Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
File: JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer (raw, json)
Hash identifier: /WbJ82eGLFdJzAt+0mhx3R8pv0rBVjtOWsetZOX+jDc=
Subject key identifier: 25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F80A6437FEA43EF359BC8F0B38B8B57
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:18:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204483
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:80:a6:43:7f:ea:43:ef:35:9b:c8:f0:b3:8b:8b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=258906554d8c8b428ede8cb35026860d3d7771df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:77:b2:89:77:da:81:ee:a7:94:f9:f5:ce:d6:
a0:c8:95:34:22:ed:39:c6:00:2a:eb:60:b8:d0:30:
c9:a7:c0:93:24:46:bc:08:f0:97:eb:0c:d9:63:a7:
35:ba:d6:1b:09:bf:e7:a6:a0:49:2d:b2:5a:9a:a9:
23:7a:65:2f:dd:82:ae:be:3b:d4:fa:eb:8a:ad:48:
18:4d:59:9f:34:80:55:6b:3e:f4:c2:07:0f:6e:1c:
62:12:42:e5:33:9b:25:8b:cc:d4:a8:8f:d6:cb:ca:
0a:24:3c:0c:58:04:a0:9d:20:47:50:02:a7:26:d4:
e2:06:59:d6:36:c7:74:48:48:45:ee:da:55:c2:aa:
54:73:a4:50:10:14:a8:e7:a2:aa:b7:55:7b:f5:57:
ed:3c:b7:3f:92:ca:f1:43:7d:b3:c9:9c:fe:42:9a:
e7:29:50:72:56:77:ce:80:76:a1:b8:d5:a9:a9:3d:
3a:1b:4f:75:89:e6:25:9c:7c:a1:4f:11:e3:5f:cc:
01:7d:f3:28:d7:5f:27:d8:89:79:42:32:23:d3:bb:
5d:28:1e:5c:bf:01:47:d0:64:11:51:75:fb:6d:ad:
e7:7e:a3:8c:dd:0a:eb:19:1a:dd:25:42:4f:e9:bf:
f7:5b:3a:ef:ad:d3:da:22:d7:b3:41:ef:07:0f:e2:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204483
Signature Algorithm: sha256WithRSAEncryption
84:0d:7f:fa:36:d6:da:cf:81:2a:bb:c9:41:1f:4f:38:4c:66:
cf:85:a2:a8:76:a2:ff:e8:56:13:f2:15:dc:ff:be:14:3e:71:
24:60:f4:1b:09:20:d6:2d:71:33:c5:96:0c:1f:a8:95:ff:90:
5d:74:89:1f:a5:c0:b2:9c:fb:0e:ee:d2:00:a3:9e:2f:55:c0:
58:72:19:e5:a2:cd:0c:db:bd:1e:a7:1b:aa:90:bf:4c:f9:db:
f3:78:1e:1e:78:8f:56:74:fa:7f:53:b0:45:fe:e4:b4:65:52:
99:10:3c:8d:57:4a:37:68:56:9d:6c:2a:80:3b:40:f6:24:4a:
c8:17:af:a4:86:27:df:ff:f4:5b:23:97:86:a1:06:a9:13:41:
81:da:0f:d1:82:54:d5:9f:fb:4c:e4:ec:02:92:f0:6e:1f:8e:
2f:78:e6:8e:f8:fa:34:c7:e7:80:47:90:b6:e5:d3:4a:17:b9:
a4:3b:9d:fb:f7:54:9b:19:27:54:92:9e:47:4f:f3:dc:43:e6:
10:3e:b5:b9:86:8e:02:a7:ba:b9:7b:18:18:af:64:6f:81:8b:
ea:19:72:cf:76:c6:14:35:d6:0e:f3:f9:b5:9e:d5:5b:cd:4c:
9b:ab:40:01:03:31:f9:a7:b8:0f:8c:ab:61:8a:11:1f:4b:14:
03:e5:de:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:25:39 2026 by rpki-client