Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PteWKLWmD_FIn0c74S1s797hNeY.cer
File: PteWKLWmD_FIn0c74S1s797hNeY.cer (raw, json)
Hash identifier: YQCPq+IHrQ76vVsUmTkoyEWQCf/cz6YjfEu+DM+A0vg=
Subject key identifier: 3E:D7:96:28:B5:A6:0F:F1:48:9F:47:3B:E1:2D:6C:EF:DE:E1:35:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C7FCB37F54AF9DCC165B74DBC3FF6E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:18:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.225.76.0/22
IP: 2a0c:3200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:cb:37:f5:4a:f9:dc:c1:65:b7:4d:bc:3f:f6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ed79628b5a60ff1489f473be12d6cefdee135e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:95:9a:5f:52:b3:f2:15:c1:7b:95:18:05:
bc:16:f8:fd:47:39:33:04:ac:09:df:cb:39:78:45:
4b:80:cb:cf:89:40:2f:44:e4:7a:25:64:5e:88:fc:
2a:84:d5:a4:55:1b:22:3c:3f:63:97:61:98:59:69:
9c:ea:d2:7c:ca:d1:e6:c2:af:4c:30:0c:a2:97:e0:
72:76:99:9b:c8:42:68:e0:44:cc:d7:93:98:ca:64:
ab:1f:6e:e7:af:18:38:e8:fc:d4:2b:cb:d7:84:79:
9a:34:98:04:b4:92:be:b9:67:d3:91:f9:bf:e0:76:
49:fe:bc:18:b3:08:61:1d:b8:d4:32:7c:bd:a4:1c:
e0:5d:8c:05:0e:bd:80:8f:6c:29:5e:7c:77:97:05:
74:d1:6c:9a:00:be:d0:7c:d6:43:58:de:50:97:fc:
bc:96:01:20:ff:c3:e9:73:a6:3c:1f:6a:77:45:e2:
e8:f3:0e:c5:42:16:fb:1a:46:93:66:2e:a7:a6:10:
d9:4d:bc:be:f3:a3:e7:38:b4:71:68:db:c9:9a:74:
16:94:57:79:a1:f5:cb:b1:c7:68:24:06:bc:e8:b0:
f9:2c:c3:20:dd:9c:b7:1d:81:64:ab:8a:69:c9:9a:
92:0b:55:d4:8f:3f:74:ed:bf:26:fc:08:82:d3:dd:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D7:96:28:B5:A6:0F:F1:48:9F:47:3B:E1:2D:6C:EF:DE:E1:35:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.76.0/22
IPv6:
2a0c:3200::/29
Signature Algorithm: sha256WithRSAEncryption
4c:57:d2:17:dd:2a:cb:e6:c3:8d:67:14:a6:7c:da:63:a7:7d:
28:57:cd:d0:01:62:1c:73:7b:8f:c1:9e:de:54:c7:33:a2:16:
d3:05:7f:1e:41:68:3c:97:56:1d:02:0d:c3:a9:1b:f5:a0:b3:
03:61:23:f1:31:19:6c:97:e3:55:27:13:e8:aa:82:43:82:8f:
e7:2b:ff:51:19:5e:cb:b9:bf:b2:1c:2a:84:78:82:71:cb:5a:
50:11:5a:c0:97:47:39:72:9d:18:3a:b1:61:59:d9:9d:4d:87:
fe:21:17:36:7a:39:d1:ad:9a:31:60:a9:ca:3a:57:e4:48:61:
fc:45:be:aa:92:2d:7a:23:f9:a6:d2:72:2a:d2:fa:62:8a:40:
c0:fb:27:21:cb:a8:bf:0c:4c:f0:0e:57:87:cb:4f:b4:10:76:
2c:fa:4f:68:a9:16:fc:da:47:bc:c6:7a:ec:b0:c4:d9:13:cb:
71:6c:be:88:6d:12:a2:05:a5:61:d0:36:94:3c:99:2d:de:bd:
af:34:fd:16:75:df:af:e1:fc:f7:c0:b9:e4:b4:ff:ae:da:e4:
59:17:c0:a5:35:61:48:19:75:3f:9a:a9:79:2e:56:a4:05:9a:
94:1c:0b:0d:d0:f5:00:6a:ae:1e:36:c5:2f:0d:be:de:a3:28:
c3:22:a8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:48:40 2026 by rpki-client