Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
File: JfzJXxkPb63_o5NBMcdMs6BojXI.cer (raw, json)
Hash identifier: s8guT/FZRUc0tWkYC+pSdbtm/11PciQL31d+FZffteY=
Subject key identifier: 25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C6C6654CCFF597DDDFE43266C5519FD61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Feb 2026 16:19:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198803
IP: 2001:67c:129c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:66:54:cc:ff:59:7d:dd:fe:43:26:6c:55:19:fd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 17 16:19:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:24:ac:1a:9f:dd:83:85:e1:c7:c3:8a:ff:3d:
a5:c3:c9:eb:99:d8:69:61:21:30:00:fb:be:fc:61:
a3:ca:58:0e:08:67:a1:d7:63:79:d4:3e:0b:e3:91:
75:88:97:86:b1:39:fc:fb:96:b0:63:bd:4a:f4:1e:
a7:0b:40:7d:04:20:e8:87:0b:5e:19:83:6f:f7:d6:
f2:ff:6d:24:6f:15:eb:0f:61:19:4d:62:d8:d1:06:
1c:fd:39:8b:69:6c:d6:5c:20:c7:c8:0e:7c:63:04:
30:95:5c:6f:ad:7e:8c:55:25:29:49:42:a1:25:37:
9a:d2:e9:58:d4:bd:a2:84:e8:ed:05:c1:c5:10:f0:
ce:5d:45:cf:cf:c6:aa:b1:14:bd:61:91:8a:ad:40:
08:41:11:80:49:21:cf:d8:6c:2f:35:e2:82:90:16:
c8:c0:04:50:f9:fe:15:2c:87:5f:55:e1:58:de:91:
dc:0f:4f:35:4d:17:c2:5b:80:e3:6d:20:34:01:18:
99:bb:2f:0a:10:56:33:a9:23:78:f9:b5:ed:b1:a8:
d3:78:57:ca:89:00:0e:dc:5c:5d:0d:db:1f:66:e6:
52:30:84:a4:85:60:d9:75:70:5b:12:2d:64:81:b1:
07:4d:92:ff:3e:c9:e4:66:e5:a2:ac:bb:07:b8:96:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:129c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198803
Signature Algorithm: sha256WithRSAEncryption
46:d4:c6:f6:fd:8e:c3:72:1b:ec:f3:c0:70:69:09:73:47:a1:
60:65:db:2d:39:78:87:3e:91:f5:5b:66:b1:a0:1e:f2:f6:c5:
b7:d6:21:3c:6e:17:e3:09:38:96:20:3d:17:1a:98:89:b4:ec:
c6:65:c3:7d:46:a0:a2:a2:9f:c7:81:c4:f1:11:aa:26:00:b3:
10:b3:b5:2f:a4:4d:d2:36:84:37:d7:a2:e1:93:16:fd:c4:e5:
aa:1e:2c:7b:de:ad:14:41:0e:8c:0e:7d:ce:98:28:81:60:25:
24:09:02:52:48:d1:31:0e:25:77:25:cb:ba:5b:16:f6:45:a2:
99:18:12:4c:8f:6d:4b:44:00:2c:73:87:98:08:8c:4f:98:7d:
b6:be:7a:5d:c1:e1:00:31:f0:4c:9a:42:19:a5:b7:53:c1:ad:
51:94:fe:0f:86:78:9e:cb:f5:b4:4d:10:fa:0d:b3:26:8e:ef:
d6:47:5a:63:ed:47:db:ad:8f:ca:38:cd:4d:dd:85:4f:e6:2f:
cc:a2:9d:fd:83:3c:24:b4:76:a3:44:00:39:7c:91:13:61:fb:
68:70:7a:c1:2d:bf:f7:0b:fc:f8:ac:95:e6:55:32:4a:c6:43:
f4:a0:6a:82:a3:6d:60:d6:4e:4f:ea:db:75:26:e8:dc:1e:cd:
ee:1d:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:34:46 2026 by rpki-client