Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.cer (raw, json)
Hash identifier: RQ+i12LOWU3vycCfqB6VzVfneBhfNZvlQ8PQ1bXFfyI=
Subject key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797E50E083133EA042FF8DA898A37A40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205202
IP: 185.225.96.0/22
IP: 2a0d:ac00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:50:e0:83:13:3e:a0:42:ff:8d:a8:98:a3:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:6b:c5:4d:40:95:48:6b:61:7f:9e:68:29:
44:3f:98:ce:f5:cd:91:9a:50:8d:c3:95:73:20:68:
39:09:b3:47:76:ec:aa:ce:77:76:30:ab:d0:cd:27:
6e:25:99:cb:80:aa:50:cf:d2:85:4c:b6:08:8a:41:
d0:da:09:03:2b:a7:15:34:75:36:55:43:0c:ab:21:
4e:d1:7c:cc:62:a1:f3:2e:aa:fb:55:cd:8a:04:44:
dd:e4:fe:19:98:24:27:68:0c:61:0d:6f:65:8f:77:
cb:d0:46:d8:d1:f0:a2:22:c7:de:75:41:6e:ab:a4:
a1:8c:d1:63:db:70:95:2c:f2:23:f9:42:74:8f:f6:
fb:88:09:c7:43:99:75:ba:29:32:9b:c8:6e:66:2e:
23:83:21:f1:9b:03:42:f6:0a:d7:31:bb:68:22:ea:
86:56:7b:6b:f7:ad:cf:bd:ac:02:0c:23:50:2c:07:
4d:a6:a2:c0:2f:bb:7e:1f:81:44:5d:57:2b:a5:f0:
b3:97:78:ba:cc:4a:ed:c4:81:b5:a4:11:24:f3:92:
38:82:64:6d:32:97:8a:33:7c:61:22:c4:c2:42:2c:
0f:2f:38:dd:65:87:7f:7f:b2:e7:85:2f:f7:5f:fd:
96:68:92:f3:6c:c7:77:da:cb:e8:af:ec:c8:6d:6b:
66:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.96.0/22
IPv6:
2a0d:ac00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205202
Signature Algorithm: sha256WithRSAEncryption
45:ce:bd:24:df:8c:b7:91:6f:f6:9e:52:ee:9f:e8:9b:79:d5:
12:83:1b:fe:a1:7b:73:37:00:0e:04:82:27:3a:38:d5:25:3d:
1f:ce:6d:72:77:07:99:68:7e:10:3e:0e:24:35:48:78:7c:6b:
16:3f:17:ea:76:ac:0d:37:ac:10:d9:a9:28:e4:df:2a:ef:c0:
39:ab:88:06:c4:3c:67:79:36:fe:b6:74:30:c0:3d:78:bb:4c:
69:43:8e:0c:c8:b2:5e:57:11:62:30:f0:74:48:15:13:0f:9c:
4e:12:71:5b:65:5c:90:08:3e:7d:15:d4:91:c8:54:55:34:b9:
45:d7:32:82:a8:9a:a0:38:d6:33:02:ca:ab:17:a6:48:c1:f3:
dd:99:0a:ff:5f:39:72:1f:55:84:ae:22:99:e5:77:29:84:c8:
92:b9:c5:56:5c:dd:77:ce:ce:79:e4:68:e0:7a:6d:76:b1:90:
2d:16:71:92:ea:9d:14:13:92:ff:d2:e0:04:a4:7d:23:db:b0:
b2:55:fe:3d:de:96:2f:d4:17:b9:ec:40:e0:1a:9a:9b:6c:51:
6e:bf:48:35:ea:38:f8:72:23:9e:7c:73:db:ac:9b:c6:08:5f:
07:2f:a5:c2:6c:38:20:8e:e7:74:4c:6c:93:5e:0b:f0:95:5b:
06:6b:f2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:46:06 2026 by rpki-client