Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
File: JJkvMtdIbftKMsLngQhUrGpmjjQ.cer (raw, json)
Hash identifier: kXz0iwfPJkqB8+G6kLnFtWqAFp8My7Xs9KZn64jFvNg=
Subject key identifier: 24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC891B7391DFBA5F87A3F3E41F599E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:18:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206028
IP: 185.108.76.0/22
IP: 2a0d:2940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:91:b7:39:1d:fb:a5:f8:7a:3f:3e:41:f5:99:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9b:22:2b:d7:b1:15:fe:9f:7d:35:c0:ce:d0:
35:41:85:fc:da:b6:6c:5a:66:63:3d:47:66:00:a0:
2b:53:67:15:41:93:5b:60:14:96:9c:f5:5c:71:73:
8c:9e:68:f7:17:6a:d6:6d:3b:40:b4:e2:c7:54:f8:
ac:75:d2:7b:3a:75:a8:73:d1:d7:f9:fc:9b:df:51:
e1:c6:6b:d8:cf:46:d4:25:fa:11:ef:3e:02:ce:ae:
f8:f7:91:72:de:ba:f4:6e:2f:b3:d9:78:43:e9:06:
5b:3e:29:32:57:b1:bb:df:95:5c:2a:88:e7:8d:6f:
19:0b:c8:24:f1:83:28:7c:6d:b2:2a:f3:c9:90:5a:
9b:c9:e6:be:f1:0e:24:79:b8:59:5c:55:b1:e0:c0:
de:18:67:f7:01:02:53:15:9c:4b:ab:79:b5:6c:4d:
c8:74:b8:2a:b0:18:41:5b:78:46:b3:eb:ac:d0:73:
01:21:8a:88:9f:1d:f1:69:08:dd:58:51:51:ea:bd:
85:bb:f8:cc:fc:bf:7f:8e:3e:3b:5b:d6:dc:32:b2:
0f:cc:67:3d:be:72:76:88:78:ca:ca:a4:86:d2:e1:
2f:1e:03:00:1a:88:3f:52:31:2c:f9:57:f9:27:47:
a4:3c:08:79:2e:90:a3:c7:31:3a:1a:37:59:9c:18:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.76.0/22
IPv6:
2a0d:2940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206028
Signature Algorithm: sha256WithRSAEncryption
21:e7:15:60:2a:e7:f0:29:c1:16:44:89:49:38:50:d4:92:b3:
58:80:46:77:aa:ab:25:95:49:01:f3:ae:b3:f7:b3:ba:3c:ab:
67:a7:43:6d:72:72:e4:61:ae:2a:53:02:3e:5f:7e:97:dd:a8:
10:91:df:31:96:f1:0c:e5:ab:0a:d8:a9:e7:49:05:bc:bb:24:
0b:71:eb:94:39:dc:bf:0d:d1:a1:14:d5:f0:c5:f3:22:cc:f9:
f7:1b:e3:91:57:bd:9b:0a:e7:36:47:78:51:d8:65:a2:fc:44:
2e:22:ef:3a:4b:32:29:d0:9c:89:da:89:50:e6:77:85:b3:69:
8f:f2:86:ce:6d:d2:67:90:b6:de:27:43:55:a6:0a:8c:d7:6d:
f5:9b:f1:c7:3d:2f:01:36:2f:e3:c9:67:5d:63:60:3b:54:b8:
d0:96:ea:cf:cf:44:05:6c:e2:35:8c:e7:f2:80:05:b1:92:56:
1d:1d:30:8d:90:88:92:b8:dd:5c:a4:a4:09:64:f0:3a:e9:07:
20:5b:44:4e:96:d0:7d:f8:4d:1f:03:d7:71:62:f8:d4:09:c6:
1f:c3:21:44:8a:c5:97:23:84:5b:ce:44:31:72:dc:2a:9d:e7:
5d:06:20:55:05:24:bc:63:b2:b2:f3:e0:86:81:5a:f3:e5:a4:
e2:5b:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:14:20 2026 by rpki-client