Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W-I_G-t4thhzgxibOq98OCvFcfM.cer
File: W-I_G-t4thhzgxibOq98OCvFcfM.cer (raw, json)
Hash identifier: eT9DLJwqE4jsSm3Ae+h38Ko7Ry2yKJIXyskekdZSJUg=
Subject key identifier: 5B:E2:3F:1B:EB:78:B6:18:73:83:18:9B:3A:AF:7C:38:2B:C5:71:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA384DE2B3634B831A854984DE8490
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 59909
IP: 168.222.188.0/22
IP: 185.67.108.0/22
IP: 2a05:e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:38:4d:e2:b3:63:4b:83:1a:85:49:84:de:84:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5be23f1beb78b6187383189b3aaf7c382bc571f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3b:5d:47:f3:b9:f2:b9:86:b3:95:3e:ec:03:
13:26:48:5c:34:3d:25:d7:23:63:47:ce:77:6a:02:
38:35:1e:59:4b:bf:5e:fa:18:1d:2a:90:0f:1a:b9:
28:59:f6:a9:05:5f:cd:99:99:eb:be:4e:22:3b:6d:
36:3b:28:a5:4d:a0:20:8e:ea:7b:9e:3d:20:08:31:
79:52:4e:ec:b5:b8:f3:47:e9:ea:73:b8:ed:93:56:
19:65:b5:35:c7:3e:e7:69:fe:64:a1:c9:aa:78:27:
7c:c4:4e:e4:75:ad:85:5c:33:6c:63:f4:b3:ef:96:
1b:70:b0:28:83:be:8b:75:9e:09:32:61:d8:21:63:
6b:01:17:14:72:8b:02:5a:81:60:5e:28:18:c6:7a:
9c:1d:d6:b2:14:75:86:7b:22:c3:ad:ac:7d:35:d6:
14:f0:46:54:8c:7c:36:92:f7:83:22:8e:7b:74:24:
e8:0f:ec:6f:ea:e2:fa:d5:11:a9:23:4e:ba:69:33:
49:ee:c0:a4:f9:01:c6:e0:34:fa:5c:2c:48:7f:7b:
72:da:40:31:cf:95:d2:76:a1:64:03:9c:04:bc:50:
79:4f:5f:56:6f:e1:0b:d8:e8:b9:1b:0b:81:a4:b3:
a1:08:39:f2:aa:4f:d6:87:03:e2:46:21:6c:84:2a:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E2:3F:1B:EB:78:B6:18:73:83:18:9B:3A:AF:7C:38:2B:C5:71:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/W-I_G-t4thhzgxibOq98OCvFcfM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.188.0/22
185.67.108.0/22
IPv6:
2a05:e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59909
Signature Algorithm: sha256WithRSAEncryption
5b:9e:41:c8:ee:91:6e:a9:28:80:7a:f5:f2:d7:28:0a:64:02:
72:43:de:20:bb:fb:3b:46:4d:de:93:78:f7:11:a2:fe:26:8b:
bb:0b:c3:26:ca:ab:12:17:c4:24:4c:99:9b:aa:01:66:d1:62:
34:16:82:c4:db:14:5d:03:9b:e0:04:69:f8:c5:db:34:a5:64:
f7:67:23:1a:06:ff:65:9b:2e:7f:19:5a:33:c7:41:32:3e:b6:
c5:75:7a:da:a0:c3:56:57:62:bf:ae:a2:13:9f:9f:c4:b4:3c:
71:d7:69:83:f4:f5:22:10:fc:74:69:92:6e:a8:b1:e1:a1:65:
0b:d0:29:cb:d8:2d:a5:98:c4:31:68:01:4e:ec:aa:8c:35:48:
60:20:66:de:9b:a1:b3:cf:9d:50:2d:5d:ed:40:2c:2a:5a:c7:
cf:7a:7c:93:e2:65:bd:03:0d:b3:5f:79:79:60:e0:d7:14:7f:
4a:65:17:9a:e9:68:0a:22:0d:25:29:f7:67:f7:24:e5:56:93:
33:6b:3a:77:20:c1:16:cf:aa:86:38:71:47:d0:4f:20:75:ca:
3b:a6:6f:f7:a6:75:ac:3a:33:e5:13:a9:2c:b7:9b:78:6e:b1:
2d:6a:a8:e4:d3:13:6d:41:2c:57:77:44:e6:92:d8:71:c7:22:
28:95:9e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:49:51 2026 by rpki-client