Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jmscgrse0MbVtor0ikkZbgg8qUA.cer
File: Jmscgrse0MbVtor0ikkZbgg8qUA.cer (raw, json)
Hash identifier: Nloee/+16oJ2csOruI1+YHBxqiQkYgVaLvjyFSHnzIE=
Subject key identifier: 26:6B:1C:82:BB:1E:D0:C6:D5:B6:8A:F4:8A:49:19:6E:08:3C:A9:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBD0C8C5F5C4A24840D87B9E869E13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.102.129.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:d0:c8:c5:f5:c4:a2:48:40:d8:7b:9e:86:9e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=266b1c82bb1ed0c6d5b68af48a49196e083ca940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:13:56:1c:57:5d:3e:88:25:94:92:9f:bf:
c9:7a:4b:2d:45:9b:2a:83:7e:a0:dd:07:12:3c:20:
20:8a:4a:79:b1:c2:7d:85:33:2e:36:6c:08:06:9d:
21:a4:00:e3:d4:fd:c7:7e:0e:9f:6c:b4:ea:bd:06:
5e:62:b7:3a:3a:c8:0d:f2:3b:26:3e:e8:0d:12:53:
bc:1f:54:36:b5:47:18:f9:8e:d4:b0:f3:85:cd:71:
6c:97:1f:7e:3e:49:d4:cf:67:f6:85:cc:3e:0a:02:
79:44:ab:48:9e:be:2a:6b:9d:ab:94:74:61:31:d4:
09:96:df:81:87:0c:9b:b4:df:df:7c:ef:40:bc:36:
9b:c3:28:7e:b8:24:fd:d9:a7:43:f3:1c:59:c7:7b:
c7:50:74:fb:f2:f0:d8:57:4c:75:87:17:41:1e:88:
a9:b2:e4:e2:d9:90:ef:8a:ef:2d:88:13:1c:40:16:
7a:6a:12:c7:ba:cc:87:ba:02:7f:8b:6d:89:c3:38:
a0:fb:cb:8b:8e:98:f7:66:4f:e0:f7:15:2d:ec:6b:
71:f3:4a:1d:00:e6:b8:8c:9a:74:4b:c2:5c:ef:37:
8a:05:0d:df:f0:9a:1c:e9:24:41:e8:b8:2d:be:2d:
8e:74:80:28:83:a6:0d:02:5d:71:1f:3c:92:36:f3:
11:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6B:1C:82:BB:1E:D0:C6:D5:B6:8A:F4:8A:49:19:6E:08:3C:A9:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:82:3a:73:fe:d5:24:35:88:0d:a2:41:11:c5:2a:5c:f1:b8:
10:d3:a4:d3:e8:d6:2a:e8:f5:70:74:00:e9:2f:1c:d0:0d:46:
3b:9a:13:25:de:76:e5:9a:b3:ed:51:41:c8:d7:70:98:6b:86:
dc:a0:c0:cc:2c:40:16:7b:ea:0f:f8:d2:c8:71:71:71:e6:b1:
50:76:d9:e9:16:ba:2c:1c:8a:ab:d2:aa:17:6b:7e:ce:02:12:
d3:03:2c:2c:17:0c:7a:d0:83:45:da:9d:fe:39:b4:d6:06:47:
20:1e:33:be:3f:51:4b:4e:76:73:c5:c5:85:90:16:c5:cf:22:
0e:c5:14:de:d9:6f:80:ad:fb:97:61:9e:a8:f6:29:f6:2c:f6:
56:48:90:db:1f:8a:c1:7f:2e:d9:b5:3a:f4:ba:39:a2:e1:f1:
f6:34:8e:58:ac:a8:37:73:cf:cb:ac:11:79:66:fc:0c:35:2e:
a5:16:39:4c:18:98:bb:32:d3:3b:5a:93:74:24:2f:7a:3b:c6:
5a:aa:c7:c2:9b:3b:16:2f:bd:2a:78:f8:37:67:af:ac:39:0d:
80:59:a2:82:e6:eb:48:bb:e5:f2:e5:9c:1b:0e:82:47:24:fb:
ab:f7:09:0e:4d:2f:1e:b3:9c:33:15:17:8d:03:ae:f8:81:19:
fd:a5:5d:4e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ8Y+9DIxfXEokhA2Huehp4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjZiMWM4MmJiMWVkMGM2ZDViNjhhZjQ4YTQ5MTk2ZTA4M2NhOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnsTVhxXXT6IJZSSn7/JekstRZsq
g36g3QcSPCAgikp5scJ9hTMuNmwIBp0hpADj1P3Hfg6fbLTqvQZeYrc6OsgN8jsm
PugNElO8H1Q2tUcY+Y7UsPOFzXFslx9+PknUz2f2hcw+CgJ5RKtInr4qa52rlHRh
MdQJlt+BhwybtN/ffO9AvDabwyh+uCT92adD8xxZx3vHUHT78vDYV0x1hxdBHoip
suTi2ZDviu8tiBMcQBZ6ahLHusyHugJ/i22Jwzig+8uLjpj3Zk/g9xUt7Gtx80od
AOa4jJp0S8Jc7zeKBQ3f8Joc6SRB6Lgtvi2OdIAog6YNAl1xHzySNvMRAwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFCZrHIK7HtDG1baK9IpJGW4IPKlAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzL2I1Njg4
MS1lOTE5LTQ0NWEtOTkyMy04OWE5MDIzMjYxZjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYjU2ODgx
LWU5MTktNDQ1YS05OTIzLTg5YTkwMjMyNjFmMS8xL0ptc2NncnNlME1iVnRvcjBp
a2taYmdnOHFVQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwmaBMA0GCSqGSIb3DQEBCwUAA4IBAQCOgjpz
/tUkNYgNokERxSpc8bgQ06TT6NYq6PVwdADpLxzQDUY7mhMl3nblmrPtUUHI13CY
a4bcoMDMLEAWe+oP+NLIcXFx5rFQdtnpFrosHIqr0qoXa37OAhLTAywsFwx60INF
2p3+ObTWBkcgHjO+P1FLTnZzxcWFkBbFzyIOxRTe2W+ArfuXYZ6o9in2LPZWSJDb
H4rBfy7ZtTr0ujmi4fH2NI5YrKg3c8/LrBF5ZvwMNS6lFjlMGJi7MtM7WpN0JC96
O8ZaqsfCmzsWL70qePg3Z6+sOQ2AWaKC5utIu+Xy5ZwbDoJHJPur9wkOTS8es5wz
FReNA674gRn9pV1O
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:46 2026 by rpki-client