Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h6QpSIcwTPzeX_Sok5uRmOBTnLU.cer
File: h6QpSIcwTPzeX_Sok5uRmOBTnLU.cer (raw, json)
Hash identifier: dKQgSHCXwL/HbHfcREifqBVsnbHjSJQH4on6oDREj6g=
Subject key identifier: 87:A4:29:48:87:30:4C:FC:DE:5F:F4:A8:93:9B:91:98:E0:53:9C:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C90150192B47FB27B96BC4412461855E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/h6QpSIcwTPzeX_Sok5uRmOBTnLU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Feb 2026 14:37:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.99.96.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:15:01:92:b4:7f:b2:7b:96:bc:44:12:46:18:55:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 14:37:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87a4294887304cfcde5ff4a8939b9198e0539cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:73:a5:29:4a:59:4f:41:51:5a:b4:c5:81:
b4:41:44:45:32:28:58:c1:23:5f:bf:45:da:12:f0:
3a:ce:58:10:f4:87:b1:c7:95:a6:a1:3f:18:db:a2:
01:3d:2e:a1:c0:7c:65:24:fb:a4:75:23:51:05:9f:
ce:ac:d7:03:1f:96:f3:23:ca:0d:76:9e:4e:20:49:
af:46:40:6d:53:50:42:cb:05:83:ca:5d:d2:4b:ca:
42:eb:e5:93:9f:e6:bc:b2:78:cc:7e:2d:65:89:64:
d1:6d:57:66:2c:4d:0a:46:f0:6c:5c:b9:cb:6c:06:
ec:36:47:0d:3f:5f:77:01:28:a8:e1:fd:10:64:3c:
9b:61:77:e7:dd:7a:14:27:b5:f2:82:23:5b:d3:9f:
c2:81:d8:c1:ae:d3:47:4a:c6:55:9a:ba:be:71:fe:
5d:cb:60:52:d5:6d:88:00:0a:94:3d:14:5b:7b:05:
9b:c0:7e:2d:91:8d:05:99:38:63:3b:47:14:26:d6:
1f:2f:86:fb:38:ab:77:88:3d:39:91:ea:ca:97:c2:
29:c2:5d:ae:77:63:1a:3c:7b:bb:ed:9f:de:e2:03:
a9:3e:ee:73:e4:a4:c6:83:f2:04:ae:fe:34:40:0b:
e0:8d:e7:2e:64:16:ec:ec:b8:15:89:2d:3a:f3:6a:
3a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A4:29:48:87:30:4C:FC:DE:5F:F4:A8:93:9B:91:98:E0:53:9C:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbf465-63d1-4997-9b74-870ca2ca8317/1/h6QpSIcwTPzeX_Sok5uRmOBTnLU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.99.96.0/20
Signature Algorithm: sha256WithRSAEncryption
55:bd:2e:e0:14:37:db:4c:c2:61:97:8a:c7:55:e3:d2:5b:09:
4d:1e:50:de:1a:c8:3d:d1:05:10:56:9c:91:5d:0a:9b:c7:4e:
8d:d5:61:c4:53:ad:a1:82:79:0c:64:67:0b:e6:ae:a8:79:bb:
da:4b:f3:40:1f:df:36:c0:e7:53:2b:fb:a9:bc:fe:72:aa:89:
66:c0:67:87:65:82:be:9a:50:d0:eb:5f:bb:a8:a4:5e:0e:74:
57:f4:5d:75:af:39:31:1d:87:71:28:3c:32:82:e8:f1:92:f0:
5f:5f:7d:d9:43:f9:8c:00:0c:31:b9:54:24:a8:35:be:18:c3:
da:1d:5a:7a:75:01:a2:dd:3a:54:4f:3d:9b:cc:41:00:1d:6f:
4e:4f:76:d9:f4:2f:7c:20:ea:df:5d:6f:80:1e:9f:2c:af:89:
89:3b:db:d9:7e:9b:1f:79:ee:a7:bd:fd:57:c4:bc:97:27:01:
1b:ef:02:db:13:1d:56:01:cc:a8:0b:85:f6:10:51:17:c3:95:
32:7e:2f:7b:7b:8e:d8:c9:d5:da:45:ba:26:9c:91:a7:b1:d5:
d5:74:b0:47:b9:94:63:23:32:92:d1:24:0d:f9:4a:d4:3e:15:
af:72:1e:cd:90:61:b3:f1:b0:65:1f:93:bc:60:0e:e5:a4:f7:
d2:47:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:38 2026 by rpki-client