Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1-JnTgr62BW0U5qO8YYjlOS93LvU.cer
File: 1-JnTgr62BW0U5qO8YYjlOS93LvU.cer (raw, json)
Hash identifier: VOflGH/orvuD0uZbSMwSCtSBfzP4PGfmoXLtAK2whFM=
Subject key identifier: F8:99:D3:82:BE:B6:05:6D:14:E6:A3:BC:61:88:E5:39:2F:77:2E:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FACA77D5ADB30F180833504085906B0D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/1-JnTgr62BW0U5qO8YYjlOS93LvU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 29 Jul 2026 06:54:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.69.112.0/22
IP: 2001:67c:2ed0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:a7:7d:5a:db:30:f1:80:83:35:04:08:59:06:b0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 29 06:54:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f899d382beb6056d14e6a3bc6188e5392f772ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:93:a6:01:9d:c2:da:65:5b:2e:4f:5a:3c:
ad:bf:36:60:40:55:a4:86:78:ec:5b:d8:b5:87:3c:
73:ac:bb:cb:ad:c5:05:fb:c7:b9:cf:c4:79:ac:6a:
59:ec:c4:a2:ab:08:bb:b1:52:c7:11:e3:03:2c:d9:
a8:b4:83:43:64:4b:a6:54:8c:fc:4e:32:21:13:23:
72:2d:77:76:35:6c:a7:12:ef:03:e8:b5:68:6d:fe:
3c:02:31:a3:e8:6d:08:66:fa:cf:bf:c1:47:f8:5b:
9b:1d:26:1c:fd:86:ab:2d:bf:1e:97:13:cd:f2:a7:
b0:66:86:e9:4f:d0:5d:8e:de:0d:ad:44:23:99:c5:
4f:a8:94:c5:fa:bd:09:8e:48:4c:bd:ed:c1:e6:87:
3c:a5:9b:8f:86:5b:2d:12:ad:9c:42:86:f0:18:4c:
46:78:bb:a8:0a:31:5a:20:7b:08:0f:59:2b:8a:ee:
cc:7e:ac:b5:eb:4b:e1:7e:48:6f:f3:02:2d:5f:4b:
31:04:ff:fd:9f:09:ca:35:af:2f:1d:cb:f0:ca:52:
03:5d:26:f0:99:e7:e4:bc:c1:c5:6a:48:67:e6:58:
f8:c4:f9:a7:0b:d9:1b:9f:0a:72:d3:cf:9b:79:b3:
10:e6:04:07:0b:6a:c3:1a:ee:d3:08:7d:ef:ae:16:
f7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:99:D3:82:BE:B6:05:6D:14:E6:A3:BC:61:88:E5:39:2F:77:2E:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/1-JnTgr62BW0U5qO8YYjlOS93LvU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.112.0/22
IPv6:
2001:67c:2ed0::/48
Signature Algorithm: sha256WithRSAEncryption
9b:6f:60:5e:34:59:65:2b:b2:96:09:cd:4b:ee:0a:53:5c:b6:
e5:f5:b5:95:a8:10:a1:03:5e:ed:dc:62:f9:8b:cc:4f:94:42:
35:d0:1c:fd:63:3a:54:f7:7d:dc:70:c1:11:08:67:67:6b:ea:
ba:6c:1a:e1:29:3b:8d:21:67:a9:bc:61:11:46:32:63:4b:6e:
c6:ee:da:59:38:62:95:7c:96:45:8c:47:5e:17:76:55:1b:2e:
88:e3:23:2e:b5:b5:9b:c2:57:7a:6a:a2:2e:00:55:b2:93:9d:
98:de:19:75:4a:a3:69:e9:9c:03:d2:c3:82:dd:b5:34:f8:9e:
6f:7c:ae:d9:3a:c5:b8:bd:c2:67:a8:64:71:61:ce:d7:55:13:
2e:19:e9:64:97:ee:ee:3d:21:81:f2:1b:97:d7:ec:63:4b:a4:
33:44:d1:fa:e1:0b:f2:98:7a:98:0a:50:44:73:c7:ab:3e:3c:
05:c8:5f:07:cd:2c:7c:fb:bb:83:19:cc:54:f8:9c:95:af:ed:
30:65:02:cf:69:63:fe:45:de:6e:f1:98:cb:c4:6c:23:75:dd:
d2:e3:91:df:9b:3e:fd:44:27:5a:c7:b8:e4:e6:30:97:06:40:
d5:64:d2:dc:45:0a:50:82:6d:3a:83:28:4c:57:fd:9f:2b:91:
2d:8a:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:24:11 2026 by rpki-client