Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.cer
File: WpjjgFuUm4pWyxKiQsrYAg2RVtQ.cer (raw, json)
Hash identifier: LwA/hJX1y8FEuecF170CfA8DH9zhh4rlxSq6pi0cDs8=
Subject key identifier: 5A:98:E3:80:5B:94:9B:8A:56:CB:12:A2:42:CA:D8:02:0D:91:56:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F7ED1AAC05AF319F356D14A5281CAF7EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Jul 2026 09:18:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205774
IP: 91.208.100.0/24
IP: 185.159.88.0/24
IP: 2a05:96c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:d1:aa:c0:5a:f3:19:f3:56:d1:4a:52:81:ca:f7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 20 09:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a98e3805b949b8a56cb12a242cad8020d9156d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:d2:3c:0b:46:04:6f:3b:a8:27:e8:a6:8d:
33:e3:3f:e1:8a:44:a0:27:8a:4e:02:f9:75:a2:78:
1a:af:3d:a8:d9:8d:4e:7e:7f:16:57:57:c6:e2:8a:
ab:eb:93:70:d5:3e:36:7b:3d:c2:3d:ff:ac:ec:52:
e6:87:50:25:5b:a9:3f:4b:e9:e2:1d:1d:0f:6b:40:
c1:96:9e:2d:47:b9:61:ac:31:2a:18:3c:d9:6f:4e:
34:96:5f:b5:e9:ea:5a:d3:09:33:60:96:3a:41:ab:
fb:c0:61:3c:92:bf:74:cd:de:ee:d8:a2:7b:c4:aa:
83:e1:8f:1d:bd:c0:9e:d6:5c:58:7d:4a:46:cf:b8:
a6:12:cb:67:db:66:30:53:5e:29:80:7c:31:f2:58:
2c:a7:50:b1:f3:52:e0:87:b7:1b:cf:55:a7:f4:8c:
50:23:2c:0d:fd:0b:78:4c:ed:6a:d7:e6:73:5f:33:
61:a7:c3:ff:d1:da:07:80:9f:6a:72:63:2d:ad:9a:
5d:0a:39:93:36:d2:2c:46:f8:e1:22:ca:f8:97:1c:
a9:3f:e6:26:4e:3d:28:45:c1:1a:82:e0:31:8f:f0:
93:8b:80:6a:f0:20:df:9e:7d:b9:4d:34:e1:19:79:
54:ca:18:e6:9e:c3:ed:cc:70:83:4c:72:34:fb:59:
2f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:98:E3:80:5B:94:9B:8A:56:CB:12:A2:42:CA:D8:02:0D:91:56:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.100.0/24
185.159.88.0/24
IPv6:
2a05:96c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205774
Signature Algorithm: sha256WithRSAEncryption
9e:cd:01:1e:c3:64:48:e6:0c:8c:48:8a:43:77:3a:45:fd:c8:
52:e2:49:5c:34:94:e2:9c:38:60:49:65:30:38:5c:73:6f:24:
b6:63:21:e4:48:f0:0f:33:42:22:37:3d:b5:8f:88:73:7c:03:
e9:4a:5b:7c:be:cd:62:d7:96:84:88:d9:a2:92:fe:98:31:ec:
62:62:2f:eb:be:1a:1e:7b:48:2a:ed:b0:fd:af:c1:8d:97:8b:
aa:34:65:c9:72:64:db:a3:ef:96:e5:27:a7:d6:3b:c8:b9:9a:
05:bb:b1:26:39:d8:05:f5:e0:7f:5d:28:c1:40:c5:e2:66:6c:
56:b3:20:17:89:2d:3a:34:b7:d1:e2:42:d0:9a:c3:03:71:4d:
55:74:e3:3c:07:3c:54:32:e7:a5:b4:06:be:52:6c:83:53:af:
9d:7d:c3:f2:5a:27:77:6e:50:ff:14:f6:ff:24:d8:cb:29:dc:
6d:cd:4d:19:c3:53:5b:c0:82:8c:89:29:fa:8d:a9:d9:ba:aa:
ea:ed:39:e3:1e:3b:ae:a5:7d:7f:4d:d1:ee:3c:fc:a9:c6:c7:
34:43:26:2e:72:25:2f:7b:1a:7d:8c:1b:44:6d:67:6c:0d:22:
3c:a8:45:c1:7f:65:8b:45:0d:7f:e6:3e:77:5f:7f:b1:96:db:
dc:c1:27:a0
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZ9+0arAWvMZ81bRSlKByvfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNzIwMDkxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTk4ZTM4MDViOTQ5YjhhNTZjYjEyYTI0MmNhZDgwMjBkOTE1NmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8HSPAtGBG87qCfopo0z4z/hikSg
J4pOAvl1ongarz2o2Y1Ofn8WV1fG4oqr65Nw1T42ez3CPf+s7FLmh1AlW6k/S+ni
HR0Pa0DBlp4tR7lhrDEqGDzZb040ll+16epa0wkzYJY6Qav7wGE8kr90zd7u2KJ7
xKqD4Y8dvcCe1lxYfUpGz7imEstn22YwU14pgHwx8lgsp1Cx81Lgh7cbz1Wn9IxQ
IywN/Qt4TO1q1+ZzXzNhp8P/0doHgJ9qcmMtrZpdCjmTNtIsRvjhIsr4lxypP+Ym
Tj0oRcEaguAxj/CTi4Bq8CDfnn25TTThGXlUyhjmnsPtzHCDTHI0+1kvswIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFFqY44BblJuKVssSokLK2AINkVbUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4L2JiOWMz
Ni1mYTU2LTRmMGQtYjE4Ny03NWZiOGM0OTI3OGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvYmI5YzM2
LWZhNTYtNGYwZC1iMTg3LTc1ZmI4YzQ5Mjc4ZS8xL1dwampnRnVVbTRwV3l4S2lR
c3JZQWcyUlZ0US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAW9BkAwQAuZ9YMA0EAgACMAcDBQMqBZbAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMjzjANBgkqhkiG9w0BAQsFAAOCAQEAns0B
HsNkSOYMjEiKQ3c6Rf3IUuJJXDSU4pw4YEllMDhcc28ktmMh5EjwDzNCIjc9tY+I
c3wD6UpbfL7NYteWhIjZopL+mDHsYmIv674aHntIKu2w/a/BjZeLqjRlyXJk26Pv
luUnp9Y7yLmaBbuxJjnYBfXgf10owUDF4mZsVrMgF4ktOjS30eJC0JrDA3FNVXTj
PAc8VDLnpbQGvlJsg1OvnX3D8lond25Q/xT2/yTYyyncbc1NGcNTW8CCjIkp+o2p
2bqq6u054x47rqV9f03R7jz8qcbHNEMmLnIlL3safYwbRG1nbA0iPKhFwX9li0UN
f+Y+d19/sZbb3MEnoA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:35 2026 by rpki-client