Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
File: Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer (raw, json)
Hash identifier: yUN+ALK22joXDx2+YdKYn3GLM4u0a3GhJREICPPaTlw=
Subject key identifier: 42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DCA9658DCF8485A833C41F8E388709D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:19:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.50.112.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:96:58:dc:f8:48:5a:83:3c:41:f8:e3:88:70:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:19:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:1a:59:ee:86:42:b5:e9:d2:e5:e1:b7:2e:
a2:0d:06:44:20:8c:a5:42:56:7c:d9:b5:68:a5:6c:
07:44:d9:8a:c5:78:c5:5e:15:99:fb:f2:58:ec:ee:
26:25:1d:d1:e6:6f:13:20:44:cf:1b:5b:53:7c:64:
3a:f8:ff:ea:6b:90:c4:9b:2e:3a:2b:8a:83:45:90:
da:eb:8f:c3:21:cc:51:01:f6:ca:9f:b3:2e:41:b0:
f8:c1:f9:85:7a:dc:83:73:8d:20:f6:0e:53:42:3d:
37:29:6e:6c:f8:b7:62:00:1f:68:2f:f2:fb:70:29:
44:cb:6e:c2:85:ed:a3:e7:39:e7:30:e8:de:18:24:
e5:04:55:51:40:84:76:37:ed:ba:78:c7:48:29:5b:
b7:04:ae:91:da:ed:18:03:68:79:37:52:fa:d7:4a:
cc:de:36:aa:4c:e4:38:d1:8a:8b:0e:93:66:02:cf:
72:70:dd:1b:d1:06:64:b4:71:14:2c:0c:00:da:22:
2f:93:15:8b:14:dd:c7:14:72:15:cb:03:b7:b1:4f:
1e:21:66:ef:6b:1a:47:17:eb:93:d4:2f:b6:e0:e9:
f7:cc:d3:76:e3:1a:9e:45:53:df:ed:11:8f:35:9a:
4c:90:f6:8a:1f:de:99:13:c0:20:63:ac:58:f7:8b:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.112.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ae:d1:08:bf:5e:54:ed:68:06:af:7b:1e:2c:63:76:68:91:
2b:cb:48:dc:77:04:02:bf:2a:bc:cd:76:07:3c:47:1e:1e:4a:
ec:03:79:76:88:e2:e1:6a:46:53:8b:2c:66:94:9e:05:ad:06:
a8:33:49:15:cc:68:de:ac:1c:0a:c4:ca:f2:09:cc:66:33:e5:
5e:13:dc:2d:8d:32:28:c9:8e:5a:0b:02:0e:cb:93:08:84:6f:
dd:64:24:4e:0c:08:a7:f2:37:fb:88:54:3c:fa:4c:ae:cb:42:
9c:7e:0f:f6:27:06:ad:71:b7:78:ea:34:aa:1e:8d:89:99:77:
1f:ad:3f:94:46:dc:5d:3c:25:c9:1f:3a:e5:8b:95:8f:ce:29:
d4:56:f9:88:b0:70:e4:99:49:5a:63:57:89:a4:da:d8:ea:ee:
bd:1f:31:4e:60:a0:84:a1:2e:4f:f0:69:5f:61:52:95:da:10:
0d:cd:10:46:af:7d:1d:62:0e:c5:6d:7a:d7:cb:9f:50:c9:a5:
57:17:12:1c:2f:a9:0b:56:bc:ec:53:2f:0a:c1:19:e5:dc:b5:
92:cd:7a:cf:83:d8:ed:dc:4f:7c:87:2d:13:c6:f3:1a:ab:38:
55:03:2d:8f:16:a2:dd:73:df:37:bf:46:20:c9:4f:80:63:c3:
66:f6:07:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:14 2026 by rpki-client