Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
File: QVf9g-CODzHnlRRnfAmIEe9pBtc.cer (raw, json)
Hash identifier: xE7a5s5IKMFLzxvOvn41NEisjRj11EBX/5q0kWYUSTc=
Subject key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E386EDD963074B87432AC0308634984
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:19:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200573
IP: 185.239.40.0/22
IP: 2a0c:3e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:6e:dd:96:30:74:b8:74:32:ac:03:08:63:49:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:19:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:c8:21:6a:fd:d1:30:8d:f9:e5:0c:8c:2f:
fd:e9:92:3e:87:4c:de:e2:c7:37:9a:4e:c1:99:2c:
4e:79:b9:ba:6d:f4:90:62:1e:24:1f:38:bc:e6:e8:
6f:d4:41:de:e2:15:c6:89:2a:d5:c9:43:f7:22:dd:
c7:28:1f:43:de:4d:0f:04:e6:f2:4e:a1:8d:1f:44:
7d:03:23:2d:2e:79:49:46:b3:70:f2:02:b1:1e:5f:
0e:22:69:0a:6e:f4:30:05:76:70:bd:45:d7:fe:88:
1c:fe:d2:56:62:2f:b2:7d:f5:c5:16:ef:51:fb:8a:
42:54:27:23:18:82:91:99:28:cd:98:06:6f:26:b7:
b4:69:c2:07:2a:2c:50:cb:da:7f:ae:4e:c3:89:c3:
29:ad:be:52:20:22:5d:37:0a:53:82:41:49:c7:53:
80:3d:45:f3:14:a3:89:79:e3:97:75:9a:cd:90:59:
97:6d:05:25:c7:aa:6b:89:90:67:1a:e2:f1:9d:50:
7f:13:06:6e:f2:ba:e6:8b:8c:1d:fe:06:8d:9d:9d:
fe:88:16:ae:a7:0c:ee:24:c6:39:09:5a:d7:7a:3b:
c4:82:c4:78:a7:a3:0a:8b:7f:5d:b3:5f:d2:01:89:
b2:3c:12:7b:17:dd:95:cc:a8:b5:10:e5:e3:29:01:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.40.0/22
IPv6:
2a0c:3e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200573
Signature Algorithm: sha256WithRSAEncryption
04:cc:37:f8:21:22:c1:ba:7c:87:cb:87:67:63:11:d8:9e:da:
33:ec:da:9b:d5:3a:72:29:59:e6:e0:2a:87:a4:10:f4:7e:f8:
39:35:c6:52:7c:ed:4e:ca:10:40:10:6d:95:d7:ee:bd:9d:1b:
5f:dd:f8:69:81:b1:a2:50:ae:8a:eb:fb:48:07:81:5d:7c:e8:
bb:4d:e3:3f:f8:42:ae:e4:4a:6b:17:8d:21:ac:93:96:ff:b1:
8f:aa:30:bc:d8:d7:d0:c7:bc:5d:09:cc:94:a6:cb:8f:e2:36:
76:5d:20:69:97:b7:59:37:bb:33:0f:1b:53:5a:ab:85:5c:87:
c6:6f:70:2a:73:3b:7a:c3:f6:1b:8b:f7:b3:5d:f3:d7:b0:41:
44:38:88:1f:15:5d:fd:44:96:40:3c:d4:8b:95:73:7d:41:e2:
57:c9:1b:f9:fa:1e:a1:00:d9:3e:ed:2b:f6:9d:d0:5a:44:87:
57:4d:8f:85:bb:b9:27:15:8e:35:1a:8f:10:55:9a:ea:d9:eb:
be:4e:eb:f6:63:08:22:1a:43:23:73:9c:10:31:19:67:9d:4d:
94:23:db:53:16:70:f4:2a:dc:bf:4a:40:34:ff:e2:58:c5:06:
71:e6:35:ef:03:1d:6b:1a:50:d0:e6:e1:ae:05:96:96:97:29:
e4:dc:c1:d9
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt+OG7dljB0uHQyrAMIY0mEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTU3ZmQ4M2UwOGUwZjMxZTc5NTE0Njc3YzA5ODgxMWVmNjkwNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIvIIWr90TCN+eUMjC/96ZI+h0ze
4sc3mk7BmSxOebm6bfSQYh4kHzi85uhv1EHe4hXGiSrVyUP3It3HKB9D3k0PBOby
TqGNH0R9AyMtLnlJRrNw8gKxHl8OImkKbvQwBXZwvUXX/ogc/tJWYi+yffXFFu9R
+4pCVCcjGIKRmSjNmAZvJre0acIHKixQy9p/rk7DicMprb5SICJdNwpTgkFJx1OA
PUXzFKOJeeOXdZrNkFmXbQUlx6priZBnGuLxnVB/EwZu8rrmi4wd/gaNnZ3+iBau
pwzuJMY5CVrXejvEgsR4p6MKi39ds1/SAYmyPBJ7F92VzKi1EOXjKQHYHQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEFX/YPgjg8x55UUZ3wJiBHvaQbXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5L2MyNzMw
Ny0xZmRkLTQyMWItYmJmZC1lMjgzMWNkN2ZjYzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvYzI3MzA3
LTFmZGQtNDIxYi1iYmZkLWUyODMxY2Q3ZmNjOC8xL1FWZjlnLUNPRHpIbmxSUm5m
QW1JRWU5cEJ0Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCue8oMA0EAgACMAcDBQMqDD6AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMPfTANBgkqhkiG9w0BAQsFAAOCAQEABMw3+CEiwbp8
h8uHZ2MR2J7aM+zam9U6cilZ5uAqh6QQ9H74OTXGUnztTsoQQBBtldfuvZ0bX934
aYGxolCuiuv7SAeBXXzou03jP/hCruRKaxeNIayTlv+xj6owvNjX0Me8XQnMlKbL
j+I2dl0gaZe3WTe7Mw8bU1qrhVyHxm9wKnM7esP2G4v3s13z17BBRDiIHxVd/USW
QDzUi5VzfUHiV8kb+foeoQDZPu0r9p3QWkSHV02Phbu5JxWONRqPEFWa6tnrvk7r
9mMIIhpDI3OcEDEZZ51NlCPbUxZw9Crcv0pANP/iWMUGceY17wMdaxpQ0ObhrgWW
lpcp5NzB2Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:37:22 2026 by rpki-client