Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer (raw, json)
Hash identifier: nMfpHp+EparFgKuPd1GRHYEe/4WnkBt24KEdV26/2Ho=
Subject key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA4BEDFBDAA3EB70C98B41A1DA7004D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:18:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.216.90.0/24
IP: 2001:678:2c4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a4:be:df:bd:aa:3e:b7:0c:98:b4:1a:1d:a7:00:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:d3:61:57:60:e0:87:a9:36:ea:6a:76:7b:
70:59:99:4e:f0:38:92:aa:7b:eb:cf:60:26:45:40:
12:b1:47:20:e7:7b:b9:ee:d0:9f:67:c7:19:b8:1c:
4c:00:db:00:06:ce:f5:c2:f8:c7:ef:be:8a:c5:b5:
f7:ac:49:55:a7:cc:9f:7a:11:8c:76:c6:0e:9d:53:
7e:82:32:c1:c5:a5:0b:35:0d:67:79:cd:15:7c:58:
d8:de:c6:76:28:68:02:e4:d7:1c:09:6b:65:30:0f:
1f:46:b5:4b:6f:13:a9:bc:f1:0a:54:a3:4b:a4:85:
07:0e:b4:a4:69:6e:b0:a8:32:2d:2a:e0:39:07:7b:
b9:09:cb:b2:9f:cb:d7:fe:44:60:4f:72:45:a5:ba:
d7:bd:4e:73:45:85:bd:3b:4c:af:b1:a9:a9:e2:16:
ea:b3:ec:8c:c7:70:8e:4b:5e:c5:48:d6:ca:f3:a9:
7a:5b:70:1a:b4:be:7d:58:1c:54:88:27:ce:d2:aa:
79:b1:0c:3a:b1:4b:3a:9f:39:e5:b9:b0:4c:c3:39:
21:46:30:1b:08:60:40:85:f5:a2:22:22:69:71:64:
af:a0:85:3b:60:c8:b8:6c:6a:e4:f9:62:79:b9:31:
29:f8:92:97:e3:e5:38:fc:79:7d:70:28:15:78:8b:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.90.0/24
IPv6:
2001:678:2c4::/48
Signature Algorithm: sha256WithRSAEncryption
75:7f:44:dd:fd:7a:d6:71:57:25:c6:7a:a0:e9:62:e8:c7:d1:
05:8a:55:3c:f5:00:42:1c:ab:ff:ba:68:ef:c5:1a:4a:55:cd:
96:4e:1d:23:01:51:89:6a:82:2d:85:32:15:0b:e8:13:01:5f:
92:c2:c7:e8:b3:17:0e:f3:bc:b0:7a:85:94:8e:c7:3a:57:83:
db:9f:7c:90:7c:77:78:51:65:c0:85:b5:86:8a:9a:3b:84:3a:
7e:6f:e4:c0:f7:16:fb:22:53:2b:4a:4e:c3:c7:84:c5:ff:d8:
41:fe:ff:ac:ae:99:20:a5:fe:4f:39:5b:94:09:6f:12:a3:fb:
4f:56:20:cb:b4:e3:57:26:54:1b:2f:80:1a:c5:fe:4e:7d:40:
46:d4:ce:d0:5e:76:58:05:7d:7b:c1:05:f7:1c:75:ea:84:a2:
5f:92:39:fd:4f:d7:97:e6:eb:b9:f5:06:8c:d7:b7:a5:07:ae:
97:e2:a9:41:99:5b:14:4e:45:99:02:82:a9:10:c8:1b:f8:79:
3c:b0:cb:ba:09:9d:69:cf:02:44:53:61:9f:b3:5e:d5:5e:8e:
07:74:49:9c:76:c5:39:da:00:c8:5a:e3:0b:1d:ac:f0:af:be:
05:b2:c4:fa:70:4f:9b:a9:7c:b2:16:4f:3c:20:77:e8:e0:28:
8c:ed:e0:c7
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAZt+pL7fvao+twyYtBodpwBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzljZWQ5ODA1YTNjNWQ5MzRlMmM1MjFhMTdhOGFiOTRmMTFhZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xHTYVdg4IepNupqdntwWZlO8DiS
qnvrz2AmRUASsUcg53u57tCfZ8cZuBxMANsABs71wvjH776KxbX3rElVp8yfehGM
dsYOnVN+gjLBxaULNQ1nec0VfFjY3sZ2KGgC5NccCWtlMA8fRrVLbxOpvPEKVKNL
pIUHDrSkaW6wqDItKuA5B3u5Ccuyn8vX/kRgT3JFpbrXvU5zRYW9O0yvsamp4hbq
s+yMx3COS17FSNbK86l6W3AatL59WBxUiCfO0qp5sQw6sUs6nznlubBMwzkhRjAb
CGBAhfWiIiJpcWSvoIU7YMi4bGrk+WJ5uTEp+JKX4+U4/Hl9cCgVeIu/twIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFEOc7ZgFo8XZNOLFIaF6irlPEa7FMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzdiNTA3
YS1mZWNkLTRhZTMtODA1ZC1hNzc4MzQ1YWVkODgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvN2I1MDdh
LWZlY2QtNGFlMy04MDVkLWE3NzgzNDVhZWQ4OC8xL1E1enRtQVdqeGRrMDRzVWhv
WHFLdVU4UnJzVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAW9haMA8EAgACMAkDBwAgAQZ4AsQwDQYJKoZI
hvcNAQELBQADggEBAHV/RN39etZxVyXGeqDpYujH0QWKVTz1AEIcq/+6aO/FGkpV
zZZOHSMBUYlqgi2FMhUL6BMBX5LCx+izFw7zvLB6hZSOxzpXg9uffJB8d3hRZcCF
tYaKmjuEOn5v5MD3FvsiUytKTsPHhMX/2EH+/6yumSCl/k85W5QJbxKj+09WIMu0
41cmVBsvgBrF/k59QEbUztBedlgFfXvBBfccdeqEol+SOf1P15fm67n1BozXt6UH
rpfiqUGZWxRORZkCgqkQyBv4eTywy7oJnWnPAkRTYZ+zXtVejgd0SZx2xTnaAMha
4wsdrPCvvgWyxPpwT5upfLIWTzwgd+jgKIzt4Mc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:26 2026 by rpki-client