Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
File: QnzFUqtX26-kYh-13Fk6RWB8-wo.cer (raw, json)
Hash identifier: Wg07TH6FHpCF3IIQHrgseA/+UXhrX+jqsqR4vRKxHGs=
Subject key identifier: 42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA3B61D1474289B013E0D646599817B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:18:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42636
IP: 91.192.244.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:b6:1d:14:74:28:9b:01:3e:0d:64:65:99:81:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:f6:45:02:06:e1:ec:df:89:db:60:de:81:
8c:92:83:6e:e9:32:71:7f:04:8b:b1:8d:70:6b:26:
0b:50:34:ff:05:85:4a:46:7b:6c:8b:69:e8:2f:b3:
98:f6:38:c1:93:37:4f:6e:3f:21:32:fa:62:18:d2:
3a:13:9e:2e:4a:85:52:0b:5f:df:7a:5a:ab:af:aa:
83:e0:4d:27:19:ee:32:6c:eb:ea:cb:57:d4:67:3b:
ad:22:dc:50:f6:61:89:85:70:5a:1c:4f:fc:ba:43:
24:db:f3:1d:e3:99:c9:de:77:1a:52:73:35:d7:ae:
79:1e:a2:c7:da:54:0a:70:e6:e0:04:3a:2d:bb:8b:
3b:24:33:50:34:26:1f:35:51:be:58:59:2c:48:e6:
0d:ec:95:5e:bd:4c:b0:7d:84:fe:a7:a6:60:07:19:
a0:57:e5:54:a4:5b:ff:74:cf:43:03:2e:08:0e:1e:
d7:42:de:0b:58:6a:e6:f3:15:99:b2:3c:b6:8a:9a:
ee:94:b2:0c:1c:e7:d9:2b:25:ca:86:06:c7:d8:05:
ce:b8:4b:df:d4:64:e6:69:f8:45:71:0e:98:b1:a1:
df:23:c6:6e:4c:a5:47:23:68:8e:d6:b7:7c:f7:cc:
6a:10:65:2f:27:b8:a0:40:22:59:98:00:0b:e6:14:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.244.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42636
Signature Algorithm: sha256WithRSAEncryption
38:a1:24:4e:d3:31:b8:4e:9f:f8:60:5d:0a:4d:08:0f:3c:7f:
87:3e:9f:90:27:ed:ed:9c:b0:69:59:84:d0:93:f2:f2:e4:ba:
8f:98:ba:14:65:88:ec:4d:67:29:52:0f:44:16:93:12:73:34:
5b:e0:02:5b:5e:c1:80:80:d7:d7:c9:61:f0:98:be:80:72:4d:
20:75:7d:d4:e0:cf:a3:9e:e0:61:4a:4e:ea:3f:b2:5f:d5:cb:
dd:65:9c:24:f7:71:12:66:83:e6:61:3a:03:c5:e4:7c:b5:ee:
81:e9:f0:f0:98:4a:8f:6e:be:3a:c0:fc:59:56:8f:45:2e:e4:
1d:42:69:bf:ff:72:4f:aa:01:a9:81:0a:f8:7d:7b:2e:53:d3:
70:13:03:ec:c0:ea:22:6a:1a:d6:8f:cd:83:51:cf:7f:de:ea:
92:88:86:38:2e:3f:a3:ef:ff:c5:0c:dc:3c:dc:fa:1c:29:fe:
4e:92:ab:90:53:1c:7a:d8:5d:54:46:fc:4f:bd:a8:83:ff:18:
b8:63:5b:75:54:c4:c6:4d:f0:91:48:69:20:e5:5f:26:27:2b:
78:9b:57:05:71:ea:75:bc:57:9c:45:fc:6a:38:08:4b:c2:72:
4f:b3:b5:e7:ae:d3:40:0c:14:f9:1e:93:16:5d:1a:88:78:96:
3f:18:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:12:06 2026 by rpki-client