Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
File: QHznj0rDupAqDDjcAaDF8hJlGbA.cer (raw, json)
Hash identifier: OH203lUMPtLMTW8sR26ka7law74Q/udbsvGUAonHD9I=
Subject key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FF56AF5D7AE2AAF355360B122213A3DC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 12 Aug 2026 10:00:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 31.25.196.0/22
IP: 185.106.240.0/22
IP: 2a06:4100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:6a:f5:d7:ae:2a:af:35:53:60:b1:22:21:3a:3d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 12 10:00:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:0e:50:07:14:9a:66:7f:6f:87:56:1d:73:
b0:9c:88:34:dc:f9:d5:2b:89:d6:9d:6e:44:02:40:
ca:96:90:b0:96:0a:eb:0c:59:46:bc:7b:f3:d3:89:
0c:7d:73:26:0c:4c:99:8e:7d:f1:37:04:e2:6a:f6:
9f:20:87:32:de:40:b0:ad:ef:27:43:d3:23:27:01:
19:bc:de:b7:9f:7c:1c:8a:67:a8:70:5c:13:3a:d7:
4c:f9:22:04:55:b9:b5:4a:c9:1c:6b:0c:bc:ca:39:
a7:c5:5d:5d:f0:26:0e:05:a2:3e:a7:3e:5b:f1:a3:
b4:74:d7:64:7e:d7:fb:b3:10:5e:e1:04:8f:6a:2e:
ca:fe:42:51:7f:3b:a2:ec:83:67:3a:f1:48:71:12:
00:95:fb:dc:55:48:80:79:b9:83:d3:7c:66:7d:b4:
50:b7:3a:2d:62:69:2a:3a:1e:61:cd:b3:2e:dc:e0:
21:40:9b:e0:59:81:ca:af:1e:e7:f9:4f:db:fc:fd:
a5:01:71:32:3a:ae:11:27:8d:c1:3c:ae:d6:83:42:
e7:cd:70:68:c3:e9:bc:38:13:e5:4b:b8:aa:2f:7b:
b1:d0:04:78:77:60:c0:81:81:9e:b3:5a:3c:4e:f2:
a0:93:80:a3:d5:30:75:1b:8f:c8:5c:7d:88:d3:74:
e5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.196.0/22
185.106.240.0/22
IPv6:
2a06:4100::/29
Signature Algorithm: sha256WithRSAEncryption
52:fa:23:d0:2d:a5:d5:95:e5:6d:38:dd:ac:ab:82:26:3e:80:
ad:54:77:41:17:ff:6e:10:ce:13:b3:d1:df:97:c9:c9:78:ad:
32:42:82:fe:5d:b6:df:9d:2d:57:99:05:5c:f0:b8:f2:21:e2:
76:5c:33:08:bf:52:53:27:68:15:37:97:24:95:df:d8:f1:cb:
a4:34:ef:21:d2:b2:a8:5c:37:93:2f:48:61:13:0a:1c:8a:84:
27:0a:23:fa:2a:87:df:f9:73:1b:4f:79:4a:f1:e5:48:ab:55:
6e:c9:18:c5:6d:29:bf:a0:59:8c:7b:a5:f4:0c:e7:31:63:d5:
48:80:4b:0a:5e:03:de:11:93:56:c5:d3:08:c1:f3:6a:9b:0b:
19:a9:54:05:61:43:ed:7f:8a:4c:12:54:74:b2:f6:30:82:5c:
f0:ab:45:c0:ee:9d:26:ad:e5:ca:5b:29:fe:58:83:82:e4:97:
11:26:7f:38:1d:2e:8b:e0:ca:ce:33:da:60:a3:f6:a3:54:df:
da:ca:e9:34:94:d8:d2:39:42:52:31:17:56:3d:d4:67:21:67:
95:6f:71:8c:e7:95:0d:81:a6:ea:3f:81:5d:e5:4f:43:3b:b2:
88:34:f0:78:f5:b6:55:8e:b4:49:4e:4c:4b:6a:49:38:83:de:
94:2e:89:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:04:03 2026 by rpki-client