Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Qe7x-lxChi9kpTXX1ZrmB0glWqw.cer
File: Qe7x-lxChi9kpTXX1ZrmB0glWqw.cer (raw, json)
Hash identifier: logBFABd7f6sEYc+yYK+5cYab52khKpa7FWTrKJG7Es=
Subject key identifier: 41:EE:F1:FA:5C:42:86:2F:64:A5:35:D7:D5:9A:E6:07:48:25:5A:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F74A97CCED26F759783E130520D368378
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/Qe7x-lxChi9kpTXX1ZrmB0glWqw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 18 Jul 2026 09:58:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219484
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:a9:7c:ce:d2:6f:75:97:83:e1:30:52:0d:36:83:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 18 09:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41eef1fa5c42862f64a535d7d59ae60748255aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:92:c4:36:a5:d5:97:b9:44:97:c0:e3:33:36:
c3:45:10:1d:b9:eb:97:41:16:ca:3c:fb:4b:c7:30:
19:8b:0c:a7:22:8d:82:74:e5:70:51:c3:81:01:d3:
f5:66:be:63:69:b1:53:f3:d6:2c:24:2b:58:23:42:
88:52:8e:7d:55:0e:cf:c4:c7:46:80:e7:21:26:b3:
c2:1f:4d:35:0e:b4:21:65:5d:86:43:79:3e:44:10:
1a:0b:cf:3e:ae:5a:06:f5:26:f2:56:d3:cf:c8:5f:
d9:d2:d4:01:52:cd:73:de:58:58:fe:7b:ba:8d:40:
c2:3d:81:da:ae:fc:ac:e6:a5:80:a1:0d:42:ab:b8:
e3:cf:8f:3e:67:c8:51:80:99:bb:8d:73:a9:97:20:
ad:9c:bb:50:a9:9d:dc:ef:29:79:3a:23:9b:62:85:
79:74:c3:31:27:8e:d6:2b:cc:da:af:2e:0e:d4:a1:
c1:c2:4a:00:7a:ce:e8:d6:46:81:51:ce:82:bb:79:
74:15:c3:5f:16:81:9f:37:ae:d9:41:16:27:83:8a:
09:2c:c8:a8:b5:64:02:7d:16:3c:a5:42:fc:51:3b:
16:c0:36:ae:c2:bc:37:e4:7d:eb:c3:68:47:4c:38:
a4:55:86:c9:2e:47:c8:73:28:f4:e4:3c:4d:7f:30:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EE:F1:FA:5C:42:86:2F:64:A5:35:D7:D5:9A:E6:07:48:25:5A:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/Qe7x-lxChi9kpTXX1ZrmB0glWqw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219484
Signature Algorithm: sha256WithRSAEncryption
12:a4:57:32:18:b1:ee:6e:25:cd:f0:83:49:7a:33:53:07:54:
8d:f2:c8:69:ae:01:ec:92:fc:5d:a4:73:10:62:6d:23:07:a7:
44:7a:b6:31:3f:79:3a:f7:a2:3f:d8:22:6a:5f:0e:79:be:9a:
e0:7d:68:cd:47:a8:ea:27:d5:12:64:17:de:50:b6:07:5a:04:
f2:0b:c0:50:b0:c3:c6:d3:49:4e:ca:03:ee:bd:12:62:9a:b9:
9a:04:7f:34:31:9b:a4:53:20:51:8e:a8:5f:0e:41:a9:f9:1f:
73:98:01:58:e0:75:ea:f5:86:dd:e0:cb:3f:db:5c:3c:1b:20:
25:5c:f8:3e:3c:c3:05:36:18:09:ed:e8:b1:bc:0d:91:92:8c:
c1:e4:67:59:bf:21:ce:f9:f7:f0:d7:c5:a8:50:d5:cb:67:1b:
70:c1:db:92:42:83:69:9e:b2:e6:5b:55:22:c2:46:9a:47:68:
5e:04:34:a4:4b:a4:5d:16:65:a0:43:dd:cb:b8:99:4d:fa:70:
86:e5:44:c9:7d:6f:48:5e:00:db:d1:5b:3e:f2:38:34:2e:c1:
a4:4d:a0:9a:f7:4e:12:b4:d2:f6:fc:ed:c0:fb:b3:30:c6:f3:
c1:79:be:b4:09:1b:6e:75:bd:4d:b7:ce:76:ca:fd:0f:f1:c3:
e4:74:f0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 03:07:28 2026 by rpki-client