Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
File: jFh6LAkWf52nMnTSmPmf210od3s.cer (raw, json)
Hash identifier: IQ2uIXIwakI7mkZwvN0ReP9xVxsMfPfrWt6RZo/Tilw=
Subject key identifier: 8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EB07B9A0AC2B461980ED81B3A43B7B887
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Jun 2026 07:42:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39458
IP: 93.189.0.0/21
IP: 185.85.84.0/22
IP: 2a03:8c00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:7b:9a:0a:c2:b4:61:98:0e:d8:1b:3a:43:b7:b8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 07:42:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:d7:9a:5d:b4:50:91:a0:37:cf:3d:de:b7:
bb:97:a0:dd:cc:28:d6:05:a1:e4:02:d3:62:51:4f:
3d:70:49:b6:4d:cb:1c:94:1d:d7:37:76:37:83:0c:
d5:20:0d:18:14:98:46:bc:2b:28:9d:92:b1:94:92:
f6:5b:96:0a:d5:3d:ef:6d:e9:69:43:87:af:a8:a3:
fd:52:17:8e:7e:9b:98:87:81:4f:c3:ab:8c:08:eb:
e4:dd:fa:cb:c1:a1:d7:7f:8e:ed:a8:eb:a3:ec:29:
c0:d3:82:92:a2:ce:3c:f9:95:3a:88:fb:98:7b:59:
eb:19:d3:28:a1:60:8c:39:ea:01:3c:52:9f:21:17:
4b:36:2a:91:c2:e6:75:50:17:69:31:a1:de:56:5b:
49:45:2a:06:7e:82:9a:7f:29:70:70:6d:c9:7f:73:
5a:be:97:cb:1d:e3:7a:aa:08:93:7d:ee:15:8b:ea:
8c:19:37:f8:eb:ad:28:1a:36:bf:bb:9f:f9:2f:7a:
57:7b:ae:38:32:08:63:d4:b5:66:81:13:52:4c:e4:
94:45:df:4a:b0:93:66:5e:5a:1a:d4:9b:d8:e3:e7:
c8:22:fb:7f:02:05:e8:d5:5f:80:6e:e9:3d:e9:cd:
d3:cc:a7:87:1a:98:30:c4:fc:08:b8:d4:87:98:96:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.0.0/21
185.85.84.0/22
IPv6:
2a03:8c00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39458
Signature Algorithm: sha256WithRSAEncryption
09:fa:02:5b:1b:03:10:8e:1a:e0:46:5f:2f:6b:4a:78:a8:bc:
18:68:92:1a:d1:59:36:88:b9:33:f6:8f:2d:83:99:cf:48:0b:
c6:13:c4:58:fc:3e:85:59:76:7a:71:39:22:4d:97:26:84:bb:
39:ed:1e:4b:71:2c:f8:93:84:0d:40:f3:d8:44:f9:b2:a6:25:
7c:73:b8:34:4a:39:52:e0:99:1a:78:80:ad:e7:79:d0:28:76:
4a:01:79:2b:06:2c:48:1d:e3:2b:86:1f:85:64:d3:64:1d:73:
52:b8:76:88:0e:f1:20:c3:63:39:23:19:75:83:23:8e:89:77:
dc:bd:aa:5a:8f:ff:67:91:c1:6c:dc:41:ad:bd:ff:c7:e1:b6:
1b:5e:ea:03:50:9d:19:a0:4a:51:b3:e6:8c:25:80:24:ea:ee:
fc:35:41:5b:ec:73:ac:51:42:6b:69:7d:08:fb:a8:1a:a1:4e:
a3:c9:fa:6c:16:f6:d3:1b:70:fa:1d:12:f4:fd:97:14:46:2f:
90:4d:ad:b9:39:ad:1a:76:0f:83:58:fd:82:7f:01:a4:85:54:
61:59:fd:1b:dc:38:53:a8:9f:ca:11:ff:5d:df:07:81:d4:de:
b6:60:18:03:92:61:2a:f1:6f:09:62:f4:5d:81:bf:e4:01:cd:
8d:70:50:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:45:20 2026 by rpki-client