Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/WCKF9OH2Ka2aLM_gMeKBLuTObno.cer
File: WCKF9OH2Ka2aLM_gMeKBLuTObno.cer (raw, json)
Hash identifier: pFaSYG5P7TKjjBSa3QpiLHER0hgr9txtFdnZVteldw4=
Subject key identifier: 58:22:85:F4:E1:F6:29:AD:9A:2C:CF:E0:31:E2:81:2E:E4:CE:6E:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0B3F4A2F63392FD5B07461BD17A7B7585
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 18 Sep 2026 09:59:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218772
IP: 157.173.68.0/24
IP: 2001:67c:9b0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:f4:a2:f6:33:92:fd:5b:07:46:1b:d1:7a:7b:75:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 18 09:59:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=582285f4e1f629ad9a2ccfe031e2812ee4ce6e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:1b:fb:46:62:fb:8e:58:3a:e0:7f:0a:2a:
96:81:4f:13:85:16:b9:80:cd:69:b3:2b:93:36:fb:
b6:40:bb:6d:cb:bc:39:eb:85:9f:6f:67:6e:f4:10:
b6:2f:2e:1a:2e:b8:71:a9:94:91:02:13:69:bb:97:
0f:40:14:f1:7b:1e:a8:1d:25:5b:ce:bd:74:c4:e0:
d9:a4:4e:90:02:fc:05:1f:8e:8e:b2:11:28:b4:a7:
0f:f2:bb:e6:fe:1a:8a:24:fc:15:77:76:2c:6f:d8:
d0:6f:62:68:c4:3f:a8:9b:cb:25:2b:fb:14:de:ea:
70:87:a4:7b:43:26:00:9f:c8:b1:18:30:bc:0e:ba:
13:15:8f:b3:ec:bd:17:3e:11:e7:80:36:f0:71:9c:
15:0a:3a:b1:2e:db:cf:24:fb:13:56:14:41:c5:cc:
01:4b:90:99:4d:d6:f6:8a:5e:7d:d4:36:d5:1e:05:
16:8e:44:0b:ed:eb:87:d3:4c:bf:84:86:08:90:9c:
a3:15:4c:57:a6:ef:4c:90:72:60:97:72:47:5b:b5:
0d:95:85:ba:40:dd:18:90:76:fc:f0:b0:26:7f:e3:
28:ae:db:43:6b:4f:17:84:d3:f9:57:1f:b1:11:4a:
4e:9e:8f:30:b2:8f:44:ad:d4:f9:14:01:98:b0:a6:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:22:85:F4:E1:F6:29:AD:9A:2C:CF:E0:31:E2:81:2E:E4:CE:6E:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/472bd1-74ab-42c6-a178-7d078441647b/1/WCKF9OH2Ka2aLM_gMeKBLuTObno.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.68.0/24
IPv6:
2001:67c:9b0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218772
Signature Algorithm: sha256WithRSAEncryption
1c:d2:99:ef:59:51:e3:7a:eb:f5:ca:cd:3d:38:52:bc:c2:5c:
c5:e1:02:21:77:8d:2c:a0:71:71:04:3b:0f:65:af:2d:18:81:
18:17:78:5b:73:4e:be:cc:4a:e9:87:7d:e9:3d:0a:3a:05:c8:
2f:32:98:24:56:6a:33:0d:ac:92:7e:d2:f0:6d:12:af:98:af:
aa:35:90:9f:ad:5e:c9:0d:2f:52:1d:76:68:dc:d8:0e:08:89:
3d:01:93:9f:c3:e7:85:8d:c6:a9:40:e6:92:53:49:12:5b:fb:
2b:76:ea:66:59:72:b7:36:1f:60:2c:5b:3a:bd:d4:9d:66:8d:
1d:14:b6:5a:af:17:df:4d:c9:f5:65:f9:e6:f8:10:af:54:da:
a1:f3:fd:e4:89:92:d2:05:c6:e5:a4:c9:e7:95:93:d7:88:16:
ca:c2:0b:91:d1:7c:aa:b7:70:e1:10:ec:52:16:ba:ef:df:09:
9f:88:90:7e:4f:97:5b:9b:fa:77:93:a3:0f:0c:58:38:d8:79:
57:58:9a:68:1c:ec:f3:39:d4:92:91:16:3a:d7:b7:c1:e7:28:
51:8d:97:46:16:99:01:1e:1a:ca:5e:97:8f:52:4e:87:c2:26:
8b:eb:1f:eb:82:7b:1e:d2:60:40:70:fd:07:d9:0f:ba:fa:72:
8d:30:73:a4
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAaCz9KL2M5L9WwdGG9F6e3WFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTE4MDk1OTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODIyODVmNGUxZjYyOWFkOWEyY2NmZTAzMWUyODEyZWU0Y2U2ZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVcb+0Zi+45YOuB/CiqWgU8ThRa5
gM1psyuTNvu2QLtty7w564Wfb2du9BC2Ly4aLrhxqZSRAhNpu5cPQBTxex6oHSVb
zr10xODZpE6QAvwFH46OshEotKcP8rvm/hqKJPwVd3Ysb9jQb2JoxD+om8slK/sU
3upwh6R7QyYAn8ixGDC8DroTFY+z7L0XPhHngDbwcZwVCjqxLtvPJPsTVhRBxcwB
S5CZTdb2il591DbVHgUWjkQL7euH00y/hIYIkJyjFUxXpu9MkHJgl3JHW7UNlYW6
QN0YkHb88LAmf+MorttDa08XhNP5Vx+xEUpOno8wso9ErdT5FAGYsKaIowIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFFgihfTh9imtmizP4DHigS7kzm56MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4LzQ3MmJk
MS03NGFiLTQyYzYtYTE3OC03ZDA3ODQ0MTY0N2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvNDcyYmQx
LTc0YWItNDJjNi1hMTc4LTdkMDc4NDQxNjQ3Yi8xL1dDS0Y5T0gyS2EyYUxNX2dN
ZUtCTHVUT2Juby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAna1EMA8EAgACMAkDBwAgAQZ8CbAwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDA1aUMA0GCSqGSIb3DQEBCwUAA4IBAQAc0pnvWVHj
euv1ys09OFK8wlzF4QIhd40soHFxBDsPZa8tGIEYF3hbc06+zErph33pPQo6Bcgv
MpgkVmozDaySftLwbRKvmK+qNZCfrV7JDS9SHXZo3NgOCIk9AZOfw+eFjcapQOaS
U0kSW/srdupmWXK3Nh9gLFs6vdSdZo0dFLZarxffTcn1Zfnm+BCvVNqh8/3kiZLS
BcblpMnnlZPXiBbKwguR0Xyqt3DhEOxSFrrv3wmfiJB+T5dbm/p3k6MPDFg42HlX
WJpoHOzzOdSSkRY617fB5yhRjZdGFpkBHhrKXpePUk6HwiaL6x/rgnse0mBAcP0H
2Q+6+nKNMHOk
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:42:14 2026 by rpki-client