Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
File: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer (raw, json)
Hash identifier: qS1XsDLaR92vm3zQ8J5nSBMN8nzJ4D2P8fE5yvIaq5Y=
Subject key identifier: 26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797F0B51C8EFB3191193CC4C69229C1E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 46.231.128.0/21
IP: 94.143.112.0/21
IP: 185.54.8.0/22
IP: 2a02:2258::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:0b:51:c8:ef:b3:19:11:93:cc:4c:69:22:9c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=267d0cc5bd86d568366657aef0310d493a7176e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:7a:a4:ff:db:2d:b2:90:c2:46:ef:2a:62:
66:d5:45:b3:5c:6f:06:30:39:b9:49:06:6b:17:4e:
53:1d:c4:74:48:37:c0:35:1e:fe:d5:62:b2:4a:b5:
d4:09:5a:88:3b:8c:32:ae:3c:05:04:4f:b2:fa:e7:
df:06:a7:46:91:2f:21:e6:f9:ac:6b:83:1e:3e:fa:
1f:95:51:ec:9b:c8:2c:26:60:ba:c9:4c:0e:d9:0a:
b7:c2:e4:b9:d8:ac:d9:59:d2:f8:f8:ec:f9:3d:9f:
ae:8e:07:b5:b6:a2:b3:9f:48:14:ea:d3:ed:72:80:
c8:15:95:33:62:16:5e:bf:57:22:93:11:35:84:57:
1b:85:58:f0:db:24:7e:4b:fe:6b:9a:85:9f:19:f1:
52:b4:fa:fe:88:3c:c3:8c:f6:85:64:4f:66:da:b5:
90:e0:69:a1:10:e8:44:a2:82:9f:0d:51:6f:65:17:
8b:de:ca:83:37:c7:10:8f:97:5f:b0:1d:4d:ec:a0:
55:e8:84:27:16:df:6e:a5:0a:a3:b1:3f:4f:e2:4f:
0b:6e:69:48:e4:64:e0:68:6e:88:2e:4e:9e:aa:1a:
45:75:79:fa:44:86:82:47:eb:bd:76:7d:4f:dd:39:
55:82:fd:38:cb:b4:95:ef:8c:22:26:07:a7:41:97:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.128.0/21
94.143.112.0/21
185.54.8.0/22
IPv6:
2a02:2258::/32
Signature Algorithm: sha256WithRSAEncryption
4a:47:09:82:9e:ac:fe:c9:59:7d:03:95:0c:9f:2a:86:20:af:
61:18:6a:37:82:ea:88:99:d1:fc:c3:4d:c4:63:d0:92:b4:50:
f9:0d:a9:82:b0:83:8a:5f:01:28:a2:a1:85:bf:74:42:0a:82:
dc:bd:e3:ea:7a:ae:f1:fc:c8:43:3c:68:96:41:1b:77:50:69:
7c:2b:d2:cc:f9:18:a0:cc:14:a4:b5:5c:7c:d8:ba:6f:72:eb:
9d:6e:9a:33:10:93:9f:9d:71:31:84:96:c3:6c:ba:c3:a9:22:
63:e3:4d:59:5c:a6:da:37:0c:03:5c:28:8f:53:74:32:0c:5d:
b6:16:89:64:28:3c:51:f7:35:96:be:b7:62:10:c2:30:83:9c:
94:c9:eb:90:fd:82:5e:f2:5a:2c:66:e2:dd:25:e8:f1:8c:3c:
c9:74:2d:7d:24:d3:43:af:80:c3:c0:37:d7:b8:d0:df:72:60:
e7:0a:50:c9:73:c4:67:6b:bd:c3:cd:18:3c:aa:5c:bf:3d:49:
6b:fa:ba:c3:2d:72:e5:99:20:7d:65:ff:62:c8:d3:4f:fa:7f:
d0:fa:99:82:96:e3:3b:72:e7:c4:af:c5:b8:9e:dd:c6:3a:dd:
f5:52:84:ef:8f:6e:34:9d:82:e3:c7:16:6b:81:29:75:24:d2:
02:56:df:b0
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZt5fwtRyO+zGRGTzExpIpweMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjdkMGNjNWJkODZkNTY4MzY2NjU3YWVmMDMxMGQ0OTNhNzE3NmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGl6pP/bLbKQwkbvKmJm1UWzXG8G
MDm5SQZrF05THcR0SDfANR7+1WKySrXUCVqIO4wyrjwFBE+y+uffBqdGkS8h5vms
a4MePvoflVHsm8gsJmC6yUwO2Qq3wuS52KzZWdL4+Oz5PZ+ujge1tqKzn0gU6tPt
coDIFZUzYhZev1cikxE1hFcbhVjw2yR+S/5rmoWfGfFStPr+iDzDjPaFZE9m2rWQ
4GmhEOhEooKfDVFvZReL3sqDN8cQj5dfsB1N7KBV6IQnFt9upQqjsT9P4k8LbmlI
5GTgaG6ILk6eqhpFdXn6RIaCR+u9dn1P3TlVgv04y7SV74wiJgenQZdh3wIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFCZ9DMW9htVoNmZXrvAxDUk6cXbkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzE0YjA3
NC03ZDU3LTQ2MTYtYTg1ZS04ODBhYjc5NDg3MjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvMTRiMDc0
LTdkNTctNDYxNi1hODVlLTg4MGFiNzk0ODcyOC8xL0puME14YjJHMVdnMlpsZXU4
REVOU1RweGR1US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDLueAAwQDXo9wAwQCuTYIMA0EAgACMAcDBQAq
AiJYMA0GCSqGSIb3DQEBCwUAA4IBAQBKRwmCnqz+yVl9A5UMnyqGIK9hGGo3guqI
mdH8w03EY9CStFD5DamCsIOKXwEooqGFv3RCCoLcvePqeq7x/MhDPGiWQRt3UGl8
K9LM+RigzBSktVx82LpvcuudbpozEJOfnXExhJbDbLrDqSJj401ZXKbaNwwDXCiP
U3QyDF22FolkKDxR9zWWvrdiEMIwg5yUyeuQ/YJe8losZuLdJejxjDzJdC19JNND
r4DDwDfXuNDfcmDnClDJc8Rna73DzRg8qly/PUlr+rrDLXLlmSB9Zf9iyNNP+n/Q
+pmCluM7cufEr8W4nt3GOt31UoTvj240nYLjxxZrgSl1JNICVt+w
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:52:16 2026 by rpki-client