Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/GDnWP8Sn1dRJZNu2t6wpgDq4vMA.cer
File: GDnWP8Sn1dRJZNu2t6wpgDq4vMA.cer (raw, json)
Hash identifier: YUWgr2DL/nE98EjuGOnUpwpgL4fFucqHK3XEak6xqs8=
Subject key identifier: 18:39:D6:3F:C4:A7:D5:D4:49:64:DB:B6:B7:AC:29:80:3A:B8:BC:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A164B52B1D58A3CD3CED6074123514864D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/225632-d518-4bcb-8787-0f13e959771d/1/GDnWP8Sn1dRJZNu2t6wpgDq4vMA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/225632-d518-4bcb-8787-0f13e959771d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Oct 2026 17:42:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.7.28.0/22
IP: 2a03:2140::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 16:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:b5:2b:1d:58:a3:cd:3c:ed:60:74:12:35:14:86:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 22 17:42:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1839d63fc4a7d5d44964dbb6b7ac29803ab8bcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:11:cb:f0:7c:ea:5a:fe:03:91:75:b6:48:
fc:3b:6e:db:36:ef:28:78:77:90:45:28:de:8b:e8:
c4:b8:5e:ba:b2:98:10:69:64:fc:ac:23:b1:96:43:
7b:fd:58:e8:de:8a:bb:a8:4a:fd:f2:62:5a:fd:be:
e9:dd:e4:40:13:fc:42:82:6f:03:d5:6e:d1:2f:97:
46:0a:6b:db:36:ac:ea:16:e1:27:72:2a:c8:ae:06:
51:94:8d:4f:62:57:63:fc:d6:cc:87:c6:77:f1:c1:
d2:46:01:a1:03:a0:23:70:80:b2:52:45:40:7d:a0:
c9:3d:ed:3d:7d:e5:e0:43:5d:b4:95:29:11:c9:aa:
a3:80:7a:a1:55:9a:12:b7:5b:62:08:f4:71:59:a5:
97:8a:52:a4:c4:ac:db:ec:0e:49:ab:11:e1:85:99:
9e:98:82:c3:e6:95:dc:1f:c0:45:dc:b1:f2:ff:c3:
b3:a8:84:9a:a2:6a:a6:33:22:e8:bc:cd:a5:83:5c:
50:c8:5c:c6:27:1a:05:19:35:c0:37:64:bc:b5:88:
67:27:2c:07:f7:cf:42:ec:ef:3a:21:de:9c:8e:16:
dc:04:26:28:62:0e:89:62:2d:3f:5b:07:df:40:84:
d7:22:27:e6:b9:9d:ab:87:7b:c0:1b:c4:23:f3:52:
ca:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:39:D6:3F:C4:A7:D5:D4:49:64:DB:B6:B7:AC:29:80:3A:B8:BC:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/225632-d518-4bcb-8787-0f13e959771d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/225632-d518-4bcb-8787-0f13e959771d/1/GDnWP8Sn1dRJZNu2t6wpgDq4vMA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.28.0/22
IPv6:
2a03:2140::/32
Signature Algorithm: sha256WithRSAEncryption
77:6f:fc:b8:0a:ad:e2:8c:2f:ec:ba:2e:6b:23:69:e3:18:0c:
21:7a:a2:94:6b:95:4d:e9:0e:a9:1e:03:a2:6d:dc:0c:1c:f7:
ce:79:27:80:d6:b5:16:ff:4b:b1:95:80:b4:59:6a:51:7a:aa:
ad:b2:fe:6a:35:66:b9:35:c0:89:04:5b:ba:df:ea:fc:96:67:
36:54:f2:31:66:92:50:2f:20:a7:ff:c8:dd:bb:ec:59:18:01:
25:8e:b3:64:16:14:94:2e:f0:cb:c6:5e:c6:9a:bb:39:c6:13:
1a:0c:f2:8e:7b:a2:b4:ac:1e:e8:0c:02:06:ee:44:dd:fe:f5:
96:a7:f4:d5:f9:e8:43:98:72:d5:35:9b:67:d2:76:8d:2b:8b:
e5:e1:de:6c:71:70:06:03:a4:f9:cc:12:fd:7a:cc:28:9c:df:
ac:31:b6:d8:de:af:7c:ff:56:08:d6:98:29:37:cc:76:47:35:
26:79:a2:79:af:68:ec:38:ca:a3:db:7e:62:63:55:1a:f1:a5:
19:1c:ea:9e:47:58:94:6f:09:58:df:7f:05:8f:ea:c0:8b:51:
a1:48:bc:0e:05:06:b1:6f:b2:8a:66:f7:04:65:18:7f:f7:5c:
74:50:fa:ff:49:ab:2e:6d:56:c1:ee:11:88:cb:3f:4a:a9:23:
62:f8:0c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:08:48 2026 by rpki-client