Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
File: wtIegEq3cTrXh33eYDqngksxmDw.cer (raw, json)
Hash identifier: G36TDOK+Fczr+qYog2mlTIsQ3N0bDC+6IlvIkWg6Sss=
Subject key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A03415018B698482D26C742767E5C3C69A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Aug 2026 14:03:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.86.84.0/24
IP: 45.94.220.0/22
IP: 45.132.112.0/22
IP: 45.136.140.0/23
IP: 45.141.48.0/22
IP: 45.152.32.0/22
IP: 62.68.68.0/24
IP: 62.68.81.0/24
IP: 79.143.128.0/22
IP: 136.176.224.0/19
IP: 146.19.162.0/24
IP: 195.182.198.0 -- 195.182.201.255
IP: 2a10:5a80::/29
IP: 2a10:5c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:15:01:8b:69:84:82:d2:6c:74:27:67:e5:c3:c6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 24 14:03:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:01:dd:ab:7a:11:9d:5f:4b:c1:e5:06:67:
05:01:8c:a8:bf:84:7c:8f:dc:85:a5:d3:9b:84:48:
fa:0a:6d:3a:4c:d2:78:f4:a9:b9:d8:7e:ae:50:6f:
33:ab:29:8e:02:cd:fd:43:8c:83:28:65:17:f4:33:
72:e6:0f:a0:d0:39:5b:4d:d0:77:e8:9f:79:16:b9:
87:d2:24:69:7d:82:3b:ce:5a:94:29:77:77:6f:9a:
f7:c7:89:fd:1e:61:df:42:7a:f5:23:0e:41:af:5c:
1a:e7:ae:19:5f:d0:b0:41:bc:60:95:4a:1d:aa:3e:
95:7f:51:e2:10:e5:42:3d:79:57:cc:9b:0c:29:39:
7b:42:2b:78:2c:e5:78:1b:63:fe:08:1f:ab:16:3f:
49:d8:33:94:14:e5:ce:1a:f7:f6:f3:6d:e3:b2:fb:
e5:6c:00:75:5d:93:69:5b:ec:6b:38:84:34:c0:57:
ed:b3:2c:41:c1:73:25:28:4b:9f:89:be:37:df:1c:
20:7c:3c:92:13:9c:c1:7e:8b:29:8d:14:d6:3b:93:
c9:72:71:5b:04:ed:e7:9a:60:85:8c:0c:bf:61:d5:
77:cc:67:b5:24:c1:31:e7:92:fb:9a:d4:b1:a7:af:
f7:b9:14:68:75:0d:f8:84:d4:45:4a:3e:3e:4b:c1:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.84.0/24
45.94.220.0/22
45.132.112.0/22
45.136.140.0/23
45.141.48.0/22
45.152.32.0/22
62.68.68.0/24
62.68.81.0/24
79.143.128.0/22
136.176.224.0/19
146.19.162.0/24
195.182.198.0-195.182.201.255
IPv6:
2a10:5a80::/29
2a10:5c80::/29
Signature Algorithm: sha256WithRSAEncryption
a1:69:84:f3:6e:99:f2:37:f7:91:ed:f6:df:87:38:d7:f1:35:
f2:7c:03:e1:db:4e:21:0e:13:fc:fe:a1:34:1d:ef:1a:89:64:
72:be:e6:79:82:35:0d:e8:82:8d:3b:a2:f4:79:ee:3f:ec:0a:
1b:79:b9:3b:1d:66:40:47:53:45:4c:55:7e:57:27:39:0f:17:
f7:fb:3e:30:21:ca:b3:0a:72:2c:fe:6e:42:ac:97:00:7b:0c:
38:8c:74:e3:43:7d:85:4e:20:f0:68:99:ce:da:42:58:a2:8b:
7c:b1:b7:a1:ad:44:00:28:e7:3b:d1:5f:f6:a8:ff:e7:53:7f:
5e:0d:ef:a8:11:a1:0f:c7:6f:5a:e1:99:fe:dc:d2:ff:9d:0e:
7d:00:8a:e6:a5:e3:74:d8:0e:3e:20:e0:79:e0:8f:a0:33:ff:
3a:5b:9c:15:4e:5f:bb:d0:6e:74:51:30:22:c9:c9:c6:ec:6b:
13:c5:40:33:19:a6:07:8f:60:4b:b1:ea:a1:ab:ee:81:78:f4:
b4:9a:aa:64:44:fb:ff:3c:18:14:2e:a5:57:86:6b:56:e3:83:
e9:20:ce:90:ff:ea:76:11:42:7b:a3:1d:1f:c3:55:10:2d:b8:
2c:d3:ab:72:1a:b5:34:b2:f8:4d:a3:5b:c6:7a:f2:7c:cd:3b:
55:14:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:35:10 2026 by rpki-client