Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
File: wpN7lGGj0mbpNYNOUEehgiODYsg.cer (raw, json)
Hash identifier: +VEalOrwet7yXZ9j0GZ80/DnqCu2iTnvCE8NY/bNOc8=
Subject key identifier: C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DC9D363422AEE92452C024F342E032C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:18:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204228
IP: 2001:67c:24d8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:d3:63:42:2a:ee:92:45:2c:02:4f:34:2e:03:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:18:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2937b9461a3d266e935834e5047a182238362c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:de:86:21:56:ce:6e:b9:bb:32:d4:89:69:
f2:2e:d3:2a:25:51:a5:e7:0f:ae:52:fe:85:27:e6:
e9:14:36:d7:f8:b7:d1:b6:a3:a1:63:3c:98:2a:0b:
1a:e7:d0:a7:70:43:70:5a:4c:8c:15:e1:30:7a:03:
a7:fd:68:d6:36:cf:6f:3c:09:5f:de:a1:50:84:14:
68:b3:1f:91:27:d4:64:8e:f2:24:1f:65:1e:34:18:
28:7d:fe:02:35:01:d1:74:18:62:e7:b9:66:85:3e:
29:42:07:b3:b9:34:9d:ed:88:9e:af:11:d0:bb:d8:
33:f8:02:5e:7f:97:51:39:1c:16:6b:69:bf:ba:8d:
4c:55:97:34:8c:70:e8:57:87:bc:71:86:05:b0:62:
b8:7b:87:bb:8c:08:b4:00:46:47:4c:ce:50:e6:cb:
d4:ff:b6:da:a8:f9:1f:3c:60:26:8f:3f:2b:0c:a8:
0b:12:af:58:5c:a6:a5:9e:4c:21:87:47:25:ae:70:
03:db:06:10:8c:cd:27:29:fa:5a:2f:4c:c8:5d:5d:
c6:9e:e5:33:a2:92:60:bf:23:89:3b:38:ed:a5:16:
9e:28:5a:d3:3a:7a:5c:fb:86:9c:90:fe:bb:91:dd:
90:95:55:76:f6:5c:97:72:3f:d3:d9:58:83:45:3e:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:24d8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204228
Signature Algorithm: sha256WithRSAEncryption
39:33:bc:d2:28:10:4c:7c:4b:f1:5d:0d:a5:ae:1b:05:fe:b3:
05:eb:e9:f1:2f:6b:bf:3e:1e:99:29:07:d8:2c:07:7a:a1:93:
01:c8:45:bd:02:19:f7:c6:43:da:b7:02:05:50:2d:1f:fb:2d:
a3:93:54:37:06:ef:70:48:32:40:eb:31:eb:a6:af:b5:0a:68:
b7:30:13:85:10:2e:d0:11:62:94:2d:62:0e:0d:38:38:18:f0:
d0:9a:2f:8e:97:4d:00:b1:d8:1d:50:54:d2:3c:22:32:c7:45:
16:cd:87:a1:90:93:c1:0c:c6:c3:a2:2e:9f:b9:68:31:57:a9:
84:72:1f:06:df:c0:e5:05:c9:b4:11:3b:56:fa:cb:4a:3c:48:
14:7e:32:3c:b5:27:13:7d:e0:0c:d7:07:db:df:c2:5f:e5:20:
f2:af:c0:8c:e3:0a:34:28:d9:ac:7c:ce:ff:52:56:be:c0:98:
ce:11:75:bf:82:82:4b:76:1b:eb:d3:94:91:ee:e7:fd:88:ea:
05:73:12:1f:4d:57:b5:58:87:70:e3:f6:16:8a:73:5e:fc:a8:
9b:ff:77:0a:bd:1d:bd:e4:e3:4c:41:38:0e:0e:94:3e:9b:54:
b5:ff:f2:75:1d:1f:e5:81:67:c3:2c:66:6e:70:4f:65:b1:96:
49:8e:4f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:51:44 2026 by rpki-client