Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
File: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer (raw, json)
Hash identifier: qJuqNHDKo6LYRaWh/OmchV/Ncxv/cU6WqWW8r63lUeQ=
Subject key identifier: 58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797F078D467C601F3EE6EA5EBA28EF1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60426
IP: 86.63.0.0/18
IP: 109.234.176.0/21
IP: 185.17.164.0/22
IP: 2a00:8b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:07:8d:46:7c:60:1f:3e:e6:ea:5e:ba:28:ef:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58afedfef67918490634be4e2b75c11b70c2ea2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:49:d6:cf:28:a0:d0:a3:ab:2c:43:33:85:9d:
53:36:3c:04:b4:88:3a:d0:0d:fb:f8:52:7c:9a:46:
5e:fb:0c:a7:dd:d5:5e:d2:1d:6e:13:16:77:86:86:
7d:24:35:f9:39:61:e4:74:49:6e:bd:1c:57:61:94:
d6:b7:f4:4b:73:94:02:06:e9:68:c0:95:9f:a6:82:
50:27:9a:10:db:3c:4e:56:86:37:bd:27:94:53:c8:
e8:88:0e:0f:4a:87:29:fb:3c:a2:06:f3:57:5e:77:
a8:65:61:82:e8:ed:61:89:46:b0:eb:c4:aa:c6:16:
0f:68:39:b2:bf:56:84:34:f6:58:10:1a:6c:51:d5:
bc:26:42:46:12:d3:72:95:1a:d6:6f:d9:8f:6e:50:
ad:d5:73:7b:37:c2:12:dd:a6:7a:08:ef:1f:ee:de:
36:52:bd:79:e1:4e:8a:6a:8d:d9:0b:4c:db:7f:a4:
d1:0b:a8:d0:9b:42:b2:02:1c:b4:23:ad:6d:95:5c:
00:cf:10:23:fa:22:2b:26:f7:cb:ae:6d:14:17:f5:
4a:11:3f:eb:33:c8:21:df:17:1c:8c:a2:47:e0:bb:
30:4d:35:db:35:ae:72:6a:95:51:20:7b:30:8e:3c:
a6:22:86:0e:4a:03:f7:73:3f:8a:38:b8:a4:4f:ff:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.63.0.0/18
109.234.176.0/21
185.17.164.0/22
IPv6:
2a00:8b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60426
Signature Algorithm: sha256WithRSAEncryption
38:7b:d5:8d:b8:fe:4b:f4:8b:8a:48:c6:7c:84:96:83:26:91:
19:c1:87:7d:a4:6a:e8:93:c5:3f:9e:24:cf:f5:ed:9e:6c:83:
3f:42:32:88:47:5b:ad:ae:cd:3f:52:fa:fb:f5:98:0c:ea:68:
1c:7d:43:a0:0e:02:8c:55:b1:51:b2:68:42:8a:8a:93:b1:01:
0e:93:16:81:30:2e:1b:b2:0b:0a:3f:f3:82:fc:f0:3e:7f:2f:
f9:fa:b1:39:9d:e8:1e:00:f1:d3:18:fd:07:f3:4d:4d:98:62:
11:3b:d4:06:1c:ff:00:32:03:f3:cd:91:18:e8:03:e1:68:74:
a4:34:7f:4f:7c:ba:30:e3:d9:c1:d6:2e:f9:cf:cd:5c:78:18:
59:0a:e1:1a:18:d7:bd:03:1c:22:1e:a3:d1:cb:ac:67:05:ac:
72:fc:0b:55:17:01:07:32:cb:03:19:df:e2:61:95:03:76:d4:
ff:21:43:0c:93:4c:91:fc:78:19:a7:f9:c9:bd:dd:94:21:fa:
a0:56:b3:5d:85:b4:9d:75:f1:ad:24:70:ef:29:03:cb:e0:c6:
2d:7d:9f:26:39:f2:b7:ac:95:a8:c2:ae:58:7e:68:2b:77:89:
68:d6:bd:72:bd:eb:05:52:7b:4d:31:cd:61:1f:f2:9f:25:19:
11:14:fa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:00 2026 by rpki-client