Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
File: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer (raw, json)
Hash identifier: 89WozpGa6TMjg0yzx4kw7UMGK9vle+uH4ameLDqf3ns=
Subject key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5C243D097B93549DD557B79C555894
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:19:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 141.41.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:24:3d:09:7b:93:54:9d:d5:57:b7:9c:55:58:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:19:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:32:cb:b8:32:ae:b2:4b:72:a6:c2:cb:fe:
33:fd:b7:7b:19:30:ab:5f:f0:f8:4f:86:dd:3a:74:
0d:11:fe:90:12:39:08:fb:93:8e:80:59:9b:7e:2c:
07:0f:13:29:4b:b7:12:00:0a:e9:77:fb:af:60:92:
5e:c2:56:16:c1:33:c9:a8:cd:95:36:8d:fa:ce:d5:
9b:79:38:af:b4:a0:37:6e:06:48:4a:0a:66:35:de:
03:da:00:99:98:b8:42:01:da:0a:77:d1:d6:05:45:
5c:d8:74:2b:7f:ac:88:3b:9e:de:c1:a1:73:e9:77:
89:78:d8:b3:01:86:77:75:e3:ce:c2:31:73:35:0b:
d1:c6:25:1c:c1:fa:72:39:ff:f0:50:fd:76:41:56:
53:35:42:ce:84:8e:3b:ab:0f:d1:ba:a3:1d:de:8c:
79:0a:67:7e:c1:77:c7:8f:b1:e5:5e:80:e4:82:c9:
cd:8e:27:04:9a:2b:93:00:c5:c9:53:d2:62:65:97:
f7:e2:6b:cb:5c:5c:ba:97:4f:66:7c:59:4a:2d:8e:
01:c3:d3:0c:f4:56:33:a5:ec:0d:d5:13:eb:94:c3:
69:eb:f1:c7:1f:7f:94:f5:04:92:60:c9:70:65:79:
8b:8f:05:d6:45:fc:ad:b3:e3:aa:be:ac:62:8f:2a:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.41.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:02:2b:c8:e9:e6:75:65:1a:30:1a:52:fb:46:f9:85:a7:80:
8c:02:81:8f:55:3a:c5:7c:2b:b1:16:f0:96:d1:c8:58:71:eb:
45:ba:c0:af:bf:47:e5:bd:68:b4:b3:de:88:c6:3c:3f:07:2c:
b1:ad:a1:b6:e7:c4:f5:33:7f:e9:9a:61:f5:30:1e:d8:83:29:
a2:ee:48:9f:96:b8:a7:97:e5:ee:c7:43:46:bd:85:b3:32:fa:
82:4b:8c:73:ac:18:b9:2e:50:2f:4f:a9:84:bc:e2:e3:57:44:
1f:d3:cf:20:b3:13:53:55:94:a6:85:e5:ae:d1:ef:ce:e3:c7:
3f:3c:4d:52:30:95:57:cb:c4:82:7c:4c:07:3c:ef:86:79:d4:
c5:b8:91:64:ca:71:0c:92:ce:f2:64:df:11:84:6a:9f:5a:79:
f5:a8:7a:64:b1:d2:de:ce:ab:6e:b8:e0:d2:67:96:60:9b:06:
d4:82:91:46:3b:32:af:3d:f7:2c:f3:84:51:14:c3:74:5c:77:
3a:1c:15:78:75:64:9a:a3:7a:a2:09:2a:8d:eb:71:b0:dc:25:
d6:cc:94:f0:83:08:2d:f8:c9:50:3c:f3:ac:ac:24:2d:9e:d2:
20:8c:26:ed:3a:c5:d4:e0:66:4a:ed:67:19:0a:d2:5e:8a:1a:
ed:3f:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:25:18 2026 by rpki-client