Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
File: Q5p_k_yoCMgtJvv-D94bloz26NM.cer (raw, json)
Hash identifier: IPtj06YermIQ2/qAyXAySHQWl+n2csmNwl7TX6JN61o=
Subject key identifier: 43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CED1D8417F9A81378A178CAAB26ED45
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:17:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198824
IP: 2001:67c:c74::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:1d:84:17:f9:a8:13:78:a1:78:ca:ab:26:ed:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:3a:4c:ab:2f:be:56:52:b6:bc:25:af:fb:
4f:52:50:36:43:39:3e:d2:8f:dc:8b:1f:91:f5:e2:
31:7f:44:a1:06:7c:6e:7b:4b:ee:ec:97:4a:f8:4f:
37:43:1f:f8:73:2f:c0:06:a0:06:7b:42:58:9a:ca:
33:ff:c9:83:c2:65:e9:f3:34:d7:13:41:3d:43:c1:
b8:9f:e5:dc:87:5b:61:a6:6c:bb:39:84:14:46:0c:
20:6b:df:59:2b:67:de:84:85:ff:00:65:2f:4c:71:
d4:4e:72:1c:ab:eb:53:52:dd:9a:db:d7:d1:d0:11:
c2:ed:53:b2:f7:65:00:f0:00:c1:e6:26:20:50:9b:
ed:61:18:c9:ac:87:8a:17:b6:7c:a6:9d:32:49:31:
e2:ae:3b:5e:cc:f5:ad:5d:a4:3c:7f:23:3d:80:14:
1e:4f:7d:4b:b2:5d:78:41:cd:b4:fa:d8:fb:26:5b:
26:b0:36:69:f9:7c:9e:31:50:f8:81:1d:9b:01:15:
53:93:00:ba:fc:e6:f2:79:12:2c:66:19:4a:c5:29:
cc:8d:ce:8f:c2:fa:98:2f:3f:a0:1f:e3:51:11:0d:
13:06:3d:01:b6:22:8c:13:5c:76:58:e3:d9:65:96:
11:c6:7a:83:d1:93:cc:c3:ee:97:23:64:4a:89:af:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c74::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198824
Signature Algorithm: sha256WithRSAEncryption
42:c6:6e:3b:31:01:58:8b:8f:97:4a:6e:81:bf:e2:05:1c:87:
ce:b8:91:b8:51:98:83:1d:0c:bc:c6:57:31:67:89:09:1c:4a:
20:d1:8b:b8:e6:57:97:48:23:77:01:87:49:27:c8:e2:3f:20:
4a:11:71:c0:75:48:83:4f:c6:5d:80:0e:94:2a:8b:ad:8c:78:
89:77:d4:ca:d5:b0:4b:47:a7:e1:41:03:01:fb:1f:69:27:56:
53:3e:26:a6:87:61:1a:98:85:15:3e:0a:e3:1e:3c:9f:de:eb:
2d:88:2f:3c:82:27:67:18:1e:4e:8e:13:7d:f9:25:66:7a:f6:
04:31:61:bf:65:08:31:09:69:f3:de:9c:86:af:73:ef:b1:eb:
34:be:d2:87:a8:0e:b2:0b:15:dc:86:b3:e4:d9:09:6f:a6:30:
b8:e1:25:3d:ea:ff:3c:a2:5e:f8:59:43:5f:51:56:f2:54:4e:
fc:ed:20:7e:8e:b7:c6:fb:98:86:5e:65:9a:e9:e9:47:b0:f5:
d6:6a:a8:54:1b:40:ca:14:09:a4:33:03:de:f0:98:60:0f:31:
c4:2d:e8:a3:94:69:b3:c9:bd:c6:ef:b8:ef:c8:fe:11:89:71:
98:25:a7:cb:89:be:69:66:cf:0f:e1:98:9a:0b:08:dc:1e:cc:
b8:11:8c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:18:23 2026 by rpki-client