Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
File: K8J94IFvfguHpzPdMZkInlN_Jhw.cer (raw, json)
Hash identifier: vyw+I98FeK+TsIQGEGSRY+ndl2vepSAMK8XFL6BJrVQ=
Subject key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7834CC65C62E5881926DC7B1CE3419A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201395
IP: 2001:678:740::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:cc:65:c6:2e:58:81:92:6d:c7:b1:ce:34:19:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:21:3e:67:83:15:56:9b:17:df:9e:5e:98:
ee:79:ec:80:98:94:40:36:ea:b2:3f:fb:9b:ec:8e:
6d:55:4c:e5:3c:2e:89:fa:a7:58:93:01:9d:2c:fd:
27:22:f9:2d:73:7b:cb:60:d9:5e:db:8c:f7:be:c2:
3b:6a:d4:b3:45:9e:a5:2d:13:77:e8:0a:a5:3c:77:
99:75:c6:de:87:80:d0:e9:ff:2c:8e:75:cf:fa:5d:
b1:15:6f:43:b8:34:fe:fe:5b:b9:c0:ac:af:d2:5f:
08:83:cd:75:d4:7f:ba:2e:47:f2:f1:a3:67:e8:c7:
c1:81:a1:90:f1:f5:0b:a3:db:5e:9e:45:91:7a:31:
cf:61:55:28:e7:4b:ec:65:2f:1a:a4:25:02:56:c0:
ee:4a:01:3b:ff:df:68:c4:09:0a:74:e4:b9:de:6a:
01:ff:2c:8a:4d:f5:ce:26:ae:3e:0c:18:b2:b0:81:
0e:5f:f4:1d:94:25:d7:26:20:75:e2:f5:fd:33:88:
28:44:23:6c:b3:cc:33:ad:4e:6e:53:01:c1:ee:6b:
cf:60:04:c2:3c:7a:c2:58:49:87:a6:3a:1a:63:c3:
ab:8b:88:e3:78:32:06:c3:ca:c9:bb:18:0a:74:07:
ce:45:53:77:56:ae:54:fb:d5:55:11:f7:34:22:34:
e6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:740::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201395
Signature Algorithm: sha256WithRSAEncryption
28:04:8b:99:3c:0b:fa:a4:60:03:c4:67:e4:55:a0:fc:a4:0e:
50:e2:3c:1d:3c:99:bc:b1:bc:fe:46:37:c1:77:1b:43:5e:0e:
d6:a4:21:47:d7:e3:66:30:11:d7:fa:b1:50:20:3f:36:b4:4e:
4b:9d:35:61:70:29:cd:ec:80:96:9f:e3:05:88:a4:f7:ba:2a:
c1:0a:bf:53:39:e2:99:f3:86:39:3b:35:8d:3f:c1:3d:a3:44:
2e:c6:32:5b:8a:4a:bd:ea:4c:29:35:8e:14:b8:de:56:fb:16:
7a:af:67:2c:82:39:a7:da:e8:cd:6a:12:03:49:89:de:5f:ae:
4a:36:eb:75:00:fb:8d:b6:75:22:3a:b3:19:eb:3b:ca:78:46:
0c:aa:eb:04:30:49:57:86:7c:a2:04:82:1c:bf:df:10:48:50:
12:3b:ed:78:3d:d5:95:b5:b3:47:ab:c1:e4:06:fc:3f:50:a9:
ef:da:8b:4c:52:e5:06:e1:38:c6:95:0f:4c:1a:ef:49:1a:d4:
a0:eb:30:fb:e1:6e:b0:e0:2a:e5:ef:8b:3d:5b:c9:20:39:4a:
cc:80:af:fc:55:5a:85:33:51:61:5e:c7:97:ad:ad:60:2c:ac:
57:95:71:4d:39:0f:0d:5e:4a:87:2c:18:f7:90:2f:15:12:a9:
53:0a:01:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:57:10 2026 by rpki-client