Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
File: jNgCUSzLdFsqG48xVxTr45OVQD4.cer (raw, json)
Hash identifier: apJMcZFOXsySyMaoJewxzBiylBg4ml0cpUOZxzWTZ3I=
Subject key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D38C6C296A3E5661655C3872317019517
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 29 Mar 2026 08:47:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 30741
AS: 34493
IP: 141.0.184.0/21
IP: 193.19.76.0/23
IP: 194.116.144.0/23
IP: 195.238.96.0/22
IP: 2a0b:a140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:c6:c2:96:a3:e5:66:16:55:c3:87:23:17:01:95:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 29 08:47:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:c1:db:56:c5:80:dd:ee:f7:56:07:e7:48:
0a:b2:1c:4b:38:3b:13:59:94:7a:a5:c3:75:e4:24:
66:86:6a:ab:df:4b:18:11:b5:2e:da:5c:00:4c:ef:
6c:8c:84:3e:0e:28:25:df:3a:d2:1f:b3:b0:e4:8a:
0b:a8:37:e0:1d:c1:4a:41:9e:a8:cb:38:df:b5:33:
f8:0d:cb:68:5c:aa:79:b3:25:05:6d:64:05:0b:d1:
4e:4c:98:29:67:f6:03:a6:6c:7a:1f:40:b1:60:61:
37:01:f1:94:2d:09:0b:e3:35:b0:a4:76:df:dc:c0:
31:86:a7:3e:4d:f8:08:b7:23:3c:d8:b6:9f:0a:be:
1f:06:87:ac:5d:c7:08:7c:13:2a:47:27:5e:da:ac:
cb:a9:8b:80:c0:64:da:70:77:3a:dc:b0:86:b9:37:
37:00:43:ae:a9:63:ec:e7:45:f0:3f:f0:1a:c2:b3:
20:e5:a5:d8:8c:85:8c:66:3b:a8:76:77:d7:de:9c:
3d:31:75:24:c0:ab:94:85:4a:ae:6e:bd:37:c2:db:
7e:c9:31:b1:bf:f7:ca:a5:b2:d6:94:da:d6:68:e0:
71:98:34:f9:42:52:99:22:45:73:2a:ca:24:20:b4:
89:e4:32:ba:b3:7f:03:a3:f7:68:84:3d:ee:ef:1a:
f5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.184.0/21
193.19.76.0/23
194.116.144.0/23
195.238.96.0/22
IPv6:
2a0b:a140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30741
34493
Signature Algorithm: sha256WithRSAEncryption
b1:bc:9c:a1:ad:35:dc:bf:83:32:eb:a5:e1:14:70:07:d9:37:
6d:98:4a:45:27:a5:36:f4:8e:80:b1:d0:1d:ca:ab:2f:3f:18:
a4:af:c8:0c:ed:b9:2f:b6:c4:4d:09:d3:35:31:fc:1d:5e:91:
d2:fd:a0:57:da:be:76:f6:83:74:aa:ed:93:78:91:ae:9c:d4:
a1:55:8f:ca:25:9b:8e:d7:f8:80:f4:ee:17:99:dd:ad:88:e1:
97:f5:dd:45:54:e2:01:18:cc:d1:35:ce:96:0c:09:48:a3:70:
85:5a:f8:1d:e6:9d:81:fd:4a:5e:4c:e4:58:63:62:d7:71:35:
09:1c:13:ae:86:00:33:7f:23:0d:4c:55:6e:05:8a:ea:f5:36:
3d:c3:4e:45:cb:c0:ed:89:85:f5:53:45:a2:71:02:9f:4c:7b:
72:e3:38:c1:bb:28:67:3d:4f:57:dd:39:e3:ec:b2:89:01:ba:
60:2f:0c:a7:b9:5a:2c:40:9b:7d:7d:02:61:12:ca:72:1a:6b:
80:00:97:ad:a3:1a:a8:4e:aa:78:6c:86:da:0f:a5:b3:d1:70:
f8:1f:78:cc:b9:2c:87:d8:ba:bb:0e:bf:e5:e9:76:aa:f2:54:
ea:d3:2b:7e:ba:51:c2:5d:ee:93:89:82:68:81:3f:48:05:53:
7e:ac:23:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:57 2026 by rpki-client