Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jFdSEbjx8EzuCr3brasqBsw05gA.cer
File: jFdSEbjx8EzuCr3brasqBsw05gA.cer (raw, json)
Hash identifier: 0e+NgLHogFRw7+YgiKZ0k+ioEGj8HtC53rXUdCr07/o=
Subject key identifier: 8C:57:52:11:B8:F1:F0:4C:EE:0A:BD:DB:AD:AB:2A:06:CC:34:E6:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C4BF1E18EF851F9EBF04D54E8CCB4EBCB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Feb 2026 09:04:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201751
IP: 131.222.131.0/24
IP: 2a0b:5180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4b:f1:e1:8e:f8:51:f9:eb:f0:4d:54:e8:cc:b4:eb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 11 09:04:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c575211b8f1f04cee0abddbadab2a06cc34e600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:7c:31:41:96:4f:88:4b:35:af:76:b2:25:
67:63:4b:57:31:c3:91:3b:f1:30:9d:5f:09:ea:66:
0b:98:bd:41:4a:6d:26:e6:ff:a4:01:82:e9:c2:fd:
92:a1:45:b2:cd:3e:47:ac:ec:af:41:b5:5b:6d:97:
70:8f:d0:8a:f0:2e:75:d9:e5:32:a9:a5:c3:13:65:
d3:30:e3:34:26:20:aa:77:c3:8b:7b:8b:84:a2:8d:
d0:e7:cf:02:2f:60:39:90:c3:90:ad:ff:31:f8:f7:
ea:1b:ed:64:0f:7a:5f:64:e0:4d:82:cb:e9:3c:6d:
10:78:91:35:e5:0f:ee:a3:31:ee:18:f4:cd:db:86:
62:47:ba:f9:ac:57:b4:ca:d9:9c:be:0b:d8:99:0f:
76:eb:76:5c:91:a2:96:86:76:4f:7e:02:d1:f6:51:
d3:d3:a7:3e:d6:03:07:27:57:d1:3d:29:6a:54:25:
b2:0d:75:f4:87:7c:6e:f9:52:ff:a6:81:03:6e:b9:
3d:d5:61:2d:30:2d:6f:fa:81:58:60:7d:8b:60:b9:
6b:3b:1f:a4:1d:2c:db:a7:ba:62:41:41:61:37:da:
f5:54:d7:b8:20:72:3d:bf:4d:94:c8:5b:c1:c8:c9:
8f:59:3e:25:5e:d7:2e:57:e8:2f:7e:24:35:3a:dd:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:57:52:11:B8:F1:F0:4C:EE:0A:BD:DB:AD:AB:2A:06:CC:34:E6:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.131.0/24
IPv6:
2a0b:5180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201751
Signature Algorithm: sha256WithRSAEncryption
26:96:11:9c:f2:a3:b9:d8:95:9f:f2:dd:a1:95:cf:ef:2a:cb:
ad:2e:ba:b9:87:be:c2:f0:b6:13:15:b0:64:eb:2f:2d:ba:e2:
c5:4b:51:2c:97:6b:0a:ce:55:d6:5d:ec:01:26:ce:53:12:85:
81:96:17:0f:6b:9a:2d:f0:91:c0:30:75:7d:ba:c3:9f:4a:84:
c9:75:dc:b8:be:97:0c:11:47:93:7c:15:d7:09:48:03:8a:60:
36:bf:dc:47:79:4c:05:33:2b:ee:f8:05:4a:2b:87:2c:5b:5a:
62:6e:0b:54:89:71:55:ec:26:4e:48:f1:b3:db:60:3a:0c:3a:
f3:27:3d:c0:2c:f1:e8:1c:c5:d2:21:7c:37:4e:c6:60:78:f8:
01:bc:ad:6c:32:c9:05:c6:f2:d2:dd:98:21:26:02:45:96:98:
0b:f8:6e:55:da:e8:bc:56:4e:19:6a:e5:2c:ba:5c:ce:fb:c4:
76:0d:01:74:7a:fb:06:84:47:bc:55:62:70:2a:7e:4a:d7:68:
d4:f8:44:21:c7:bc:81:a8:56:73:91:60:20:81:3f:dc:eb:d0:
50:92:21:af:0f:96:23:31:de:61:fb:12:e2:23:81:7e:8e:8e:
01:b0:9e:78:4b:5d:f7:d3:62:e6:40:55:52:75:11:33:90:2a:
15:17:5f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:22 2026 by rpki-client