Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
File: Qbib03Ns5PAIRzll_a5AdFZ82gM.cer (raw, json)
Hash identifier: 1kyh5rik6L+95+i9OiUTXmqF0ZuMHJFr9WgdIx7iAsI=
Subject key identifier: 41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F138DE75F675EBF08AD956289698ACB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:19:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206888
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:13:8d:e7:5f:67:5e:bf:08:ad:95:62:89:69:8a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41b89bd3736ce4f008473965fdae4074567cda03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a1:66:7b:77:2a:2c:93:5a:4c:1e:fe:e2:ea:
41:05:2f:20:4f:6e:63:0d:bf:49:4b:d9:bb:cf:f6:
45:32:a1:af:f3:ed:9f:11:eb:de:c2:4f:fc:3c:f5:
d9:32:05:6c:a4:21:49:60:4f:ea:3d:26:ab:5e:67:
52:e9:00:0f:87:e8:bb:bb:ea:b9:ee:45:cc:35:9b:
1b:a2:f2:b6:7a:d3:dc:b4:91:a1:35:cf:2f:c5:e8:
47:f6:64:0d:90:5b:d6:26:f2:8a:49:c9:fa:bd:67:
11:15:f6:09:e9:01:cf:e1:96:02:0a:8f:0d:18:18:
56:bf:b7:53:f7:19:70:19:32:d9:be:cf:f4:31:36:
38:50:73:38:80:11:08:0d:fe:e6:53:a7:de:ab:67:
70:e0:91:28:01:bc:75:e1:f3:bd:04:e4:76:8b:90:
bf:d3:c3:2e:ab:4e:e3:a6:fa:18:3d:2a:07:55:70:
47:af:09:9c:de:60:3e:f8:be:45:68:a5:0c:31:56:
27:13:e4:27:cc:c5:fe:59:3d:c0:bb:5a:6d:0e:db:
36:de:a7:1b:27:18:6f:b6:eb:db:41:c5:ab:2b:90:
fb:93:7f:3b:0f:fc:d1:73:5b:1a:3c:f9:12:fa:01:
f8:72:ec:ac:f7:a4:36:0c:b4:c0:6b:d1:8d:27:3b:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206888
Signature Algorithm: sha256WithRSAEncryption
2b:06:65:ec:2b:59:88:12:c3:1a:0c:e4:53:b3:c5:bd:e7:dc:
60:e4:ce:a1:b9:e2:ff:8c:48:d1:cd:a8:83:c7:1e:60:04:34:
b8:93:54:c8:8f:2b:63:3b:a2:b5:26:72:3c:b5:26:c6:1b:af:
2f:f8:7c:e0:cb:a9:31:2f:34:67:9c:0f:bb:ae:8d:54:50:3d:
85:50:cb:a8:b8:a0:12:39:03:0d:8e:0c:72:fc:7e:60:7d:e6:
cd:6b:e7:0a:bd:41:6a:5b:a7:a5:d4:a6:ee:d4:f8:1d:be:41:
c7:a5:eb:c6:32:23:25:00:01:eb:12:0a:4f:56:bc:32:3c:d0:
b0:70:75:3c:c2:a3:71:35:1c:ee:3d:88:f2:28:9b:34:ec:5d:
17:09:90:80:9d:d1:73:fa:72:b3:74:d1:47:00:48:3e:ae:94:
32:20:5f:b4:bd:03:04:c2:17:df:21:45:b4:6f:0c:11:cc:e2:
4b:ba:a3:ba:7b:86:84:cb:bb:3c:d9:20:fc:e2:26:82:4d:ae:
84:e8:40:8e:0d:1c:ae:45:08:fd:69:89:04:ef:61:26:4f:44:
d4:22:31:c0:1a:2d:b1:cd:88:3d:da:c2:b3:6c:af:72:a7:28:
03:02:5d:4c:a8:79:f7:7b:ed:ce:a4:a5:ff:1f:22:52:b6:99:
af:03:11:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:22:48 2026 by rpki-client