Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
File: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer (raw, json)
Hash identifier: HfAdSU0m142X/mcKKDTdw5059hpMjZKnt39j4/tJDVg=
Subject key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A2FD09042B78A17DF38B6FDA7DC57E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 49892
IP: 94.143.128.0/21
IP: 185.169.216.0/22
IP: 2a04:6a40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:fd:09:04:2b:78:a1:7d:f3:8b:6f:da:7d:c5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41cede907492e50c951263957881bc3cc5ce30ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:7e:4b:35:cb:ef:4b:12:69:51:72:c9:b6:
33:9f:9c:33:c3:61:83:8c:ae:aa:69:64:9e:e6:18:
d5:f9:8c:43:b2:24:79:4c:cc:0c:1a:b5:d7:66:be:
fc:6f:2e:93:f6:bc:34:1d:9c:5a:82:b5:14:96:e0:
ba:19:59:0a:bd:0a:ca:a5:a2:67:b3:76:2f:4a:65:
f9:01:50:70:03:3c:11:61:7b:d1:f9:e2:b2:16:9a:
c6:22:4f:aa:16:0e:da:6e:eb:14:7c:98:ef:c8:7f:
e7:c9:fd:94:ca:f9:12:d5:81:62:47:fb:4f:66:23:
45:68:21:e9:ee:33:d4:29:1a:c8:32:04:bb:c7:9b:
1b:e4:c0:e4:84:5e:5a:2b:6f:c8:3a:86:5b:8d:c0:
88:20:5c:1d:0d:a6:57:d5:6b:4b:01:06:68:4c:2e:
4f:5d:db:b3:cd:06:69:10:1e:28:ab:54:ec:cc:39:
4b:a4:35:d9:e5:fd:09:a0:8a:03:44:7c:00:e3:15:
4c:96:fe:e6:b6:63:f8:af:f1:aa:0a:b2:11:c5:62:
bc:6b:3c:5b:b0:d5:1f:bd:20:ee:00:d0:13:af:c6:
83:f1:88:96:7b:26:51:fe:51:e7:d9:67:dd:a4:51:
28:09:15:48:52:3a:e1:8d:8b:11:5a:a7:1d:45:fd:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.128.0/21
185.169.216.0/22
IPv6:
2a04:6a40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49892
Signature Algorithm: sha256WithRSAEncryption
92:9a:97:79:84:ad:f3:17:61:75:66:44:6d:3d:91:2c:cc:6d:
24:a5:bd:5e:62:4c:94:21:86:17:92:6d:01:17:8d:05:48:42:
0a:86:ca:36:d8:6a:b6:02:09:c6:05:c3:ac:5d:c3:9d:cd:e9:
35:97:d0:df:c1:0e:60:c6:ad:1d:a4:83:85:d9:d2:25:72:ba:
2b:41:d4:84:ff:67:bb:a5:fa:3c:01:7a:d2:6c:f8:aa:85:32:
7e:03:95:9b:65:5a:6a:f8:08:70:44:6e:fb:58:8a:97:70:6e:
ee:f8:08:22:4d:e9:1e:fe:86:e3:44:54:d1:2f:12:83:4f:ff:
b9:fe:95:17:58:06:9f:6e:50:0a:27:dd:79:26:a7:22:72:6f:
56:7a:7c:cb:f4:0f:57:64:4f:8f:35:2e:db:95:4a:f3:9d:90:
4f:44:45:a3:1d:a9:bb:60:5e:6a:f4:41:0f:8a:76:ab:39:e8:
98:32:18:78:a8:4b:e1:d6:e1:2d:6e:62:d6:fc:6c:5e:bc:c8:
82:e9:2e:bd:ba:3e:d1:42:66:75:f1:4a:58:8d:fd:e1:8d:2b:
60:b1:75:2e:2d:0c:8b:d2:98:96:3b:96:ce:7e:77:46:4c:d2:
68:c4:5a:eb:e1:65:eb:b2:7c:19:5a:64:29:f3:04:d8:07:4a:
4c:e2:92:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:24:26 2026 by rpki-client