Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
File: jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer (raw, json)
Hash identifier: wDhJe6OAo80SVhYtSFkaDm+OWSwS2AWlmR9EkJ4HX5E=
Subject key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F84304513312E249AC026FFA40AC49E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:22:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207563
IP: 2001:678:be8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:30:45:13:31:2e:24:9a:c0:26:ff:a4:0a:c4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:22:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:22:36:ae:e1:10:9a:be:d4:e5:c5:f8:29:
2e:16:1a:86:27:94:73:f1:90:30:37:83:2c:d2:5e:
29:db:82:01:b2:b2:60:5d:cb:76:9b:f8:1e:85:63:
70:12:7f:f0:f4:88:6c:e7:17:93:9c:01:29:06:db:
a3:d6:15:7a:f5:42:0b:bc:e9:c3:df:8e:75:09:17:
3f:1e:c8:c7:ea:19:2a:3c:4c:c9:9c:b1:88:88:33:
9f:6e:4c:de:ef:79:9d:0f:19:81:63:3b:b3:f1:7c:
79:1b:a7:6f:7b:0c:17:6a:d9:15:4a:0a:35:c1:ec:
72:f8:24:5d:18:d8:22:ec:df:fe:71:bf:79:51:3c:
1d:2d:58:86:6e:0e:8f:22:fb:fc:9f:26:c4:09:21:
ec:85:ee:87:cc:c0:fc:20:62:f0:26:44:a0:16:75:
49:36:91:41:b8:aa:b7:e1:f1:53:4a:17:cf:14:47:
c0:7a:ed:8f:f0:b8:5f:f1:4f:93:82:0f:35:bd:6b:
68:01:26:32:22:21:a9:61:1c:81:36:b7:64:43:32:
d0:9b:3c:29:81:0b:44:a7:93:bc:34:4f:4f:e6:3d:
64:65:2e:e6:5a:b7:17:93:6d:91:6f:c9:2e:75:63:
6d:b3:4f:f0:41:59:84:15:f4:ec:8e:88:ae:cb:62:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:be8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207563
Signature Algorithm: sha256WithRSAEncryption
00:75:35:49:82:db:cc:84:b3:13:0d:ab:12:43:de:c7:40:79:
8f:ad:80:45:fb:a3:eb:de:81:d1:dc:28:09:31:7c:62:ca:33:
d3:08:cb:a4:20:56:66:35:60:1a:dd:73:31:2b:56:a5:00:11:
3e:d6:17:a6:37:39:92:4e:64:fb:62:72:57:04:d3:fd:c5:90:
17:d4:a8:d8:c4:05:75:a3:6d:92:bd:41:3c:0e:9f:68:b5:97:
1c:fa:fb:21:62:0b:a8:3b:17:3d:51:0b:16:7b:a2:30:42:22:
ee:9b:c7:5e:4d:41:e4:c7:5b:99:a3:af:ab:cd:09:2d:92:3a:
e6:30:c0:d1:88:19:fe:34:40:33:3b:85:23:c1:7b:5e:56:bb:
be:48:82:63:b1:c1:99:a4:47:4b:3b:c4:9b:7a:06:da:ea:b0:
2a:42:47:98:ea:10:49:73:c6:4c:4c:d7:fe:17:ce:b6:fb:02:
1e:a9:e6:d4:f2:38:f3:2a:9b:ac:51:55:46:a3:0d:7d:48:b0:
03:f7:51:d6:1b:99:a2:6f:46:29:7f:df:54:6e:ce:b9:99:97:
93:b4:99:8b:8b:ff:6a:ba:cb:b6:4c:46:05:6c:31:85:95:7d:
fb:c5:6c:69:4a:b3:ed:bd:19:6e:a9:d6:62:b6:29:a8:a9:ba:
95:79:3c:e3
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZt/hDBFEzEuJJrAJv+kCsSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTYyMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjA0MWQ2NjllYTZjNDExNzBkNmY4MTQwOWMwZmZkYzI4ZTU2OTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNwiNq7hEJq+1OXF+CkuFhqGJ5Rz
8ZAwN4Ms0l4p24IBsrJgXct2m/gehWNwEn/w9Ihs5xeTnAEpBtuj1hV69UILvOnD
3451CRc/HsjH6hkqPEzJnLGIiDOfbkze73mdDxmBYzuz8Xx5G6dvewwXatkVSgo1
wexy+CRdGNgi7N/+cb95UTwdLViGbg6PIvv8nybECSHshe6HzMD8IGLwJkSgFnVJ
NpFBuKq34fFTShfPFEfAeu2P8Lhf8U+Tgg81vWtoASYyIiGpYRyBNrdkQzLQmzwp
gQtEp5O8NE9P5j1kZS7mWrcXk22Rb8kudWNts0/wQVmEFfTsjoiuy2KPyQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFI8EHWaepsQRcNb4FAnA/9wo5WkHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzFhOGNi
ZC03MmNmLTRhMWMtODNkMi1jMjNlYWVkNGQxMjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMWE4Y2Jk
LTcyY2YtNGExYy04M2QyLWMyM2VhZWQ0ZDEyNS8xL2p3UWRacDZteEJGdzF2Z1VD
Y0RfM0NqbGFRYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAvoMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMqyzANBgkqhkiG9w0BAQsFAAOCAQEAAHU1SYLbzISzEw2rEkPex0B5j62A
Rfuj696B0dwoCTF8Ysoz0wjLpCBWZjVgGt1zMStWpQARPtYXpjc5kk5k+2JyVwTT
/cWQF9So2MQFdaNtkr1BPA6faLWXHPr7IWILqDsXPVELFnuiMEIi7pvHXk1B5Mdb
maOvq80JLZI65jDA0YgZ/jRAMzuFI8F7Xla7vkiCY7HBmaRHSzvEm3oG2uqwKkJH
mOoQSXPGTEzX/hfOtvsCHqnm1PI48yqbrFFVRqMNfUiwA/dR1huZom9GKX/fVG7O
uZmXk7SZi4v/arrLtkxGBWwxhZV9+8VsaUqz7b0ZbqnWYrYpqKm6lXk84w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:23:34 2026 by rpki-client