Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
File: VWEKWd3_vSTuSymemySxvwNvjkM.cer (raw, json)
Hash identifier: mZ3HcOjM9Ox9Hxusof1wtaFgdCT48Jd7rbQVo8vHqbQ=
Subject key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C702CD35B57696D069C393169C11615C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Feb 2026 09:55:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.18.11.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:2c:d3:5b:57:69:6d:06:9c:39:31:69:c1:16:15:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 18 09:55:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:f1:95:f4:81:7a:1e:07:89:e8:8b:40:b4:
0e:78:a7:93:fe:7e:31:fc:dd:f7:14:8d:e3:8c:22:
5f:60:4d:0c:3a:47:24:07:93:f2:1d:e2:bc:ad:2f:
d0:47:38:1d:31:05:11:26:02:b8:94:cb:a4:fd:ac:
52:9c:c8:05:7b:fc:74:fe:97:39:5c:fa:b7:80:c8:
96:8d:52:ee:23:cb:97:ae:f3:ef:29:d5:09:18:9b:
11:9f:52:a6:e8:cb:44:26:b0:0f:b0:10:b4:fa:4c:
80:c3:b6:47:c2:11:18:02:1c:c8:da:33:0b:69:d6:
18:c7:ea:17:05:7c:3e:f9:25:d4:86:ed:3f:cd:89:
a9:b5:05:65:98:08:75:ba:77:a1:2f:6b:ad:35:a3:
af:08:44:b0:84:39:f5:de:4e:45:99:4e:3c:85:11:
f7:07:4b:80:d0:77:e3:49:ee:9f:04:42:ad:97:79:
a7:a4:4c:06:e4:d0:77:f7:01:3c:36:36:60:31:62:
11:02:60:7d:08:69:76:a7:e0:46:4b:95:ec:8e:09:
77:0b:89:37:39:24:a0:a3:65:56:c0:4b:4b:d0:b1:
08:5a:12:c5:ba:4f:54:ca:2f:08:72:a1:c0:c1:d9:
d5:4e:40:49:7b:2e:75:d9:ed:1d:14:a9:3f:5b:c4:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.18.11.0/24
Signature Algorithm: sha256WithRSAEncryption
17:cc:d3:7a:6c:13:2b:f8:6d:2f:ab:13:df:71:b9:d8:6b:20:
6c:de:aa:93:70:32:a8:31:fb:59:45:b4:2c:41:6e:ef:2c:cb:
01:e8:f9:18:46:4b:d1:03:1c:f1:61:07:cf:fe:c7:d3:06:42:
8d:86:0e:39:f3:e9:56:f8:b9:51:dc:a9:e4:95:a4:ec:fb:cf:
fd:7c:2a:30:d2:a1:75:68:b8:31:d1:59:27:33:ea:ac:52:eb:
74:a4:d0:58:e2:31:49:f5:00:0c:da:96:76:63:95:f6:f0:4b:
cb:b7:f0:45:ba:b9:0f:a7:c6:80:6e:53:3a:4e:cf:e7:f9:2d:
6b:e1:20:0b:fd:f8:3f:84:8d:e1:bd:f6:96:98:af:78:24:4c:
e7:93:ca:cc:0b:0a:a2:92:80:34:8c:7a:6e:14:b7:50:61:72:
ff:00:73:8e:93:eb:70:6d:18:69:fa:e9:24:ae:b8:fa:e1:5c:
51:62:04:be:71:73:ed:95:c4:36:d4:ab:36:ae:6d:a3:d1:fe:
71:8d:dc:23:ba:8f:2b:b8:92:75:66:09:e0:77:18:62:52:e2:
38:7f:ce:3b:2b:05:b3:51:93:61:d8:51:d5:b6:e8:03:9a:a9:
3f:a1:c3:92:ae:77:2e:92:04:98:64:6e:c8:70:1f:01:cb:14:
5e:90:99:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:44:49 2026 by rpki-client