Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.cer (raw, json)
Hash identifier: g/H5iLbT5Why6+isWgsIIEKENA+oSrTu6wbmJFBdMAQ=
Subject key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C80D2450A735985A1F50542B43FD072
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:19:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.95.168.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:d2:45:0a:73:59:85:a1:f5:05:42:b4:3f:d0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:19:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:6e:96:39:56:c5:d8:9e:df:89:18:bc:c8:
b1:18:68:97:77:e4:8e:42:9a:0a:64:91:10:f5:d9:
a4:f6:8a:ea:bd:48:dd:0a:38:d6:7b:98:fc:18:7f:
da:c1:ba:19:bb:11:d6:90:5b:c3:e6:f0:16:20:be:
3a:21:2e:8e:3c:25:6c:66:e5:ad:46:78:12:1f:92:
9c:9d:78:c2:68:d5:dd:17:c0:8e:e6:86:09:fa:29:
6b:91:a9:35:b2:60:52:96:35:3b:c1:b7:15:04:cd:
25:36:53:0f:b1:1c:5f:a9:8a:37:68:a3:e3:db:73:
b6:14:06:aa:4b:a9:2a:1c:42:37:b9:06:79:b9:c5:
47:77:f4:88:f4:28:d8:c0:e1:11:f1:e0:b7:2c:1f:
22:3e:d2:bb:07:89:3f:95:8e:ed:5b:83:8d:0b:2d:
f1:37:22:b2:2e:c5:d2:98:f7:91:b2:a9:bb:94:84:
78:a2:4a:9a:6f:c8:80:2b:e9:3d:1e:0f:58:53:54:
61:fb:42:a2:63:ee:ee:c9:1c:c7:f8:11:61:f6:62:
21:39:81:8c:23:14:7a:b5:eb:66:cd:f2:ed:6b:c9:
10:62:44:46:88:05:54:1c:b3:86:4e:77:a9:ec:d2:
67:35:10:79:3d:79:ef:2e:35:94:92:9e:3a:c3:ad:
7c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.168.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:21:29:04:db:10:14:ad:c6:77:12:cf:f3:7d:d1:09:cd:ec:
41:c0:8f:c1:ad:9a:89:71:ca:cd:b6:5b:ff:63:0f:ad:70:f2:
59:02:ab:15:3b:cd:c7:6d:84:aa:e3:84:64:ab:7f:13:b6:c8:
01:bb:e0:e3:1d:03:90:de:0c:e8:e3:d7:9a:2e:44:ff:f1:2f:
ee:0c:cd:47:53:5b:60:ed:19:7b:a7:a3:cc:35:e0:36:a0:3d:
f4:18:7c:0f:17:d1:e8:cf:31:6b:af:68:3f:f5:68:fa:69:e2:
98:a9:eb:7f:a2:2d:32:50:e9:06:8f:6e:00:86:2d:9e:53:72:
9f:2b:61:92:3d:b1:1e:95:3b:2b:9b:72:88:ad:0b:77:79:08:
b8:87:49:37:5b:fb:a2:37:42:74:8d:3d:b5:0d:8a:68:3b:8b:
60:0a:7d:63:5c:b3:fa:dd:c3:0e:a8:e0:a6:15:36:23:fd:3b:
8a:ab:cf:15:9f:fa:86:7d:73:bc:58:07:a0:da:6b:0d:9c:e2:
a0:ba:bc:1e:7b:f5:37:b5:50:ef:4e:6c:10:c5:65:ea:29:ee:
25:f8:d4:d8:81:ef:bc:8e:80:2a:92:d4:a3:5e:a0:d8:4f:0e:
ec:86:be:6d:43:bd:fe:31:e2:b7:c4:32:f9:89:74:c0:e5:6f:
d7:b1:bf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:27:14 2026 by rpki-client