Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
File: fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer (raw, json)
Hash identifier: FPv1yP1ldgD/0yvuucq9Keg7WLaEj4K5cUcKvM/nCNE=
Subject key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A07C8955CC52BEAA6748F0F782B64C24A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 07 Sep 2026 15:42:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.92.136.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:89:55:cc:52:be:aa:67:48:f0:f7:82:b6:4c:24:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 7 15:42:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:ea:24:02:ea:b1:61:33:31:15:04:00:3d:
17:17:d9:f9:4b:b5:a2:0e:10:aa:fc:cd:e7:56:b4:
43:22:57:19:bb:b8:25:e4:ba:1c:38:ff:2e:91:f7:
50:71:ae:d9:3f:33:34:d5:03:0f:75:41:60:66:57:
2b:3a:04:a2:94:c9:a3:58:17:93:5a:49:9f:6e:2e:
40:a2:a0:20:bc:4b:03:8e:96:b1:45:9a:65:e7:e8:
4a:53:67:45:d8:36:83:f0:bf:e5:8a:2d:96:4e:67:
c5:79:17:7c:c7:0e:c6:49:90:8f:58:bc:45:79:ca:
67:b8:5f:b0:49:ff:27:3e:2d:1a:84:e6:ec:b1:b7:
08:31:1b:e4:e6:b6:ce:7b:48:7c:1a:db:80:7b:87:
0b:a6:70:49:91:bf:e0:70:52:17:74:c3:51:31:83:
3a:75:c7:b2:3f:03:92:87:95:c3:dc:a9:90:17:82:
61:7f:45:1b:3d:0b:6b:83:8e:4e:cd:11:63:f4:e1:
a0:00:2d:e2:c3:a3:8c:85:1d:ce:b5:65:fb:ca:e6:
d5:13:32:6c:e7:01:9f:74:51:b6:86:6c:b8:60:5c:
6a:67:eb:03:56:90:8e:1c:db:fa:4b:79:69:d8:0f:
17:e8:5d:c1:e5:ab:28:7a:74:f1:07:fe:97:e7:14:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.136.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:fc:1d:85:b1:1d:29:9f:65:a9:75:56:2f:bc:ab:e6:c8:0c:
e7:47:cb:d2:4a:3a:9f:6c:36:24:d2:9c:9b:30:f5:25:fd:9b:
a2:c9:fe:bf:0a:8f:f6:20:45:d6:06:f3:0e:25:fe:22:a8:10:
bd:03:2a:34:45:5c:85:7a:9b:1d:1f:07:ed:a5:16:04:b7:2f:
a0:7c:49:a4:c1:7a:d2:d8:6c:81:bf:18:88:f7:d2:dd:f0:b5:
2d:8f:bc:7d:fc:a9:61:a8:b0:af:e1:b8:04:69:cf:d6:11:1d:
a0:3a:cf:bc:36:f4:6a:b5:d7:d1:f8:2e:10:67:63:bf:6a:1d:
bc:ce:bd:68:5f:40:d3:31:73:98:46:3b:f8:85:58:b8:6b:44:
7c:af:fd:70:7d:54:b9:91:de:9f:b8:b0:57:d6:70:d5:39:b7:
98:f0:ae:bd:0d:b3:a0:2a:96:1e:ae:ee:4c:83:b4:79:f7:95:
12:d2:7a:e9:ec:f0:e6:85:8c:77:eb:c1:f4:87:5a:50:6a:a6:
c4:e9:5d:75:6f:45:ed:c0:30:e0:b1:1b:cc:e2:64:ab:13:ed:
c0:e9:fa:14:b2:4c:5e:a5:d1:a4:f2:c7:a0:4c:98:6c:77:aa:
6f:0a:5a:b9:7e:4b:6a:11:c6:db:09:88:0b:45:d1:ca:dd:16:
1c:28:24:58
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAaB8iVXMUr6qZ0jw94K2TCSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTA3MTU0MjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDBhYzMzNDQzOGE1M2QxOGFlNDBlZmM5MzY4NzY4YjkzMWNmYWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdvqJALqsWEzMRUEAD0XF9n5S7Wi
DhCq/M3nVrRDIlcZu7gl5LocOP8ukfdQca7ZPzM01QMPdUFgZlcrOgSilMmjWBeT
Wkmfbi5AoqAgvEsDjpaxRZpl5+hKU2dF2DaD8L/lii2WTmfFeRd8xw7GSZCPWLxF
ecpnuF+wSf8nPi0ahObssbcIMRvk5rbOe0h8GtuAe4cLpnBJkb/gcFIXdMNRMYM6
dceyPwOSh5XD3KmQF4Jhf0UbPQtrg45OzRFj9OGgAC3iw6OMhR3OtWX7yubVEzJs
5wGfdFG2hmy4YFxqZ+sDVpCOHNv6S3lp2A8X6F3B5asoenTxB/6X5xSzlQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFH0KwzRDilPRiuQO/JNodouTHPrCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2YyNmZk
MS1iMzc1LTQyNmMtYWY3OS1iNTE5YjEzMWJmODUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvZjI2ZmQx
LWIzNzUtNDI2Yy1hZjc5LWI1MTliMTMxYmY4NS8xL2ZRckRORU9LVTlHSzVBNzhr
MmgyaTVNYy1zSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCLVyIMA0GCSqGSIb3DQEBCwUAA4IBAQCt/B2F
sR0pn2WpdVYvvKvmyAznR8vSSjqfbDYk0pybMPUl/Zuiyf6/Co/2IEXWBvMOJf4i
qBC9Ayo0RVyFepsdHwftpRYEty+gfEmkwXrS2GyBvxiI99Ld8LUtj7x9/KlhqLCv
4bgEac/WER2gOs+8NvRqtdfR+C4QZ2O/ah28zr1oX0DTMXOYRjv4hVi4a0R8r/1w
fVS5kd6fuLBX1nDVObeY8K69DbOgKpYeru5Mg7R595US0nrp7PDmhYx368H0h1pQ
aqbE6V11b0XtwDDgsRvM4mSrE+3A6foUskxepdGk8segTJhsd6pvClq5fktqEcbb
CYgLRdHK3RYcKCRY
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:27:17 2026 by rpki-client