Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
File: Jg12BCKSiW-WU6ponkFgeUKzT4c.cer (raw, json)
Hash identifier: pOoq0725e+wfpSfKCo30ToKV4l2XEXgX2CKpqGHQVVM=
Subject key identifier: 26:0D:76:04:22:92:89:6F:96:53:AA:68:9E:41:60:79:42:B3:4F:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F380B22646647075D926ACD3E51C48742
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 06 Jul 2026 15:28:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219504
IP: 2a07::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:0b:22:64:66:47:07:5d:92:6a:cd:3e:51:c4:87:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 6 15:28:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=260d76042292896f9653aa689e41607942b34f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9c:ea:59:bb:65:1e:bd:3d:dc:3e:c4:7a:91:
0a:6b:56:b3:29:f6:19:de:62:f1:87:83:48:93:00:
c9:db:cb:b4:0d:58:d3:1f:7d:33:26:fe:d6:c6:e6:
dd:db:68:76:4f:e2:36:c5:ca:26:f0:40:5f:5f:e9:
1c:56:a4:12:d9:25:db:b9:20:d8:d1:87:0c:1e:3f:
16:3b:63:0f:19:41:44:56:42:7a:b9:70:18:33:7b:
fb:28:90:3a:2b:b6:5d:87:86:d6:15:87:38:80:87:
9c:1c:c9:1e:a4:b6:64:e0:0b:e0:30:73:d1:36:dc:
14:13:bc:ec:f8:12:e8:a8:84:ca:f0:13:77:b2:6f:
45:25:0f:eb:e1:eb:e3:6e:de:94:bd:2c:39:a3:06:
37:a1:6d:d4:bc:77:c4:1a:e4:2b:d5:9d:c7:e6:ce:
b0:0f:89:87:e1:81:25:79:75:bd:bd:28:c4:c8:b0:
02:de:be:7f:3e:72:9a:a1:f1:3c:7b:e1:32:ae:09:
20:b0:fa:14:bb:e8:2a:a9:8a:da:ad:1f:9b:02:3b:
a2:5b:3a:5b:1e:23:83:99:c1:a9:82:d2:a0:e3:2b:
43:3a:58:b9:50:34:97:8c:32:fd:97:0c:e8:81:15:
d8:fc:b1:76:b3:51:db:fd:c9:a8:b0:16:5e:c9:4b:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0D:76:04:22:92:89:6F:96:53:AA:68:9E:41:60:79:42:B3:4F:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219504
Signature Algorithm: sha256WithRSAEncryption
54:eb:b1:53:b8:1c:b0:59:14:f6:b4:8a:99:9a:41:11:f1:eb:
73:7e:44:6d:ca:99:48:48:26:81:8c:c6:be:10:75:45:d6:6b:
fe:33:d3:11:71:c9:5b:7d:19:0b:12:84:0c:e6:85:51:70:08:
8b:2c:db:a7:df:30:02:c4:23:db:d4:cf:cf:66:45:9e:b2:f9:
f3:9f:ad:f5:85:3b:ae:d7:fc:1b:92:3e:7a:16:ae:5d:bf:ed:
04:43:be:fb:97:bd:8a:5c:62:ce:f5:87:90:f4:fb:44:56:5a:
5c:70:c1:6f:15:77:7e:0e:7c:ff:ef:27:6d:49:5c:93:8b:b8:
6e:69:94:69:00:f4:90:5b:75:7d:e3:a6:99:fc:fc:e6:e2:4a:
14:d3:e7:a9:10:7f:d1:e9:60:69:26:fc:ab:5e:b3:0c:ea:e6:
b8:a3:c3:11:d0:63:c3:6b:25:b6:ee:5c:8b:21:fd:bb:05:10:
5e:04:48:d0:56:15:9d:5a:ae:26:fe:03:b1:8f:22:86:b7:91:
ba:74:36:f4:60:83:f7:40:02:6f:be:5c:f6:f8:87:19:4a:b0:
77:e7:a4:1f:5b:56:80:03:28:bb:1b:14:cd:70:09:e9:42:34:
04:17:28:5f:07:23:12:a2:04:f7:1f:ea:2f:53:20:c1:03:9c:
6c:df:b2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:07:45 2026 by rpki-client