Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
File: JpildU3unu9vIkViy4I5rIvbBbg.cer (raw, json)
Hash identifier: 0+x3kpBuYmyY/CwQMkNk3FVnEWLMMq5adQzAugHy1hA=
Subject key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEDB57E3EBB562B361C99A7049BC826
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:18:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.167.80.0/22
IP: 2a0b:5200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:b5:7e:3e:bb:56:2b:36:1c:99:a7:04:9b:c8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:f1:4a:ab:9a:46:71:e3:7e:e1:3b:41:4c:
5f:7e:7a:92:e1:9e:03:b4:54:99:ed:bd:67:1d:84:
65:85:6a:24:51:6b:07:cf:8d:02:0f:6f:54:f5:72:
98:01:63:0a:76:ef:c8:34:c2:69:df:7e:44:60:62:
92:be:8a:96:78:d2:4b:ec:17:3e:65:19:a6:b6:17:
0b:f3:38:d2:8f:bd:41:66:a4:06:29:03:1b:6c:a2:
48:99:38:9c:e9:be:77:68:15:2b:aa:85:da:6a:44:
7c:85:d6:e2:0a:4a:84:90:ee:bd:4d:24:01:5b:b8:
20:3a:2b:be:70:85:ed:bd:93:22:47:d6:0b:c8:cf:
d7:1b:88:f6:67:37:14:25:1f:e2:21:77:d2:39:bc:
93:4b:82:51:a7:ef:97:55:11:99:ae:f4:f4:c1:77:
ae:bc:8d:a8:ef:d4:33:ec:af:57:67:c1:d4:76:66:
03:53:77:a7:46:ef:d3:96:24:aa:c0:07:b3:0a:77:
3e:45:59:31:94:7e:a2:ad:10:1b:f8:81:20:c2:88:
fd:63:20:6c:ac:66:73:c4:a5:df:22:e7:50:ff:e8:
c0:c5:38:22:31:d9:94:c0:77:aa:df:89:fa:a9:c1:
12:80:de:82:bc:31:dc:a4:73:12:e9:02:a5:01:ba:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.80.0/22
IPv6:
2a0b:5200::/29
Signature Algorithm: sha256WithRSAEncryption
01:cb:e7:08:e5:82:b2:f2:97:39:ab:6d:1e:e1:86:41:94:6b:
8b:65:f9:52:82:2e:39:22:4a:0d:43:ee:d5:b5:56:12:25:bc:
24:15:71:ee:cf:19:80:ed:78:c8:79:92:a6:eb:73:94:ab:d7:
cd:df:7d:6c:f4:dc:81:8c:29:5c:b7:f5:28:e6:ce:89:4f:dc:
c1:db:23:a8:12:af:4a:74:9c:02:5e:3e:1e:00:35:2c:d0:35:
37:8f:f7:d9:93:0e:1d:47:49:0c:69:05:1b:ea:e6:f3:09:4d:
17:c2:95:f1:cf:87:8f:76:fd:e6:db:37:5a:10:49:1e:a6:eb:
55:9f:7f:91:73:1d:01:96:23:72:6e:af:a9:58:33:87:15:75:
e7:3d:63:3a:41:1f:04:02:ca:77:c6:d4:0e:e6:f3:34:49:e7:
56:f1:f0:a7:6b:eb:1d:d1:79:a7:16:73:8f:5f:5f:09:96:73:
87:0b:f4:72:de:2f:b8:c4:16:d6:57:03:d5:c5:4f:4e:de:bc:
c8:5f:80:ed:1e:f4:8d:03:9c:a0:dc:f7:e2:53:14:a0:71:10:
81:a8:0d:77:c7:9a:44:5a:d7:ff:18:85:73:97:8d:9f:e7:27:
bc:ef:59:77:3b:32:68:50:5c:a4:67:b7:ea:5e:5e:67:d5:fb:
38:14:82:be
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZt87bV+PrtWKzYcmacEm8gmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjk4YTU3NTRkZWU5ZWVmNmYyMjQ1NjJjYjgyMzlhYzhiZGIwNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAfxSquaRnHjfuE7QUxffnqS4Z4D
tFSZ7b1nHYRlhWokUWsHz40CD29U9XKYAWMKdu/INMJp335EYGKSvoqWeNJL7Bc+
ZRmmthcL8zjSj71BZqQGKQMbbKJImTic6b53aBUrqoXaakR8hdbiCkqEkO69TSQB
W7ggOiu+cIXtvZMiR9YLyM/XG4j2ZzcUJR/iIXfSObyTS4JRp++XVRGZrvT0wXeu
vI2o79Qz7K9XZ8HUdmYDU3enRu/TliSqwAezCnc+RVkxlH6irRAb+IEgwoj9YyBs
rGZzxKXfIudQ/+jAxTgiMdmUwHeq34n6qcESgN6CvDHcpHMS6QKlAbqylwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFCaYpXVN7p7vbyJFYsuCOayL2wW4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzdiOGI2
Zi1lNDRjLTQ5Y2ItOGM5My0wZjA4NTU5ZDdkMTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvN2I4YjZm
LWU0NGMtNDljYi04YzkzLTBmMDg1NTlkN2QxOC8xL0pwaWxkVTN1bnU5dklrVml5
NEk1ckl2YkJiZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuadQMA0EAgACMAcDBQMqC1IAMA0GCSqGSIb3
DQEBCwUAA4IBAQABy+cI5YKy8pc5q20e4YZBlGuLZflSgi45IkoNQ+7VtVYSJbwk
FXHuzxmA7XjIeZKm63OUq9fN331s9NyBjClct/Uo5s6JT9zB2yOoEq9KdJwCXj4e
ADUs0DU3j/fZkw4dR0kMaQUb6ubzCU0XwpXxz4ePdv3m2zdaEEkeputVn3+Rcx0B
liNybq+pWDOHFXXnPWM6QR8EAsp3xtQO5vM0SedW8fCna+sd0XmnFnOPX18JlnOH
C/Ry3i+4xBbWVwPVxU9O3rzIX4DtHvSNA5yg3PfiUxSgcRCBqA13x5pEWtf/GIVz
l42f5ye871l3OzJoUFykZ7fqXl5n1fs4FIK+
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:20 2026 by rpki-client