Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
File: WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer (raw, json)
Hash identifier: oblpzCZ1+LiSj0surqcFVg1SpgrLNzyt6lgsun+H6t4=
Subject key identifier: 5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAC2BA4C17202BB58D523E7E855314
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 51728
IP: 80.66.160.0/20
IP: 91.190.192.0/21
IP: 146.66.24.0/21
IP: 185.40.88.0/22
IP: 2a00:ac00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:c2:ba:4c:17:20:2b:b5:8d:52:3e:7e:85:53:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a7aca8dba5a49f9e9d9ceb31931ce2343a005bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:c4:a9:81:8d:62:09:d6:6c:ec:a8:e3:44:
ae:46:71:0e:ed:e4:7d:85:bb:36:69:da:1b:7b:c9:
60:c1:3b:d2:8c:77:f1:52:1a:d8:aa:b7:8e:e6:8a:
bc:4b:ae:22:88:0f:25:e3:60:a9:f9:ba:f0:91:54:
43:fc:15:f2:14:ab:80:1e:53:36:1e:9c:c3:be:fc:
a5:41:92:1e:2d:fd:89:23:57:0a:a5:a4:9f:27:87:
6d:90:0e:16:ee:fb:b8:1a:6f:d3:1c:f5:c9:8f:ee:
ab:66:1d:14:f2:79:ee:e7:7c:a7:e5:0f:61:d5:88:
42:1f:39:0f:e0:86:e2:08:77:b8:5a:6b:fe:c8:7c:
72:4c:e1:a0:56:06:53:29:82:9a:90:2b:28:ef:64:
b6:48:40:74:8d:31:af:61:0f:fa:4d:a1:ac:06:31:
42:56:be:84:b6:e0:2a:79:7e:13:b1:a5:30:f7:e3:
2d:ea:f9:ef:36:38:dd:94:d2:70:5f:75:2d:9a:c4:
a5:8c:d0:84:5b:60:a1:0a:af:1d:a3:92:b9:34:8a:
98:04:22:74:5e:12:a5:49:ca:55:59:08:c5:ae:69:
be:92:69:d7:5b:bc:47:dc:e6:77:1a:d5:17:75:ce:
ae:ed:29:be:b7:e5:a9:75:9b:02:f8:fc:38:d6:24:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.160.0/20
91.190.192.0/21
146.66.24.0/21
185.40.88.0/22
IPv6:
2a00:ac00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51728
Signature Algorithm: sha256WithRSAEncryption
9a:32:c7:5b:f3:eb:c2:55:ba:4b:81:c0:50:4a:51:fb:cb:14:
de:3c:3e:d9:02:1d:a0:90:8d:b0:e2:87:6b:dd:31:a5:cf:1d:
70:70:98:d5:7a:5d:1f:64:c9:00:a7:ee:0f:ed:b1:71:a6:4e:
64:46:bd:fa:72:b4:fd:bc:d1:0c:fc:83:74:f4:26:64:e7:08:
5b:b9:2a:f8:e5:1c:c0:20:50:f3:a3:6c:fd:39:d4:75:0a:7d:
ff:7d:02:8e:ba:c4:4e:53:0a:d0:d2:51:fb:04:5c:40:29:07:
22:85:58:7c:3c:8c:c9:89:a1:0e:f8:dc:3c:f1:de:97:8e:f3:
ae:ca:d3:34:12:52:ab:4a:7f:13:99:f8:46:2d:eb:ca:27:a1:
87:58:87:ae:82:dd:ed:74:65:fe:0a:d1:f7:75:ae:da:bf:f1:
ee:3d:4a:48:39:bd:7e:e7:f4:bf:f8:c4:f0:b5:9a:69:40:f9:
f3:ef:2c:23:09:47:66:6b:fa:47:89:5a:6b:88:bc:a2:fc:9e:
6f:64:b8:67:b7:87:a5:6f:e1:36:75:1e:82:b0:79:5f:e8:d0:
0b:bf:cc:11:e0:17:12:c3:c0:91:55:c2:44:20:14:b2:eb:2a:
cd:10:c5:d8:a6:3b:d9:00:99:d9:6b:35:58:6c:79:dc:92:66:
06:1e:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:53 2026 by rpki-client