Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
File: WUmzHrtuTLvQzHcMxvTVD3jw63s.cer (raw, json)
Hash identifier: l9r975hvF92LtFSWVtcUkVF8vfytnZ3dbFNGuoiwG6c=
Subject key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C0FB4EDECD229B23E651A183F92C3A639
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 30 Jan 2026 16:20:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 12734
AS: 16236
IP: 151.87.0.0 -- 151.88.255.255
IP: 151.91.0.0 -- 151.92.255.255
IP: 193.43.48.0/20
IP: 194.56.231.0/24
IP: 194.104.188.0/22
IP: 2a00:ec20::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0f:b4:ed:ec:d2:29:b2:3e:65:1a:18:3f:92:c3:a6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 30 16:20:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:5a:fc:f6:be:e2:d6:f1:3a:84:42:4a:f9:
8f:ac:f2:b2:29:85:74:70:ec:f4:c0:37:1d:a7:96:
83:e0:b9:c7:1e:28:97:de:60:d7:2c:17:7d:a4:31:
25:ea:b2:91:b9:ea:31:d4:b5:5f:72:68:e1:0e:b1:
72:7c:7a:98:5c:b2:7f:13:7a:f8:f4:5c:2e:37:5d:
d4:ea:4a:17:23:93:89:c6:3c:59:c2:5c:59:c1:30:
5e:2c:76:78:9f:7c:25:65:17:a3:57:91:54:b5:70:
e1:81:b8:cf:39:4e:bf:3b:4d:0f:a7:7e:76:81:ed:
e4:68:87:b2:8f:74:9b:4b:96:32:dc:0f:73:ce:f4:
2d:a5:cc:bb:44:4a:ca:71:ea:04:45:3a:9d:4f:10:
c4:b8:86:ee:fa:30:28:52:4a:c7:9a:18:6b:3a:3c:
41:0e:76:99:84:f0:92:f8:3f:be:bb:a5:17:b6:bd:
37:4c:f9:8d:46:17:c0:4c:60:58:e4:8a:84:fb:26:
51:ba:d1:ac:5a:78:79:3d:c8:cb:05:59:de:95:7d:
16:19:17:da:41:91:b8:b4:17:b7:9e:ab:0a:b4:e8:
5b:8b:c7:1b:2a:1e:b0:ff:d5:cd:67:ea:0d:25:21:
50:eb:dc:4e:eb:d8:10:5b:fb:d7:d0:cb:6c:6d:23:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.87.0.0-151.88.255.255
151.91.0.0-151.92.255.255
193.43.48.0/20
194.56.231.0/24
194.104.188.0/22
IPv6:
2a00:ec20::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12734
16236
Signature Algorithm: sha256WithRSAEncryption
83:4d:8a:58:4e:be:01:9e:9c:47:56:76:a7:34:29:6a:f6:57:
2d:52:30:83:93:bb:ce:19:29:93:c6:08:8a:ad:55:13:fb:72:
10:ec:ac:24:9a:cd:e8:a2:2a:db:f0:a8:6f:d3:a8:90:d4:61:
69:b5:19:b7:a1:65:bb:6f:9e:67:81:f2:bd:21:77:e7:a8:be:
0b:6b:f6:66:4f:67:ef:ad:ff:20:e1:a0:93:d3:9a:a7:91:f4:
a4:4f:e9:6e:1a:f5:0d:81:20:63:3b:25:3c:2e:00:80:59:50:
c5:37:11:52:cf:05:02:5a:08:bd:fb:9e:62:11:39:7e:18:34:
43:e8:83:1e:87:88:26:f2:84:87:e9:a8:04:79:79:4c:9a:34:
82:f7:05:5d:80:06:9a:5b:52:f0:04:eb:2b:df:72:b3:15:6b:
8a:57:08:6c:6b:eb:e7:2d:24:2a:9a:1d:0a:f8:0a:dd:66:ab:
b9:12:f0:26:f1:76:d5:64:35:38:05:52:4c:ac:98:14:db:01:
0c:fc:68:18:fb:d3:da:68:d2:3d:b2:73:b0:70:81:ab:3a:b6:
bf:ed:7a:b8:35:70:72:dd:5b:76:34:bc:a4:e0:fa:3a:d7:d4:
c7:cd:5c:cb:5f:30:46:ad:99:9d:e6:40:18:04:5a:10:24:21:
75:30:a9:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:07:36 2026 by rpki-client