Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
File: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer (raw, json)
Hash identifier: v+GR3p0G2gS7yZ2rmhD94IluACr0mYqybkYBp6o/icM=
Subject key identifier: 3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E37DEFA00FF9527CE3A44671D9C646A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:19:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 134.30.0.0/16
IP: 193.149.8.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:de:fa:00:ff:95:27:ce:3a:44:67:1d:9c:64:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:19:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:45:88:0d:00:0a:a2:8c:8e:5e:11:ae:ce:d0:
d0:39:6f:7b:de:53:67:1d:ad:5e:96:ef:1b:34:b0:
63:f2:4a:d8:ba:7d:3b:6a:48:09:be:61:4d:f8:40:
1e:c3:ce:ff:ba:88:9f:ac:cd:54:a5:57:b7:44:6c:
c4:30:8c:c9:dc:ae:4c:73:35:48:23:f2:db:87:38:
ac:de:03:8e:d1:12:e5:4e:64:d3:57:66:4e:05:ca:
6b:e7:79:c9:fe:33:09:7d:22:b4:d5:ce:d1:9f:66:
76:e7:f6:8e:03:81:07:ea:84:a1:19:fc:c4:09:7d:
2e:af:9c:cb:d8:ed:cb:8c:77:82:ef:02:4e:05:31:
84:45:ef:ed:7e:ee:43:8c:0d:35:d8:0d:28:be:fa:
a0:1a:33:cd:af:11:94:0a:da:46:86:64:3d:fd:44:
8d:e9:be:0a:a8:17:75:e3:92:b2:6b:f9:e9:a6:69:
ab:c8:6d:fb:ba:8f:9f:61:2b:7e:3e:08:ed:5f:c5:
73:e4:a7:47:cc:6a:f6:95:ce:30:81:e5:b4:57:cf:
7b:34:42:78:0e:c5:32:f7:b6:5c:ca:9e:7a:f3:bf:
cf:64:a3:24:2a:48:47:c0:ae:39:06:44:55:0d:6b:
47:05:b4:2a:ad:2d:a7:46:aa:92:ad:de:4c:00:95:
b8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.30.0.0/16
193.149.8.0/21
Signature Algorithm: sha256WithRSAEncryption
89:d1:d5:cf:52:d2:bc:53:18:c9:58:47:0b:13:7e:bb:80:4f:
da:81:b5:cc:5b:7a:83:e1:0c:3d:23:5d:ba:9e:19:43:cc:73:
c9:e1:48:ec:ae:d2:0b:9c:e2:22:0e:2a:a7:8f:24:fd:1c:56:
34:fd:ea:e9:6a:dc:65:88:ba:4f:bb:2e:77:d1:5b:94:07:67:
f0:50:8a:f8:83:f1:35:86:3c:bf:da:55:de:a8:93:5c:94:a8:
07:c8:55:86:6b:e5:60:eb:30:5d:7a:fb:28:03:b6:fb:92:74:
7b:e8:54:02:f2:ad:7d:24:5e:c0:eb:28:9e:dc:4b:a6:ea:45:
ff:f8:f5:88:9c:0a:e5:4d:51:56:34:18:cd:2e:e9:b3:ca:9a:
3f:b2:97:51:a2:10:dc:c2:d5:2e:e3:81:2f:6a:3b:8a:4b:db:
16:62:22:bc:66:dc:89:5a:b2:cc:1a:d9:e1:a1:6b:d7:c2:27:
ce:ba:68:26:7c:9b:17:88:f1:17:d1:7b:01:ee:63:59:62:64:
cc:21:70:49:30:5b:b7:8e:86:76:59:79:8b:03:b6:17:ad:07:
8b:9b:25:b1:79:de:c4:c1:7a:e9:07:a9:6a:83:90:42:a6:a3:
67:db:5a:a9:3e:15:d7:8f:9f:0d:9d:55:0d:bd:2f:bf:af:f2:
63:31:83:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:49:15 2026 by rpki-client