Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WvxA0kCVgUP3KaGOLDVOucQ_E68.cer
File: WvxA0kCVgUP3KaGOLDVOucQ_E68.cer (raw, json)
Hash identifier: PXRti6TCDeh2Y+smhZOWlYsvkdbIT52LiTXd/nQbukk=
Subject key identifier: 5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F172CC947390F12158C016CA35965BED8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 06:17:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 129.215.0.0/16
IP: 192.41.103.0 -- 192.41.131.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:2c:c9:47:39:0f:12:15:8c:01:6c:a3:59:65:be:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 06:17:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5afc40d240958143f729a18e2c354eb9c43f13af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:d7:60:5e:f1:db:37:3b:3a:59:22:a4:86:
21:f3:94:ac:50:02:a5:55:d0:38:ff:28:51:6a:bd:
99:99:25:14:29:0f:30:90:75:5b:ef:9a:93:41:b2:
37:a9:31:ea:70:fc:4c:70:f9:a7:e1:86:ec:30:fb:
c3:8d:92:ef:d8:70:e6:92:e7:64:64:6c:61:0f:d0:
fb:42:0f:93:5a:72:da:a7:6b:43:d6:5d:f1:17:65:
a3:ea:1f:89:0d:55:84:b7:66:42:2b:9a:fe:ca:7e:
9b:6f:3a:56:2b:d5:d2:6f:e0:4c:67:3f:6e:26:e6:
e0:4d:29:22:c6:44:cb:92:4c:0e:90:e6:9a:e3:2f:
c7:1a:9d:61:21:f4:93:8c:1e:12:9c:68:58:9a:79:
95:52:5d:f1:ea:b7:b4:38:b4:3d:37:20:6c:c1:66:
b5:18:59:ab:4b:69:d2:c4:41:fa:d2:df:ef:54:67:
4b:8f:86:ba:de:fc:f8:b5:f3:2f:6d:49:c8:f5:43:
47:d0:e8:28:51:00:c5:29:25:61:1a:26:7f:73:3f:
4d:58:58:41:23:43:cb:97:fb:92:72:8d:69:f7:79:
a5:68:cb:fc:2e:9a:dd:65:e3:93:ce:6e:ff:56:c1:
73:78:bc:f4:c5:3d:bc:56:e4:86:2c:44:3f:f3:31:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FC:40:D2:40:95:81:43:F7:29:A1:8E:2C:35:4E:B9:C4:3F:13:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f980c-152b-426d-9649-fe8d0211d18c/1/WvxA0kCVgUP3KaGOLDVOucQ_E68.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.215.0.0/16
192.41.103.0-192.41.131.255
Signature Algorithm: sha256WithRSAEncryption
34:04:7b:94:ac:1f:48:ff:17:53:81:e0:70:66:ef:67:9f:06:
8f:f9:58:32:21:78:2c:03:06:ec:c5:89:0d:00:2f:c2:0e:98:
d2:ff:35:f1:19:4a:a6:ca:f9:fc:12:85:fc:11:5c:4b:a3:0f:
97:07:99:aa:ea:b8:e4:34:0c:a1:95:03:0f:4f:05:43:8a:43:
e5:38:99:38:cd:d1:ff:e9:ad:0b:6f:f8:26:28:15:08:5a:69:
b1:14:51:09:80:b7:1b:ea:3f:5f:6e:f8:80:7e:6d:a2:c3:d4:
ce:e8:17:b3:56:e1:a1:d4:b5:f7:0c:30:68:64:e2:18:7a:4f:
1f:2f:47:c7:9c:12:0a:c5:eb:fa:dd:5d:8e:1b:a3:95:c0:49:
82:52:17:36:e8:b0:06:78:fc:75:df:7e:4f:55:51:7e:ec:49:
3e:b2:da:da:f2:aa:57:da:8d:44:71:86:c0:1a:37:85:04:d4:
a9:d6:27:44:da:f0:b4:1e:17:94:e8:fe:23:1f:10:91:ce:d5:
37:97:b6:0b:46:04:ec:1e:fc:10:c1:07:47:8a:d4:80:a1:5d:
4b:6a:c5:c6:a2:27:46:63:4d:6e:ac:fb:b9:12:e9:2c:c9:75:
e1:01:71:22:61:42:f4:cc:b2:3b:a7:db:e9:1c:ef:93:ac:20:
0a:b8:a6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:42 2026 by rpki-client