Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
File: WBTUHPqUPaGfJ3ig03PdKndB0G0.cer (raw, json)
Hash identifier: gjBJGXIR8Ju2fG+AzFZIfb4Mo9wnqb84MBh8Wy1DwpM=
Subject key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019BFF66115BD60A14CFDBCCFF06FE0D8D42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 27 Jan 2026 12:20:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197450
AS: 213652
IP: 185.133.32.0/24
IP: 2a12:e680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:66:11:5b:d6:0a:14:cf:db:cc:ff:06:fe:0d:8d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 27 12:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:b4:ff:4d:52:74:07:45:7a:24:9d:94:90:
1e:b3:61:be:fe:c5:52:f6:a9:d3:a3:d6:f0:24:62:
20:9d:18:0c:0d:d2:74:9d:5f:57:1f:ba:45:9a:4e:
88:37:4e:89:76:fa:5b:5d:59:4f:eb:14:d2:b4:fd:
8d:4f:5e:ce:76:4e:00:20:96:ea:c3:c7:33:b1:59:
00:89:53:6a:1d:4f:55:32:89:22:1d:81:50:7f:66:
d6:e6:cb:a6:2a:0e:b2:87:10:3e:fd:60:27:97:50:
42:cd:bc:36:9b:05:64:f8:a0:b7:63:aa:6d:47:fb:
b0:77:0f:6c:2c:49:87:a3:ba:f6:59:47:a8:2a:52:
29:61:35:9e:60:4e:a9:41:71:a8:1b:3a:9b:55:cf:
10:f9:f6:88:44:bf:03:44:59:b3:12:fb:51:cf:6d:
46:4b:2f:de:3c:d7:1d:62:b7:9f:ad:03:68:57:53:
1c:a0:91:35:9c:2c:15:06:45:12:21:d5:bb:da:0f:
a6:8d:c6:ef:0c:ff:57:5a:e4:ad:74:33:db:12:42:
81:b8:60:65:7b:6a:70:87:90:80:3e:d5:4e:60:7f:
0b:c7:a7:b9:dd:ed:ad:3b:7d:30:66:67:43:f8:65:
51:01:dd:0b:8e:78:ab:f2:ee:32:74:7e:b8:83:c3:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.32.0/24
IPv6:
2a12:e680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197450
213652
Signature Algorithm: sha256WithRSAEncryption
5a:d6:8c:a9:ad:3a:c9:88:67:f9:c4:c9:2e:8b:4a:16:82:2c:
a3:d3:da:0f:a9:23:ae:50:da:2d:50:ce:7f:d4:d1:b2:1d:8a:
06:4e:35:8e:69:0d:37:76:ac:51:ff:f8:13:fb:12:05:7b:32:
ba:4a:f7:62:47:14:6c:d5:69:39:90:05:79:a9:c9:3f:61:97:
98:f5:29:7c:e1:26:af:4e:81:e4:6a:1d:dd:a3:93:8f:bc:ac:
89:0e:b8:e8:a3:42:67:df:46:88:40:58:06:37:5e:3a:2c:df:
1f:27:20:d2:ff:d5:67:c6:93:49:0d:57:54:6d:a2:28:f8:47:
c8:4f:91:98:03:e6:20:60:4c:b6:2d:06:e6:be:23:17:11:c6:
af:28:16:ce:ce:2b:bb:d7:49:bc:5d:02:3b:0f:96:41:49:c3:
e5:21:95:e4:3a:43:d5:53:e5:da:ff:ad:1d:33:f6:f2:d0:97:
22:ac:c9:f4:06:4c:44:e2:da:65:73:94:69:7e:f6:1b:50:3f:
22:3f:69:c2:c9:6e:eb:7f:e5:cc:69:48:33:9b:11:37:12:a0:
50:ca:0f:38:3d:e2:c8:ea:88:b8:46:61:2c:14:dc:62:5a:1a:
d9:0c:3a:05:04:32:09:68:e5:35:60:dc:99:4f:d4:c9:e1:46:
dd:d7:44:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:27:50 2026 by rpki-client