Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
File: QxfdFbYr3XESWZuBQjNg7uegEpY.cer (raw, json)
Hash identifier: W0yGFjvgzL3DyIYylE991G75ghfNEU7jLXEy78sJwGk=
Subject key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEE23E1241322DCE2311100D127D6A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:19:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.29.71.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:23:e1:24:13:22:dc:e2:31:11:00:d1:27:d6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:19:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4317dd15b62bdd7112599b81423360eee7a01296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:9c:96:e2:46:c4:97:eb:36:7e:25:d8:f9:
25:fd:c1:b0:45:17:8a:f3:61:86:b0:a0:cc:bc:4e:
91:ba:c6:1f:52:98:65:5c:89:74:c1:42:b0:7b:b6:
97:cb:2c:8c:02:27:bf:b3:f9:94:0c:2e:4c:54:ca:
fc:22:36:0f:1b:90:80:75:ca:23:93:a9:03:9b:0a:
9b:8a:91:31:58:02:36:0b:e0:34:7d:3d:ed:a4:2f:
d0:82:56:a7:07:61:46:88:6c:8b:27:78:61:5e:f8:
48:76:c0:70:4f:f9:6e:9c:43:0e:dc:e2:71:16:29:
30:1a:f3:fd:bd:1d:90:27:b3:70:5b:50:47:ab:46:
5e:25:bf:13:16:c6:b3:d2:e1:bf:04:36:7c:c6:9f:
07:bf:5c:24:be:42:19:fb:56:bf:b0:e6:c4:23:92:
f0:32:88:2a:f6:e3:dd:d4:37:fb:d7:50:d6:72:42:
5d:43:64:24:8a:bd:5b:9e:95:df:91:76:2e:45:7e:
92:80:b8:f3:d2:ad:ca:9d:c5:61:0f:c1:a8:f1:5e:
19:d8:f1:c9:32:63:27:e2:62:fa:97:9a:f9:8d:ae:
84:83:75:6f:90:86:ad:db:34:3f:f7:94:5b:0f:53:
db:b1:4a:ca:28:f0:61:7e:e6:4c:84:5c:b2:f1:82:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.71.0/24
Signature Algorithm: sha256WithRSAEncryption
49:16:1b:6c:c1:ff:1b:5c:78:b5:9a:0c:ac:8d:c1:5a:0b:34:
92:87:0a:ef:cc:c7:66:c8:0e:49:63:7c:e0:29:cd:80:e4:1e:
c2:36:bb:ac:31:24:84:e6:f3:e8:b8:ec:f1:28:d8:c9:29:ed:
56:e3:5c:da:7f:cf:2e:5f:43:36:68:26:c5:eb:36:4d:17:f0:
2c:e7:50:82:a2:54:1e:9f:62:d3:13:26:09:40:4d:b1:e4:c0:
8e:f6:ee:87:0d:3a:73:58:05:eb:64:4b:c6:20:7c:d9:1a:0d:
4c:db:ae:2d:26:23:16:d2:ea:a0:8c:52:1b:07:dc:da:5f:9e:
76:1e:79:04:cb:d9:d5:17:74:61:59:bc:e4:2d:e3:aa:b3:86:
9f:59:d5:cb:da:0a:f8:db:f2:d6:c9:b3:07:d8:67:58:a6:bc:
46:5d:ac:40:b3:32:b8:6d:c9:79:b8:64:73:49:37:cc:f9:c7:
3b:da:26:96:a5:3d:bc:d8:f3:c6:35:7c:b6:08:d0:42:45:90:
1a:36:3c:a8:ea:83:6f:cb:0a:dc:f3:27:fb:8d:61:a7:8e:82:
b9:72:61:d1:a5:f6:1d:01:df:3e:a9:b9:66:1a:f0:70:18:fa:
30:04:ee:64:f3:85:25:1d:9e:61:a9:5e:45:a4:6a:9b:66:76:
6c:8e:1d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:05:39 2026 by rpki-client