Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wrwbfji657xjxdrqq71J5yKJX_8.cer
File: Wrwbfji657xjxdrqq71J5yKJX_8.cer (raw, json)
Hash identifier: RwLQO4B4mdbUxfc4v1RDlTya5MWN8Yw50PJpEwkbSzU=
Subject key identifier: 5A:BC:1B:7E:38:BA:E7:BC:63:C5:DA:EA:AB:BD:49:E7:22:89:5F:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9431A2D420D8A46B7263365E2C5EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50399
IP: 92.42.232.0/21
IP: 109.232.40.0/21
IP: 185.3.204.0/22
IP: 185.223.140.0/22
IP: 2a00:11e8::/29
IP: 2a03:3300::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:43:1a:2d:42:0d:8a:46:b7:26:33:65:e2:c5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5abc1b7e38bae7bc63c5daeaabbd49e722895fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1b:94:58:be:e8:53:e7:8c:0c:fa:60:72:23:
a7:09:35:61:f3:7a:d8:5c:de:94:dc:12:b8:6a:ac:
0d:e0:7b:07:cd:7a:9b:31:18:4c:06:a9:d7:d6:93:
31:d7:e9:3d:35:4d:48:c2:ec:70:0e:48:56:8e:11:
c7:7d:82:91:71:7d:a2:d3:93:8b:b2:3e:65:84:3c:
f5:9d:b9:eb:06:ab:bb:55:0f:e1:5a:38:24:0e:c9:
db:16:63:28:05:e6:1f:77:ce:1e:5c:41:0c:07:c1:
ba:2c:c1:13:00:3f:13:03:ab:93:9c:87:df:5f:fc:
9f:38:be:16:79:33:9c:2e:e0:78:ab:17:ea:d6:1a:
50:6a:c5:e4:b3:78:66:4b:4c:56:b8:1e:fb:e3:d7:
53:cd:e6:9b:a9:d7:0f:38:06:7c:a3:71:0a:8b:50:
ff:3a:cd:86:b8:a4:c9:2a:62:37:f4:0f:57:b5:9a:
ec:e7:0d:c3:c4:3d:1b:e9:89:5a:10:5e:0d:93:8b:
35:7b:aa:da:6e:75:50:90:16:c0:1c:11:1e:13:40:
55:df:81:ba:bb:3a:0f:5a:fe:a0:f8:e1:ed:8c:34:
57:49:cb:b2:c8:13:58:e8:68:66:0b:2b:3b:bd:9a:
63:05:5e:f1:58:1e:1a:a0:f4:db:4b:1d:28:10:2d:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:1B:7E:38:BA:E7:BC:63:C5:DA:EA:AB:BD:49:E7:22:89:5F:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/Wrwbfji657xjxdrqq71J5yKJX_8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.232.0/21
109.232.40.0/21
185.3.204.0/22
185.223.140.0/22
IPv6:
2a00:11e8::/29
2a03:3300::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50399
Signature Algorithm: sha256WithRSAEncryption
91:12:31:0b:12:0c:03:d5:73:21:82:92:2d:47:2d:de:26:a6:
fc:e4:af:c6:4a:2a:09:79:73:f5:e8:97:ac:fd:bd:0b:bc:8b:
3e:ae:d1:4e:6b:b6:af:6f:8c:ed:db:48:f5:7e:90:bb:27:a3:
cd:08:c6:85:46:39:e8:a0:1d:47:88:19:ea:15:53:0a:3d:f8:
55:18:76:27:8a:b4:69:45:21:11:fd:b2:dc:c9:db:ff:2c:69:
4e:cd:30:d4:ad:12:d0:e9:94:e6:27:e3:c0:87:1a:f4:94:5d:
55:45:95:ec:a2:ef:77:68:f6:30:c5:b6:24:02:5f:ed:1a:c4:
a4:49:45:3f:85:2e:3c:3e:f4:be:0e:0b:0b:c9:2c:f2:9d:c3:
85:c7:fd:f1:58:39:51:a6:ec:00:87:4e:45:03:ed:87:a8:27:
d7:c3:16:91:d3:c6:4b:20:09:55:ac:d0:17:ad:66:55:2a:01:
32:7a:3d:eb:24:d1:0b:f9:6f:5a:12:6f:9e:41:0a:8a:bf:8b:
7f:85:17:c5:00:5a:5c:74:a8:73:81:50:c1:19:39:2a:a1:bd:
c1:e4:5b:22:56:2e:4b:34:95:78:4f:27:1d:4c:a7:55:68:e2:
56:48:3e:45:89:59:ed:de:cd:7a:3e:9f:5d:0d:06:cf:f1:00:
90:ee:2e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:26 2026 by rpki-client