Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
File: PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer (raw, json)
Hash identifier: NKSgk1o5LJHzTlbAG6Obvp2ZV9pUnbvtq0DV8SK8j6g=
Subject key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C75DC930E4D6AC19714D6983B8C8BEEEA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 19 Feb 2026 12:25:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.21.129.0/24
IP: 185.130.88.0/24
IP: 2a00:e3a0::/32
IP: 2a14:a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:dc:93:0e:4d:6a:c1:97:14:d6:98:3b:8c:8b:ee:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 19 12:25:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:de:f1:9e:3d:8a:44:f4:1f:5f:4d:22:65:
a0:ab:41:37:b9:73:99:e3:8e:58:4e:5a:97:6c:61:
b0:fa:d2:2e:9d:64:43:99:98:97:e3:d5:6a:d8:1a:
3f:c4:aa:98:68:f6:70:1a:41:e0:cd:5d:49:2c:2a:
47:44:d1:49:7c:cf:c0:62:43:20:3d:77:88:2c:56:
da:77:d5:1f:da:c9:e3:8a:3c:e6:36:c7:f0:08:76:
18:5e:02:7b:eb:c9:ac:cc:d3:e4:4d:e2:17:f8:c1:
08:3b:fc:54:ed:9b:20:0f:d1:0d:1d:bd:62:2f:c2:
ac:c7:e8:6d:a4:36:1f:ef:dc:5f:3d:84:c5:94:3f:
9b:9e:41:cb:24:11:f1:71:b3:20:76:13:ae:12:ab:
7d:5e:fc:b0:b3:78:1f:cd:11:2d:ac:44:9e:01:9b:
68:26:cc:a9:c2:bd:cb:3d:81:16:f1:ca:50:78:32:
27:02:8d:87:7d:c0:5a:80:7e:9e:5c:99:5f:2c:76:
7a:cc:5f:86:4b:e6:50:5e:be:5c:0d:7b:fe:95:fb:
68:ba:d9:b5:a7:44:d8:21:ef:0d:11:63:87:6d:48:
5c:d1:c2:48:f6:bd:fe:f1:c6:65:c7:b4:0a:04:66:
93:75:71:f6:20:54:ce:9c:14:43:13:91:2c:c3:9e:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.129.0/24
185.130.88.0/24
IPv6:
2a00:e3a0::/32
2a14:a00::/29
Signature Algorithm: sha256WithRSAEncryption
ac:25:9d:eb:34:95:25:0d:d5:fd:9b:89:8e:49:70:31:e9:00:
c4:c7:53:61:bb:4f:9c:17:33:b1:e5:92:18:36:b0:c0:33:1d:
99:2a:da:64:ca:ee:13:8b:18:e6:84:50:40:45:1e:99:36:75:
06:5f:a6:81:40:0f:4a:5b:46:00:4f:09:7f:1e:dd:b3:e6:d3:
8e:b2:0c:4f:18:e3:c6:31:5d:38:33:41:0f:e3:6c:f2:86:34:
32:9d:57:46:ef:c2:f2:89:42:a3:23:58:d9:7e:de:f7:44:cc:
0f:cc:cc:85:3d:29:e2:bc:f8:8e:4c:88:79:23:fc:97:25:92:
e4:14:77:f9:f6:64:a5:9a:3d:1e:38:ad:83:dc:20:3b:a9:2d:
b6:7c:c2:72:26:33:40:8f:08:6f:f8:4f:13:26:02:ba:fe:f1:
f3:33:5e:17:c2:d3:29:bb:3a:52:dc:da:78:6d:17:cf:73:ed:
13:df:9d:ec:19:be:4a:51:56:7a:7c:6f:80:9b:ce:22:a4:f5:
9d:e1:33:a2:d9:5f:1d:69:d8:94:da:00:5e:0e:e2:12:1a:91:
a3:85:c7:40:46:c8:13:c1:c1:2c:48:48:6c:4a:3b:9d:3d:e5:
45:d3:34:3f:82:4c:3b:44:84:19:c8:6b:13:94:00:1e:81:2b:
b9:0e:bc:8d
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZx13JMOTWrBlxTWmDuMi+7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjE5MTIyNTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzRlZDk0MmU1Yzc0MmU3N2JmYjliZWI5NTRmODcyNTM0ZjUyODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwXe8Z49ikT0H19NImWgq0E3uXOZ
445YTlqXbGGw+tIunWRDmZiX49Vq2Bo/xKqYaPZwGkHgzV1JLCpHRNFJfM/AYkMg
PXeILFbad9Uf2snjijzmNsfwCHYYXgJ768mszNPkTeIX+MEIO/xU7ZsgD9ENHb1i
L8Ksx+htpDYf79xfPYTFlD+bnkHLJBHxcbMgdhOuEqt9Xvyws3gfzREtrESeAZto
Jsypwr3LPYEW8cpQeDInAo2HfcBagH6eXJlfLHZ6zF+GS+ZQXr5cDXv+lftoutm1
p0TYIe8NEWOHbUhc0cJI9r3+8cZlx7QKBGaTdXH2IFTOnBRDE5Esw57hsQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFDxO2ULlx0Lne/ub65VPhyU09ShIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzFiYjQ1
YS01NTFjLTQ5NjctOTVjYS03NzM0NGJjYzkxOTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMWJiNDVh
LTU1MWMtNDk2Ny05NWNhLTc3MzQ0YmNjOTE5MS8xL1BFN1pRdVhIUXVkNy01dnJs
VS1ISlRUMUtFZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQAuRWBAwQAuYJYMBQEAgACMA4DBQAqAOOgAwUD
KhQKADANBgkqhkiG9w0BAQsFAAOCAQEArCWd6zSVJQ3V/ZuJjklwMekAxMdTYbtP
nBczseWSGDawwDMdmSraZMruE4sY5oRQQEUemTZ1Bl+mgUAPSltGAE8Jfx7ds+bT
jrIMTxjjxjFdODNBD+Ns8oY0Mp1XRu/C8olCoyNY2X7e90TMD8zMhT0p4rz4jkyI
eSP8lyWS5BR3+fZkpZo9Hjitg9wgO6kttnzCciYzQI8Ib/hPEyYCuv7x8zNeF8LT
Kbs6UtzaeG0Xz3PtE9+d7Bm+SlFWenxvgJvOIqT1neEzotlfHWnYlNoAXg7iEhqR
o4XHQEbIE8HBLEhIbEo7nT3lRdM0P4JMO0SEGchrE5QAHoEruQ68jQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:08:19 2026 by rpki-client