Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.cer
File: nQeAa4mkzlk_5Hy7X5RgyN7nOB4.cer (raw, json)
Hash identifier: Lj+iPkuTTUD9byJ5+O0T3EX3uLp2JXl/zNNI2GDhrMQ=
Subject key identifier: 9D:07:80:6B:89:A4:CE:59:3F:E4:7C:BB:5F:94:60:C8:DE:E7:38:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE24FB441DD06922E75A72DD53FE87
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 150.217.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:24:fb:44:1d:d0:69:22:e7:5a:72:dd:53:fe:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d07806b89a4ce593fe47cbb5f9460c8dee7381e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:03:27:49:1d:ab:f0:23:ae:dc:14:df:bb:
33:04:db:73:6c:43:bb:a5:9a:d4:ac:ce:74:9c:cf:
f4:70:8e:1a:80:a9:4a:a2:ee:a4:15:fe:89:bd:08:
e5:79:36:26:5b:19:05:2c:7e:fe:f5:53:c3:fb:61:
f3:08:b6:27:3a:c9:6a:4a:9b:21:84:e4:2d:77:42:
4b:cd:fb:22:01:4a:ee:3e:96:62:e0:71:5a:d1:42:
39:1f:0d:fe:54:0b:52:d8:9d:47:78:1c:22:b5:00:
52:ee:2d:ce:ea:28:e2:1e:06:86:64:74:c6:0e:e0:
fc:94:2d:8f:54:55:8b:df:cf:d2:62:a6:32:89:87:
41:d4:b2:56:d7:da:a5:12:fd:bb:92:e8:1e:48:96:
a3:2d:7b:4b:0d:ad:9e:09:6a:db:32:75:46:d1:d1:
44:22:b0:34:2a:80:3f:6c:3a:fc:85:af:c4:cb:7e:
a5:c9:57:a1:c3:60:63:76:de:7e:11:7b:f4:fb:f3:
00:a2:8b:66:40:ad:a2:a7:d8:1b:e5:ee:a2:d2:50:
b9:1b:26:bd:76:59:6f:49:a2:35:b7:fc:10:8d:bf:
c9:5b:5f:ba:80:72:ea:7c:50:07:86:cb:48:e0:0f:
4c:ab:7d:8b:30:8b:99:fa:bf:ef:80:87:4a:52:6f:
fe:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:07:80:6B:89:A4:CE:59:3F:E4:7C:BB:5F:94:60:C8:DE:E7:38:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.217.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:33:e1:b6:17:01:06:c6:1e:e6:b7:0f:d3:86:6f:1d:e8:aa:
ba:1c:c3:7d:95:1b:fc:17:cc:53:3f:03:3c:e1:9c:1e:33:a2:
2e:5f:5d:fd:d1:5c:be:b9:15:bb:f1:e5:bc:c0:0a:cf:af:f6:
e5:13:95:64:80:59:22:ae:47:24:a5:d8:89:7b:c5:00:63:69:
c4:64:b7:ff:b8:c2:7f:05:ab:4c:5b:3e:24:5c:3e:87:43:ad:
df:7e:86:47:63:4c:11:07:59:ea:ed:6b:a2:b4:f3:71:91:21:
92:90:df:68:df:8c:ab:b2:e9:40:4b:fa:85:85:79:eb:99:71:
8c:e2:17:5e:5f:ce:e0:2f:a3:df:cb:74:0a:08:13:c7:aa:fc:
f2:df:ce:83:b2:ab:fc:27:c6:36:45:2a:71:95:9a:74:00:61:
16:66:87:bf:07:fa:5c:8c:46:61:20:3d:0d:dc:ff:5f:fe:2f:
73:e4:62:f3:80:7a:16:df:60:6a:9d:49:61:f6:c3:db:0e:da:
06:e3:33:40:e4:ef:c5:d0:25:44:ad:5e:97:e9:59:93:d7:b8:
6c:8f:60:32:43:d8:cb:71:dc:fb:0d:63:dc:de:ff:9a:9d:6b:
df:7f:67:de:54:90:c5:a5:f7:60:a1:f7:b5:72:cb:e1:3e:11:
38:f1:55:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:20 2026 by rpki-client