Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
File: Qfg9IXNOBVXHoTxIVhygt3V6ago.cer (raw, json)
Hash identifier: NxAmJjW7BjzOoJ2ajZYAsLYJkPQnFbfrFJBIdvw8Y6g=
Subject key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEE111AEE24ADEBF0C69B9CE1CCC97B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:18:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206391
IP: 2a0b:ad80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:11:1a:ee:24:ad:eb:f0:c6:9b:9c:e1:cc:c9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:61:1d:b3:85:ff:b9:58:3a:4e:11:2a:9f:9d:
34:e2:19:00:66:7f:63:2e:3c:1d:c3:2d:b3:02:37:
60:d8:cb:0b:3c:49:77:25:f3:b4:a6:48:75:35:85:
30:80:9e:cd:49:4a:87:14:b3:80:38:1c:c8:02:ec:
1c:63:ef:3e:84:83:5f:02:ef:51:47:8a:5b:86:7a:
68:17:2e:aa:f5:2c:a6:dd:aa:76:b8:6c:69:e7:28:
ca:75:1d:eb:b1:da:7c:2e:c9:1d:d7:0e:4a:12:19:
5d:78:d8:4f:96:6c:41:a7:d7:60:d6:43:8d:53:d7:
2a:61:b0:52:97:f1:c3:e6:05:2c:e5:a0:32:7b:dc:
35:48:e5:72:ae:c0:73:19:9b:99:06:72:14:0a:c3:
5e:f8:98:0d:f5:55:bb:cf:04:58:d0:ab:57:2f:b3:
1f:93:d1:f9:7c:3c:be:26:77:ac:c5:1e:ab:23:51:
8b:9c:49:6a:10:33:00:35:86:43:d0:7f:50:05:7d:
76:de:d3:08:27:a0:07:c6:7e:b4:df:72:ae:bc:6b:
c6:51:5f:ec:55:07:8b:d7:23:a9:a8:f2:7c:df:53:
72:96:69:d5:dc:fb:99:8e:27:b1:82:e0:73:4f:42:
09:ba:36:ba:38:a8:5a:12:9a:77:e9:01:c0:02:75:
20:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ad80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206391
Signature Algorithm: sha256WithRSAEncryption
69:0b:52:1f:b2:72:98:ab:91:06:e2:11:ff:f8:b2:4e:90:cf:
35:97:16:72:b0:32:61:13:d0:9f:44:12:26:9d:d0:08:c0:31:
62:e7:35:b9:9f:b8:67:9a:10:f3:c7:15:59:1f:4e:85:88:7b:
46:54:d2:5c:fd:b3:59:e1:6e:41:bf:26:f5:14:93:36:3f:0c:
0f:62:a8:53:50:e4:7c:45:9c:a0:fd:fa:50:43:66:5c:91:1b:
cf:50:8e:cc:bc:56:a3:f1:8d:bd:97:c5:f0:eb:35:65:f2:dc:
17:20:d9:04:fa:d8:5c:ac:f0:83:06:e0:14:6a:1c:1c:30:31:
2c:49:d4:7e:9a:b5:45:28:a5:d0:ec:d4:1a:9d:cd:53:3b:12:
db:d9:7d:e7:da:7e:9a:b3:0f:e5:65:7e:51:83:8e:58:0b:e1:
25:41:d9:1c:bb:46:bc:97:9a:1b:14:92:e6:0f:08:71:98:25:
da:71:1b:b8:75:a5:f1:61:ee:fd:85:2f:2b:f9:df:11:b6:56:
fa:9f:2b:31:09:d2:c6:f0:ea:9b:82:aa:48:5f:d1:f8:9a:f6:
9a:d9:ce:17:8b:38:26:14:61:a7:25:53:5c:12:0f:04:3c:42:
8e:cd:c5:6f:ce:dc:ff:cf:66:d1:cf:9d:b8:6e:ed:5b:15:35:
ca:63:d7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:59:56 2026 by rpki-client