Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
File: XWsFtN3mw5OZctoT9iIH8ibeeSo.cer (raw, json)
Hash identifier: xGq3tJpEUmc+mxIucdydxjIy4A35u4B1djriIytAF9g=
Subject key identifier: 5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB319BE88ACF70E80CCFB6502ABC12
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 49072
IP: 77.246.210.0/24
IP: 91.240.69.0/24
IP: 2a13:b980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:31:9b:e8:8a:cf:70:e8:0c:cf:b6:50:2a:bc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d6b05b4dde6c3939972da13f62207f226de792a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:b6:f2:b6:98:6e:ca:3d:49:58:6f:b6:47:
13:08:4c:ce:49:d2:93:73:d4:35:a1:be:1f:3c:bb:
cc:ff:51:61:92:62:7b:9b:4f:ff:a4:e9:b2:0b:d7:
a1:16:4b:6a:a7:59:ae:35:79:11:55:8b:44:b7:0b:
e0:36:b2:cd:e5:d1:01:0c:7e:a5:4d:73:e9:53:10:
95:40:14:d5:cd:f2:b3:58:9d:ec:b8:a1:66:9d:8f:
9b:ee:16:51:54:b1:d1:e6:e6:f6:15:19:cb:33:5d:
1a:6d:ae:43:81:08:e5:dd:19:3f:34:3e:92:8b:83:
c3:56:80:70:d9:b3:b2:15:c2:2a:4c:0b:df:44:d9:
39:1f:07:c7:84:3e:12:1a:92:01:64:6a:c1:c6:90:
77:45:90:b2:3b:a9:89:42:69:6c:8b:7b:95:1a:76:
06:ca:33:ed:af:89:b0:ae:99:b7:6a:3a:7c:56:89:
17:43:2b:b7:a8:0c:b0:83:20:84:6c:3f:70:b7:4f:
54:32:86:0a:be:79:c8:51:df:c8:f7:8e:9d:0f:ff:
82:df:b7:3d:e8:9b:af:2c:a7:c6:cc:0e:02:77:e2:
32:ee:74:6b:41:ec:90:68:66:f5:f7:7f:40:17:b1:
35:87:af:21:40:58:fc:7a:b5:55:3c:a1:84:8a:ad:
ab:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.210.0/24
91.240.69.0/24
IPv6:
2a13:b980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49072
Signature Algorithm: sha256WithRSAEncryption
6c:90:3e:54:0c:2f:e9:54:4e:8a:e1:11:62:d6:c4:54:4c:8a:
e0:21:1c:09:bd:67:79:c6:6e:87:a9:2d:a2:0d:d6:13:34:62:
5b:30:60:30:44:b9:ea:53:dc:1b:51:b0:3e:d3:6a:53:3a:b9:
83:94:e3:24:c8:e4:b9:2e:99:ec:f5:68:5d:ed:35:0e:71:b5:
27:79:be:a1:e7:e0:59:62:d4:64:c2:96:0f:26:01:e2:6f:e8:
78:bf:97:77:d6:ee:da:7b:26:3a:c6:40:3d:d7:7a:8f:91:43:
2d:3b:f0:05:30:7f:f4:e2:c1:2c:be:bb:53:b2:d1:fe:70:74:
e2:ed:66:ba:79:50:ba:93:43:66:51:2f:cc:2b:de:13:c2:98:
2b:57:d3:61:98:a7:e8:0c:0b:c3:8e:4b:b0:18:da:15:e9:bd:
37:7e:f4:5e:50:b4:b0:8d:2c:f3:fe:b2:9b:0e:9a:2a:d5:30:
1a:0d:f9:b0:67:94:e1:e6:aa:4c:57:19:0d:03:fe:db:dc:86:
59:f5:c8:4d:c3:f0:8a:8c:64:df:be:91:c1:89:5d:2d:bd:57:
5f:f4:13:6a:a1:81:a5:84:75:66:a8:ce:f4:43:3d:81:de:2e:
28:c6:0d:a7:19:64:bc:7d:a9:61:b0:27:a5:18:5a:d6:c3:93:
0b:fd:cc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:24:09 2026 by rpki-client