Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jk4B1P2QJjaB6cvWeD7IsKYebr4.cer
File: Jk4B1P2QJjaB6cvWeD7IsKYebr4.cer (raw, json)
Hash identifier: 57QW+ftgVUmc77mTme3KqDNeLC16dPULTWEkx/ib788=
Subject key identifier: 26:4E:01:D4:FD:90:26:36:81:E9:CB:D6:78:3E:C8:B0:A6:1E:6E:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA695785A01FB0387DF17C03C8E220
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.85.240.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:69:57:85:a0:1f:b0:38:7d:f1:7c:03:c8:e2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=264e01d4fd90263681e9cbd6783ec8b0a61e6ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:ae:df:59:17:0b:92:86:f4:6e:df:ab:13:
b0:47:17:7d:de:71:bc:78:55:31:f9:fa:dc:c6:4b:
15:2d:ee:0e:89:2a:dd:29:7c:1e:cd:8e:88:29:db:
e3:3d:e6:bf:36:f0:a5:bb:9a:a6:0f:07:b6:7c:e0:
1c:a3:f2:95:84:48:66:42:ff:91:31:f6:a8:cd:9d:
5c:97:5e:0d:6f:94:76:23:f5:3a:66:17:44:57:12:
18:8a:bc:66:5e:40:de:76:35:50:c2:68:b0:aa:07:
5c:86:05:27:68:53:73:94:8c:0c:1a:ea:f8:e3:f8:
2f:38:56:3f:df:0b:85:9c:85:47:62:c2:0a:52:ea:
11:1d:6b:c3:80:5d:b7:04:a7:48:42:18:07:48:59:
b2:54:87:d3:3f:ef:5b:53:db:53:ca:a3:04:33:ae:
83:76:34:86:3c:e6:32:91:f5:75:30:02:b0:46:23:
66:32:2d:6d:1d:bc:8f:1b:3f:36:a7:01:08:a3:3f:
0f:9f:7a:c9:7a:25:f0:aa:b7:06:ed:e0:1b:a7:05:
44:92:37:9e:1e:ed:94:f7:be:2a:f7:65:ae:6f:31:
d5:16:2d:05:57:6c:24:ad:b7:28:46:58:c1:df:54:
96:76:ac:ab:7d:7f:5b:0a:47:aa:2d:1a:f5:be:39:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4E:01:D4:FD:90:26:36:81:E9:CB:D6:78:3E:C8:B0:A6:1E:6E:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.240.0/24
Signature Algorithm: sha256WithRSAEncryption
94:57:f4:6b:17:97:a5:7d:c9:08:da:54:33:87:b9:01:02:2a:
48:c4:e6:4c:84:bf:e3:67:d1:4c:a6:95:8d:bb:df:99:09:70:
5d:fb:53:04:55:89:4c:6a:c0:b9:5e:01:40:2e:71:e5:90:92:
47:fd:65:b5:cb:f6:87:3d:fc:de:74:d4:88:bf:a6:96:aa:e9:
02:2d:bd:6c:33:cb:65:97:ba:10:07:fe:28:b6:e7:70:97:4b:
13:50:57:e8:63:05:7a:90:a2:4d:75:f2:38:75:64:60:9a:dc:
b6:ce:54:ee:d6:ca:6b:4b:c1:ca:91:bb:12:0b:3b:a8:07:67:
9d:d5:a1:fb:40:f7:48:6e:82:5a:b0:9a:7a:bb:dc:c2:e4:d9:
99:d2:f1:d4:76:17:32:63:25:63:c1:90:8e:a1:50:40:89:d5:
87:e3:d4:88:d5:dd:96:ab:9a:fc:53:c0:04:e9:1b:38:6d:81:
c7:9b:18:e5:c9:ac:89:d1:16:92:29:81:df:b6:a5:45:51:55:
ac:86:46:cc:ad:26:04:a1:36:17:77:08:e1:37:61:b8:4b:f1:
46:77:b3:1c:f7:20:b6:85:e2:ac:5f:86:66:8d:c7:0a:af:7f:
43:26:b9:dc:1d:e9:b2:e8:32:1a:99:b6:2a:02:67:08:11:7b:
0d:64:5c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:20:10 2026 by rpki-client