:70:8b:
de:bb:62:ce:27:15:5e:02:50:ce:b4:ba:ca:3a:56:
1b:26:4b:31:77:f0:71:ab:d6:b7:04:b2:d1:31:3d:
2c:66:b4:1b:dd:ef:03:50:24:3c:a2:12:8d:9a:16:
f9:ce:ee:2e:ce:be:31:d4:4f:3e:39:c9:db:9b:dd:
b6:b2:79:34:fa:79:7f:03:aa:e3:50:d5:d8:7c:f4:
d4:a7:78:a8:36:37:40:0d:8c:86:32:a3:51:21:fd:
37:77:df:a1:69:9f:ca:59:68:a0:40:3b:72:3d:33:
1b:8f:01:ca:23:13:5e:be:75:e6:5e:e6:c7:cd:ed:
28:39:6a:fa:1f:e7:f7:1e:3a:53:9b:fe:40:9c:d4:
f9:85:b4:76:b4:13:a9:e4:8f:ba:6b:21:d6:1a:eb:
1e:9b:b2:fe:18:16:b6:d8:ce:3d:f3:3d:9a:9f:a8:
a4:b3:d2:a0:2c:a1:fc:e5:60:1e:73:e5:ff:e8:31:
8e:a3:53:10:eb:03:b9:7f:fa:69:14:a7:d3:84:66:
c9:da:fc:b1:e4:49:86:04:0b:b9:d0:8c:c5:a7:d7:
76:aa:f6:3e:5d:05:d5:b3:e9:f5:8d:48:68:6f:4f:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.172.0/22
85.8.203.0/24
91.199.0.0/24
95.128.40.0/21
176.121.248.0/22
178.212.228.0/24
185.66.232.0/22
194.105.152.0/23
195.14.22.0/24
IPv6:
2a02:ec0::/32
2a0e:cec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41653
Signature Algorithm: sha256WithRSAEncryption
8d:45:1d:84:a7:83:dd:41:08:53:69:96:98:de:3a:78:e7:af:
83:7f:b0:e5:45:5b:68:f1:26:63:43:b7:c9:cf:d4:15:5a:1f:
9c:2b:1f:46:97:a9:e1:46:7c:45:3b:59:e6:4b:ad:f8:eb:9d:
15:8c:8b:a6:21:41:4a:b4:28:f4:c4:00:dc:67:04:73:17:30:
21:63:0d:35:f0:04:3f:f8:f9:c6:5c:d0:dd:71:0b:9f:83:6a:
49:7b:43:d5:9b:14:a7:5b:76:0c:d0:37:af:cc:c3:6b:6a:1c:
55:dd:26:73:cf:1e:5c:41:da:e4:54:fb:36:d8:e1:25:9c:4f:
da:a8:2b:7e:1d:cd:08:bd:b6:8c:c1:14:6c:f3:60:27:24:39:
83:a5:18:ec:47:d8:ff:5e:d5:12:ae:d7:9a:18:83:64:34:15:
16:ea:f3:ad:64:4b:04:ca:33:79:cf:05:9e:bb:80:5e:5f:11:
40:e0:65:a0:86:93:66:be:7a:50:a3:90:13:ca:64:f8:2d:53:
22:ae:ea:7c:ac:c2:ef:a9:fc:15:94:b4:0a:6d:ed:0f:1d:94:
f3:7b:c2:34:fb:9d:3e:36:31:cd:ca:a0:3d:dc:bc:ff:cc:ca:
46:b6:9f:5f:2b:e1:b1:b2:90:5a:51:88:99:69:05:0c:50:56:
27:e2:66:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:13:09 2026 by rpki-client