Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
File: vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer (raw, json)
Hash identifier: TbJXoj4wsUPpq6xiT47rkcEWnXoEVh7bLhXkWfcrl6Q=
Subject key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E91FBBD4E6AE94866CF74B1981FC52785
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Jun 2026 09:34:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.146.116.0/22
IP: 62.205.128.0/19
IP: 83.142.208.0/21
IP: 91.223.133.0/24
IP: 185.155.74.0/24
IP: 185.163.207.0/24
IP: 185.248.168.0/22
IP: 193.162.138.0/24
IP: 195.140.176.0/22
IP: 195.214.212.0/24
IP: 195.214.215.0/24
IP: 212.6.51.0/24
IP: 213.134.29.0/24
IP: 2a01:d0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:fb:bd:4e:6a:e9:48:66:cf:74:b1:98:1f:c5:27:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 4 09:34:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd60edf96266b7c0d43836c854ab472cb74db034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:a3:c3:db:c2:8a:d5:ad:e9:a2:68:39:04:
8b:58:bc:38:b1:0f:32:92:c9:e5:84:59:25:d2:d1:
06:ad:79:18:72:a5:ab:08:14:39:1e:58:3d:e5:c5:
f4:6c:e9:7e:d4:aa:cd:22:ce:4c:fe:0a:d8:6f:9d:
20:e5:38:3a:61:fb:f3:6c:dc:82:6d:c4:d1:8b:53:
29:8b:f0:ed:8f:22:88:0d:f1:dc:df:59:66:f9:cc:
d3:30:51:0c:aa:be:9b:e0:0b:14:35:91:c6:db:27:
d4:52:82:d9:8c:38:52:9c:a8:5c:6b:a0:b3:b5:6b:
25:b4:4a:c0:8c:c0:03:0d:64:64:5e:82:24:80:30:
d1:da:66:1c:d9:d8:83:8e:7e:1e:12:60:a1:4d:e1:
78:76:32:78:84:15:1e:f8:33:35:97:9d:f9:1f:47:
b8:f6:93:9d:a8:b8:f4:53:9a:4b:1f:a9:40:db:08:
ae:40:1e:89:23:a0:09:96:d3:d4:ed:1b:87:ac:49:
26:e7:7d:b5:03:80:2c:e3:ff:67:b2:36:3d:33:34:
09:e3:47:30:74:00:8e:ae:5d:8f:72:c8:90:d4:6c:
6e:1f:71:f7:52:f7:13:2f:b5:3c:6a:5d:8c:b5:9e:
f8:03:41:38:6d:f9:73:6e:3f:63:c4:b0:8d:35:03:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.116.0/22
62.205.128.0/19
83.142.208.0/21
91.223.133.0/24
185.155.74.0/24
185.163.207.0/24
185.248.168.0/22
193.162.138.0/24
195.140.176.0/22
195.214.212.0/24
195.214.215.0/24
212.6.51.0/24
213.134.29.0/24
IPv6:
2a01:d0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:80:1e:2b:e7:db:50:22:19:d4:19:af:60:d3:c1:51:45:bb:
cb:b6:6d:57:7a:46:0d:0a:88:2c:a7:99:f7:e4:36:92:5c:ff:
08:3a:6a:88:0a:6b:d0:18:6c:6f:43:2a:0f:af:29:00:f1:53:
62:f3:d2:de:26:62:e6:5c:76:13:12:4e:f1:ac:e1:04:ec:ee:
3c:01:3a:c1:34:dd:4c:23:b1:b6:0e:fd:f0:aa:3a:ec:c8:1e:
2d:02:66:32:26:b9:9a:ba:5d:4b:54:d9:36:7d:04:37:ff:80:
9e:94:56:19:6a:97:69:9e:05:11:2f:4a:51:e6:e7:fd:c4:ee:
51:fe:1d:54:c8:23:76:f9:27:83:1b:13:c9:69:de:59:fc:1e:
8b:36:87:ca:a2:fe:8c:95:fd:fa:79:02:ea:1f:f6:d2:97:9e:
2c:19:2f:71:23:1b:96:61:3a:6c:c8:b5:81:4a:6b:af:77:92:
87:81:04:76:09:10:8a:2a:23:be:9e:77:f0:7e:13:27:d2:12:
25:4b:f9:5d:b7:1c:2d:e7:21:1c:8a:b9:ba:46:f0:62:46:7b:
2b:aa:e6:16:e3:a2:fa:2e:81:9a:c1:89:35:3a:49:87:2a:a5:
71:bb:fd:07:dd:01:91:61:ad:56:58:7a:3c:61:5f:cb:38:43:
c6:a3:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:42:39 2026 by rpki-client