Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
File: qfNHED7zSa2C8basQ-dsD_o4wvg.cer (raw, json)
Hash identifier: ychqUvzn3IWnxOikQ7+hPSoCulZNb4aPBI/wDMxBjQg=
Subject key identifier: A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F984626F996C1BBA17055A1811192C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.223.85.0/24
IP: 194.147.18.0 -- 194.147.21.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:84:62:6f:99:6c:1b:ba:17:05:5a:18:11:19:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bf:42:71:75:d7:30:01:3c:48:8f:b3:9b:57:
a6:76:ab:71:bd:f9:4d:36:92:12:a2:df:d5:fb:22:
a0:7e:51:52:10:67:05:67:0f:91:b1:02:eb:ab:4c:
b8:82:36:ca:8c:9d:b7:9c:86:96:f7:c5:8e:4a:ec:
f4:6e:d6:20:ba:a5:0d:0f:7a:39:41:dd:58:f4:12:
21:bc:30:8a:f1:2f:7a:3b:4b:3e:c5:9f:e5:38:0a:
26:20:93:1a:00:ae:d4:7b:3e:43:d8:d1:a7:e9:a0:
07:82:53:41:24:d8:8e:ce:d1:a1:c4:70:69:ae:35:
8d:8f:4b:27:3a:29:0c:91:87:e6:79:61:06:bb:b0:
44:19:d1:25:fa:97:9a:88:4f:f6:b8:e6:46:b3:81:
89:7c:7b:31:b1:b2:ab:43:b9:33:d6:38:77:51:c0:
59:26:f6:6f:69:b1:42:21:1f:a1:ad:98:98:ab:cf:
e7:5a:cd:b0:ab:ac:e9:93:c9:f0:32:c7:d3:40:56:
46:e6:a2:5e:da:47:6f:f8:4f:78:ae:5d:0b:12:18:
c5:f5:41:23:3c:b9:25:4c:68:e5:01:30:06:ef:35:
bb:14:14:ca:06:1f:de:4c:9b:7a:68:78:8d:89:92:
7d:7b:aa:89:5b:bd:3e:7a:3d:f2:d1:e9:5c:d5:e2:
3f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.85.0/24
194.147.18.0-194.147.21.255
Signature Algorithm: sha256WithRSAEncryption
ab:71:90:81:52:d3:00:fd:76:88:d0:23:17:4a:fa:6d:16:20:
a8:63:9f:e8:f0:bc:99:ab:8f:55:43:2b:a5:d7:07:4f:4a:25:
53:4c:e1:3c:93:76:c1:d2:17:35:5d:d0:55:32:da:dd:7b:d5:
35:32:ad:30:2d:23:aa:42:9f:e0:8f:76:e7:6e:fd:fd:f9:1f:
25:17:4b:92:60:27:4b:c3:42:fe:b6:e9:a4:21:75:3f:09:e2:
a4:43:ba:59:ae:92:54:7a:e8:5a:f2:c1:e2:00:2c:78:83:f7:
d2:d4:91:0c:d1:28:8b:56:22:96:1d:b7:b6:c5:8d:e4:67:a9:
ca:f3:49:4d:e3:57:be:ea:47:bf:31:a0:6a:40:96:1c:78:9d:
2a:73:da:dd:32:a2:41:8d:bc:2c:d3:17:5c:89:09:29:40:37:
3a:dc:84:d2:d4:14:52:20:7a:c8:eb:85:35:cd:ea:62:7e:1a:
52:f2:3e:25:32:de:37:38:e0:96:83:f8:25:3e:52:30:ab:9f:
85:d2:36:20:78:11:c6:ed:37:c7:e9:a3:06:28:df:57:2e:38:
0c:25:ab:e9:14:a7:e1:ac:3a:33:9b:5e:f2:f2:7c:a1:8e:9d:
fa:04:47:89:c7:57:2a:6b:5c:d2:a4:66:18:a1:bd:ac:ec:1c:
42:1d:91:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:56 2026 by rpki-client