Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/wxnuerHO5AZ2b7iNAMdLgds6GV4.cer
File: wxnuerHO5AZ2b7iNAMdLgds6GV4.cer (raw, json)
Hash identifier: 4OpVk+IM33Up45fSuvogMYZzT2Tbxze0sm7sAeQSgM4=
Subject key identifier: C3:19:EE:7A:B1:CE:E4:06:76:6F:B8:8D:00:C7:4B:81:DB:3A:19:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0B4F5468662480C54C9C3090189EA9FF1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/wxnuerHO5AZ2b7iNAMdLgds6GV4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 18 Sep 2026 14:39:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214980
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:f5:46:86:62:48:0c:54:c9:c3:09:01:89:ea:9f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 18 14:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c319ee7ab1cee406766fb88d00c74b81db3a195e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:63:76:59:27:97:f7:1a:6f:68:bd:49:86:4f:
a6:40:68:a0:e4:cb:49:e4:9d:58:e6:5e:82:43:43:
13:55:e3:51:a9:06:fc:3e:8f:df:74:d6:5e:8a:29:
2f:4b:10:78:33:aa:e3:33:cc:3d:00:5f:f2:af:ea:
13:79:4e:60:c5:e2:f3:6f:ac:a3:56:97:5e:eb:c9:
de:63:6b:8d:19:15:3a:14:ea:72:bd:01:6c:d2:16:
76:0b:67:00:22:54:88:d7:c7:3d:f1:fe:52:20:dd:
01:19:0e:56:15:80:50:48:7a:12:5d:17:02:86:55:
46:8a:76:ef:88:d8:48:a1:85:86:7c:5a:a7:0a:29:
34:90:05:d2:19:18:e1:b9:54:29:39:de:b8:f5:39:
08:de:40:e3:22:77:1b:30:a3:0c:8d:9f:5e:08:d4:
dc:12:d8:77:49:b0:3e:91:7c:72:81:dd:6e:c3:44:
7b:e0:be:0d:8f:1f:60:96:42:9d:5e:66:38:d7:d4:
b6:d8:c0:c2:d9:e3:94:a4:b1:25:08:ee:e4:9c:3f:
1d:fe:bb:07:8a:05:62:18:70:2e:6e:47:d4:94:ad:
9d:b1:43:1d:0f:a2:30:fe:64:c6:b1:c7:fd:98:24:
8e:f8:cb:b6:20:1a:cc:1b:7c:57:ee:12:40:d5:01:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:19:EE:7A:B1:CE:E4:06:76:6F:B8:8D:00:C7:4B:81:DB:3A:19:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/646158-9578-4304-9fb6-f7c245a6c21a/1/wxnuerHO5AZ2b7iNAMdLgds6GV4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214980
Signature Algorithm: sha256WithRSAEncryption
24:6c:ec:f0:26:a4:22:f9:95:69:df:9f:1f:77:68:2b:91:47:
8e:0a:96:3a:56:c2:36:1f:27:fa:20:13:8d:19:fe:2a:f9:f4:
32:dc:37:18:80:73:1b:53:80:73:6e:48:63:47:df:21:b3:ed:
68:2c:a4:bf:61:cd:bb:d1:73:64:a4:7c:c4:ca:53:30:3b:b2:
7a:b8:78:d0:b3:be:a8:58:0b:c8:e1:43:d7:5a:92:af:be:88:
39:3e:25:5e:1e:84:5c:fa:24:4e:f3:11:5e:78:a0:bb:da:8d:
f7:5e:30:f1:36:f4:7a:62:15:83:cf:f2:88:77:7b:09:d3:fd:
ef:04:29:d7:c4:96:34:9b:00:39:a0:78:0d:48:bd:b1:cd:b0:
08:d1:bf:2b:66:55:4b:31:ab:e8:d2:61:5c:df:41:3c:9c:c1:
1f:89:3f:6d:6f:d9:ea:27:7c:4b:b1:39:b2:d6:47:ad:20:fb:
19:52:48:a1:94:fa:e9:5b:4a:5b:8c:e2:ac:5e:fd:83:ca:15:
2a:e3:c2:93:ec:1d:d3:d1:5d:35:f8:de:af:0f:84:6a:f2:c4:
96:fd:16:57:fa:80:e1:41:b0:40:08:2c:ec:6a:20:36:48:c5:
01:3d:ec:08:7d:51:ec:91:5a:75:e2:74:ff:1e:f4:a9:5f:55:
41:0e:1c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:08:55 2026 by rpki-client