Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.cer
File: KMWu-Y8hlLSzfyWF0rMh0s0FG2o.cer (raw, json)
Hash identifier: Hoti5gJMbKdDNf0Z9KeNiOOa2JDGEcZ4rGn/xizXowE=
Subject key identifier: 28:C5:AE:F9:8F:21:94:B4:B3:7F:25:85:D2:B3:21:D2:CD:05:1B:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E35D198E926AC016C3BC15C40FA659756
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 17 May 2026 12:03:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.38.184.0/22
IP: 2a04:7400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:35:d1:98:e9:26:ac:01:6c:3b:c1:5c:40:fa:65:97:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 17 12:03:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28c5aef98f2194b4b37f2585d2b321d2cd051b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:58:fc:92:fd:6d:4d:dc:d9:ef:09:cc:ce:
bc:d5:b2:bf:d3:f9:d9:c5:7b:7a:3c:fb:c8:c8:6d:
c8:ae:08:36:2e:c9:05:fe:0a:51:4b:40:a5:d7:d2:
5a:b7:4a:36:af:47:a2:b3:12:d3:5c:19:a2:9b:a5:
83:ea:3f:ce:8f:46:3f:0e:77:ad:3e:eb:58:6b:75:
e4:c3:e8:ab:2c:fb:da:19:0c:71:2a:59:33:ea:09:
71:4a:04:9b:7f:2a:88:85:40:3d:ca:e8:f8:b2:74:
46:90:43:32:8f:f5:77:2f:8e:dd:33:25:fc:f5:15:
6a:64:51:f0:79:76:61:79:70:7b:52:23:3d:6c:32:
d0:16:d2:4a:89:f0:39:92:f3:7c:a4:f9:43:f5:83:
20:8f:56:a8:02:ea:89:0d:ce:b7:47:e8:3b:9e:02:
aa:94:0b:0c:52:90:13:55:17:1b:26:ca:91:94:97:
e6:1b:f5:e6:89:8b:a3:f1:b3:23:d1:d3:28:ee:3c:
1c:f5:7b:86:c3:d3:7d:f9:bc:f7:22:aa:cb:20:75:
9b:29:58:c7:28:dc:af:19:3e:64:b5:46:30:7c:46:
42:76:07:87:fb:75:ff:62:dd:de:fc:2a:38:90:2f:
51:c3:ce:df:e8:3c:64:54:be:19:e0:19:1d:61:c0:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C5:AE:F9:8F:21:94:B4:B3:7F:25:85:D2:B3:21:D2:CD:05:1B:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.184.0/22
IPv6:
2a04:7400::/29
Signature Algorithm: sha256WithRSAEncryption
ac:4f:07:08:7b:fd:9b:3a:45:b5:e8:fa:c0:9c:f9:25:2b:eb:
3a:5d:85:51:e8:9f:11:c6:9f:47:51:d2:e4:85:38:2f:3d:6b:
b4:4c:6c:ed:0a:9f:a6:d9:5f:06:c3:dc:a0:58:1b:b0:70:df:
6c:98:17:1c:3c:4f:65:60:cf:73:a5:56:a8:da:b9:e5:1a:95:
58:8e:66:66:0e:f7:7a:f1:8c:58:a2:eb:db:6f:7a:09:35:36:
6b:3d:ae:ef:46:93:b0:8d:62:55:b5:aa:b7:bc:be:39:6d:80:
91:f1:79:68:34:48:d6:05:c5:a6:91:60:19:13:f6:3c:fc:74:
f7:76:68:8f:99:56:cc:fe:96:46:a7:5a:4a:da:cb:58:88:05:
11:5e:84:3a:52:79:55:10:2d:03:f0:07:78:36:5c:5d:95:7f:
0b:f5:93:3d:c9:38:22:bb:62:a9:10:92:ea:0b:3a:0c:b0:1b:
90:6c:e1:fd:3a:5a:36:9a:e9:89:6c:8e:72:49:1f:c6:26:7c:
62:d8:fd:eb:61:32:ed:73:0d:8f:6c:b4:fd:4c:ef:5c:a5:6d:
a7:8f:f9:05:9d:6e:3b:b4:cd:2e:82:fc:42:7a:ba:15:50:03:
52:d7:7d:bd:ae:b4:c6:db:32:39:14:d3:5d:63:55:e8:3d:70:
d0:43:74:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:42:04 2026 by rpki-client