Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q_eat-fJp1Pv8S6RRIS6rF5CPhA.cer
File: q_eat-fJp1Pv8S6RRIS6rF5CPhA.cer (raw, json)
Hash identifier: fopkxOaeQRcXx8ZnJlxh2huWRmgZWrmiIH8rzqqzaL0=
Subject key identifier: AB:F7:9A:B7:E7:C9:A7:53:EF:F1:2E:91:44:84:BA:AC:5E:42:3E:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C759FBD64975B3527AE912828F0B8B664
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/q_eat-fJp1Pv8S6RRIS6rF5CPhA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 19 Feb 2026 11:18:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201497
IP: 2001:678:c18::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:9f:bd:64:97:5b:35:27:ae:91:28:28:f0:b8:b6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 19 11:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abf79ab7e7c9a753eff12e914484baac5e423e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:68:13:a0:d6:cb:4a:d6:cc:08:5c:d8:f1:
5c:9e:12:c6:a8:09:6d:aa:a5:e0:6e:21:89:df:4a:
a8:f9:ca:0d:fa:fe:44:b2:f1:17:e5:32:77:90:7e:
af:b5:39:3d:ff:72:cb:0b:83:eb:34:10:38:c3:64:
c0:ee:e5:cd:9e:2f:97:69:ce:27:0b:0f:36:d8:bd:
1d:c9:43:83:89:21:5f:ef:25:8f:2e:e1:71:bb:97:
1e:ed:37:3d:4b:c5:03:a0:9e:13:d7:94:82:26:f8:
18:80:7a:97:ae:84:f1:75:38:c9:ec:0b:4b:80:c3:
21:25:7a:6f:a5:d3:e6:49:da:95:62:81:38:33:19:
7b:0c:7f:1d:be:f5:65:86:81:9e:1e:de:ba:ae:ce:
a2:9b:6d:87:a5:f2:ab:f4:d0:bf:ad:91:d8:e6:4a:
71:17:38:e7:68:da:ec:b2:9c:be:a7:c3:a3:78:15:
da:9e:3f:d6:e2:06:dd:b6:4a:c3:e8:5f:4e:bd:09:
e6:6c:12:64:f8:56:be:2f:a5:8d:0d:df:7a:2f:e4:
76:0a:d3:e2:e9:e2:ad:9e:4e:d3:24:f6:ee:59:32:
ac:c2:cb:23:a4:0b:e7:9e:c9:ff:5b:97:cc:7a:0e:
36:82:ab:90:57:0e:7e:d6:9f:a0:b8:36:1b:d0:b8:
49:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F7:9A:B7:E7:C9:A7:53:EF:F1:2E:91:44:84:BA:AC:5E:42:3E:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/q_eat-fJp1Pv8S6RRIS6rF5CPhA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c18::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201497
Signature Algorithm: sha256WithRSAEncryption
99:39:1d:36:44:17:4b:db:c1:cb:3f:5c:d2:ee:c3:92:c9:81:
ea:0d:a4:f7:a2:4e:5a:e3:d7:7a:dc:9b:34:1e:89:61:bb:9b:
c1:eb:35:74:f6:af:39:2a:fb:24:56:83:c7:ff:c1:de:e5:f5:
b5:92:03:85:0e:2e:ce:ca:9e:1e:50:1a:ef:a8:44:28:57:9e:
5f:9b:1b:c3:32:d3:05:1a:64:a2:09:9d:ab:ff:91:24:22:61:
07:be:40:6b:70:fb:3c:69:2e:b7:8c:51:3a:9a:34:cf:63:2d:
b9:f2:44:4c:52:95:ad:75:0e:cf:c0:39:e5:ee:99:e0:8c:fe:
76:2d:20:e3:a1:8a:ab:fc:77:eb:7b:ef:41:f2:43:f3:c3:86:
ca:f7:0e:0b:b3:8f:3a:33:ce:86:46:b4:91:07:d4:bb:4b:3d:
0d:52:68:8a:37:76:7b:eb:c6:1d:9c:ca:50:0f:f5:1b:2f:3b:
f4:dc:ba:d0:80:77:75:c0:41:fd:4c:cf:99:1d:af:3f:9d:86:
aa:cb:00:aa:65:92:8b:92:d4:9b:ca:6c:ee:ac:a2:b5:eb:dc:
f6:46:aa:ea:b3:f9:ba:91:96:59:73:f1:84:d8:96:22:4a:0f:
0e:3a:3e:10:01:51:0d:22:7b:88:59:7d:cc:b4:11:51:e9:b0:
56:7a:10:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:53 2026 by rpki-client