Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer (raw, json)
Hash identifier: V0xuFz7zulh2aN9i9+PSbVSoftzI53GCoB3csGHHbRE=
Subject key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DFD269E95DFA14E40F5EA927CD178B4DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 May 2026 11:57:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 29503
IP: 89.207.40.0/21
IP: 217.146.32.0/20
IP: 2a03:d580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:26:9e:95:df:a1:4e:40:f5:ea:92:7c:d1:78:b4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 6 11:57:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:b0:e6:37:dc:15:33:4b:69:10:62:31:6f:
e9:48:a7:3f:86:52:6e:c3:59:5d:25:5e:c3:d3:ef:
53:7d:11:c7:3e:be:1f:d0:b8:7e:8f:38:0e:fe:a0:
14:fa:54:b5:74:34:cb:1e:fb:a8:18:97:fe:4d:02:
90:6c:fc:c2:c8:df:93:ed:bb:8a:45:52:45:53:b4:
0d:36:2b:7c:6b:55:13:f3:46:b0:e7:f0:6e:83:c6:
57:14:ec:82:25:7d:ad:56:5a:81:2f:68:a0:64:42:
a9:a5:97:38:b4:aa:22:f0:bd:0a:cc:aa:19:1e:fc:
db:7c:21:8e:22:91:6c:5b:b8:4e:6b:b9:6d:f8:2c:
bf:25:99:67:70:fd:30:d2:61:e7:63:ac:fd:70:19:
9a:e6:bf:e4:7a:20:40:59:76:1c:81:fe:17:57:d3:
a4:9e:17:a2:cc:9c:ad:04:cf:10:b1:4d:8c:c7:61:
2e:c7:43:55:c6:cf:9d:91:f4:e7:d4:a1:08:f5:ee:
5c:55:fe:bd:4a:32:46:ff:51:03:96:a0:95:df:fe:
30:a8:6b:8c:24:dc:66:98:3c:3c:3c:01:52:50:ca:
83:43:ac:c7:8a:c9:89:d8:4e:d0:ed:49:95:5e:5f:
03:d9:fc:37:d3:c7:c0:ea:f3:a7:c6:7c:1a:7b:6b:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.40.0/21
217.146.32.0/20
IPv6:
2a03:d580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29503
Signature Algorithm: sha256WithRSAEncryption
a1:b9:80:5c:d2:d4:fd:f0:43:41:1b:5d:56:8c:92:58:bc:f1:
70:78:c2:71:31:48:ba:6e:9b:3a:01:12:4b:f8:9b:69:2b:a3:
c6:de:60:cd:66:40:24:2b:e8:d6:d9:40:90:d1:bc:97:46:4d:
a5:10:ab:db:ae:54:ff:a6:18:4d:92:82:66:6d:0f:ab:33:fa:
45:b5:8e:d1:0c:aa:b8:68:74:26:cf:90:b6:fd:46:f7:73:49:
b5:c3:b4:e8:46:06:b4:58:4c:d1:96:81:38:3a:ac:14:f5:14:
a3:fb:b0:30:ef:29:4c:a4:2e:84:97:1b:09:a0:04:9e:1f:5f:
8b:3d:7b:c3:2d:8e:a4:14:b5:65:9a:d5:1e:ef:03:fd:ac:95:
6f:01:fa:37:49:ab:fa:60:fa:61:2a:6f:70:43:44:26:ce:8d:
ac:03:51:19:96:06:aa:ee:43:df:51:25:d0:81:2c:b3:cf:21:
74:a5:4b:13:8a:43:fa:e0:c5:d5:7f:a1:a7:30:8e:91:1c:9b:
70:57:d4:e9:db:ee:77:34:c9:0d:ff:4a:27:f1:7d:35:2e:e4:
3f:b5:04:07:45:c3:10:f4:18:66:7d:ad:05:40:20:a8:7a:bb:
56:67:00:3e:d1:60:86:34:02:d0:de:98:53:61:de:86:82:4a:
23:f0:37:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:01:49 2026 by rpki-client