Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/QdOwOPqgIOZecYN6sLNPJO4MGts.cer
File: QdOwOPqgIOZecYN6sLNPJO4MGts.cer (raw, json)
Hash identifier: 0dSJNMaBKF0YVBBvIMRPldvT7ScIP3iE36fDf3c79VE=
Subject key identifier: 41:D3:B0:38:FA:A0:20:E6:5E:71:83:7A:B0:B3:4F:24:EE:0C:1A:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FFAC41FD5CBBA96D4BF207334016B4C0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 13 Aug 2026 10:56:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219079
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:c4:1f:d5:cb:ba:96:d4:bf:20:73:34:01:6b:4c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 13 10:56:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41d3b038faa020e65e71837ab0b34f24ee0c1adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:57:d8:8b:79:9c:dc:36:25:7a:9a:a1:6a:10:
5c:b0:11:ca:03:d4:2e:cd:a6:f0:aa:c6:97:34:e6:
66:b7:33:1d:1b:71:49:23:e7:20:65:89:48:1e:56:
f8:96:e2:45:68:2c:fb:13:92:5c:54:8c:1a:75:cb:
f6:fa:3d:6f:ad:0c:57:98:86:2b:86:71:11:75:4b:
e8:48:f0:cf:10:c7:54:a0:81:b2:a7:4b:5f:3e:d2:
6b:6d:4d:d8:51:56:f4:e0:40:a1:fa:da:f2:76:7a:
fd:09:86:42:75:e5:8f:f5:49:19:88:ba:9c:1d:5f:
ba:22:4c:32:77:1b:3a:a3:5f:10:b1:56:1f:85:8d:
ac:26:83:33:19:23:c2:d1:a0:26:23:ea:9a:f9:13:
11:f8:0d:51:41:ae:d9:f5:f2:bc:ca:45:7f:4b:d0:
74:b5:78:55:2b:00:28:48:cb:8d:46:dc:ee:2b:47:
60:cd:13:ad:22:8c:55:44:5d:27:f5:06:bc:61:64:
77:c4:68:05:0c:e1:9a:ac:81:3d:96:c4:ca:3a:20:
16:3c:48:fb:6c:cf:04:5a:2d:04:28:36:94:6f:d5:
04:2a:87:af:8b:c5:88:09:89:ea:e7:64:a5:98:4b:
39:0b:7d:2a:f1:a6:51:3f:5f:f5:f6:3a:78:54:c5:
15:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D3:B0:38:FA:A0:20:E6:5E:71:83:7A:B0:B3:4F:24:EE:0C:1A:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219079
Signature Algorithm: sha256WithRSAEncryption
29:09:63:62:5f:3c:cc:34:b1:62:af:95:fd:c4:ee:00:b1:41:
79:a6:7f:e1:9d:61:e9:b6:36:37:e3:90:80:b8:08:6f:d9:bd:
ec:bc:f5:3b:9d:dd:a8:c6:53:df:2a:40:46:48:75:00:44:70:
83:9a:df:ce:b5:e5:4e:b8:16:55:95:ca:d1:20:15:fc:82:fb:
d3:c8:c4:3b:8f:7d:07:c8:db:0e:07:cf:f7:59:d5:09:97:87:
67:40:ee:a9:82:89:e4:a6:e3:14:b4:af:64:33:75:ae:78:67:
45:36:f2:36:e2:c0:aa:2b:80:0d:4a:f9:75:ee:8f:93:cb:d9:
83:3f:41:d4:b3:2b:78:65:c3:02:34:5e:4c:90:a5:4e:7d:7c:
f2:26:0e:60:fc:68:44:bb:4b:40:fd:9f:75:9e:cd:80:4b:fd:
d5:98:73:02:97:e5:1f:49:82:2e:19:b4:3c:7b:72:7b:f8:0b:
2f:7e:d6:d0:33:4d:ff:fb:c3:5a:48:95:bc:5a:2f:9d:6a:e3:
94:f1:6c:44:36:21:53:25:77:0a:13:e4:35:1a:f8:8a:bf:90:
13:de:04:3e:b3:77:af:93:3f:82:90:38:72:49:ca:90:9b:82:
3b:2e:46:1b:e6:8c:b7:ac:f8:c4:a9:4a:aa:2a:38:53:9e:4b:
8b:40:09:a3
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZ/6xB/Vy7qW1L8gczQBa0wPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODEzMTA1NjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWQzYjAzOGZhYTAyMGU2NWU3MTgzN2FiMGIzNGYyNGVlMGMxYWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FfYi3mc3DYlepqhahBcsBHKA9Qu
zabwqsaXNOZmtzMdG3FJI+cgZYlIHlb4luJFaCz7E5JcVIwadcv2+j1vrQxXmIYr
hnERdUvoSPDPEMdUoIGyp0tfPtJrbU3YUVb04ECh+trydnr9CYZCdeWP9UkZiLqc
HV+6Ikwydxs6o18QsVYfhY2sJoMzGSPC0aAmI+qa+RMR+A1RQa7Z9fK8ykV/S9B0
tXhVKwAoSMuNRtzuK0dgzROtIoxVRF0n9Qa8YWR3xGgFDOGarIE9lsTKOiAWPEj7
bM8EWi0EKDaUb9UEKoevi8WICYnq52SlmEs5C30q8aZRP1/19jp4VMUVJQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFEHTsDj6oCDmXnGDerCzTyTuDBrbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllL2Q2ZTcy
MS1jNDdlLTQ4NjktYWRjMS0xM2NiMzA4ZjY2YTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvZDZlNzIx
LWM0N2UtNDg2OS1hZGMxLTEzY2IzMDhmNjZhMy8xL1FkT3dPUHFnSU9aZWNZTjZz
TE5QSk80TUd0cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNXxzANBgkqhkiG9w0BAQsFAAOCAQEAKQljYl88zDSx
Yq+V/cTuALFBeaZ/4Z1h6bY2N+OQgLgIb9m97Lz1O53dqMZT3ypARkh1AERwg5rf
zrXlTrgWVZXK0SAV/IL708jEO499B8jbDgfP91nVCZeHZ0DuqYKJ5KbjFLSvZDN1
rnhnRTbyNuLAqiuADUr5de6Pk8vZgz9B1LMreGXDAjReTJClTn188iYOYPxoRLtL
QP2fdZ7NgEv91ZhzApflH0mCLhm0PHtye/gLL37W0DNN//vDWkiVvFovnWrjlPFs
RDYhUyV3ChPkNRr4ir+QE94EPrN3r5M/gpA4cknKkJuCOy5GG+aMt6z4xKlKqio4
U55Li0AJow==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:45:57 2026 by rpki-client