Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/WDD39FE6MtJVLe9JEsYKZIjmmEk.cer
File: WDD39FE6MtJVLe9JEsYKZIjmmEk.cer (raw, json)
Hash identifier: 7d3zbwqYZGCdNjXCcwOakzHlFKBTgbGts3VmQXCTtjw=
Subject key identifier: 58:30:F7:F4:51:3A:32:D2:55:2D:EF:49:12:C6:0A:64:88:E6:98:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A158C01BFF29EEEBB1DE86179008FE1AC2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/WDD39FE6MtJVLe9JEsYKZIjmmEk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 Oct 2026 09:59:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219337
IP: 2a11:6480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:c0:1b:ff:29:ee:eb:b1:de:86:17:90:08:fe:1a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 20 09:59:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5830f7f4513a32d2552def4912c60a6488e69849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:de:6e:8d:58:9d:f6:8e:50:a3:1f:78:93:
eb:79:4e:56:28:f4:73:b4:16:40:75:bc:63:6f:9e:
32:23:a2:3c:fa:45:3d:1a:b6:06:26:d9:89:84:42:
1a:df:d8:2a:f9:5f:7f:28:57:e1:19:e4:fc:fc:89:
7f:85:b2:23:ce:61:bf:a6:1b:0d:c0:39:fd:16:29:
22:bf:2b:bd:2f:8d:72:27:73:1c:76:e2:a5:48:4a:
bf:d7:26:00:16:b4:9e:f1:94:60:21:4c:9c:e1:fc:
14:e2:08:e1:67:21:2d:25:15:51:80:30:08:68:0c:
ba:a5:a0:92:4f:54:31:ee:8a:e8:f2:28:3e:21:57:
eb:52:ea:ec:09:e6:2e:cf:b3:a6:85:68:3d:49:1f:
44:13:02:9d:48:1b:92:4f:fb:b4:8d:5a:1d:60:7f:
2c:a3:89:42:67:01:a1:66:70:2a:04:1e:4f:14:55:
12:78:bb:f7:2e:0e:55:c7:83:ee:f5:a3:a8:a6:b5:
41:3b:14:a0:70:62:61:58:d9:9c:a2:08:4d:65:0d:
3a:67:1f:71:e9:d0:90:13:7f:e4:50:07:3b:da:ab:
6b:82:94:7f:3e:7d:0e:dd:97:8e:2f:9b:d9:21:2a:
c9:bf:24:a6:26:cb:7c:12:02:9f:b0:e6:4e:d7:f4:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:30:F7:F4:51:3A:32:D2:55:2D:EF:49:12:C6:0A:64:88:E6:98:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fb3cc-68eb-444b-a50a-a31f2275a747/1/WDD39FE6MtJVLe9JEsYKZIjmmEk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:6480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219337
Signature Algorithm: sha256WithRSAEncryption
8b:2a:f4:42:73:d0:39:9c:f5:8a:93:3a:62:9e:3d:9d:3a:90:
1a:f0:7a:50:c1:65:eb:41:12:3c:74:da:fc:c1:c0:45:ba:c5:
1f:fd:6e:33:3f:08:ff:70:44:7b:95:3d:e1:f5:81:1c:40:b4:
5b:93:d1:38:94:c4:b7:35:c3:40:7e:eb:57:11:8e:4c:39:18:
2e:66:f3:35:7d:48:4c:32:ce:68:a6:3c:c4:bb:32:8d:43:32:
c3:af:38:71:fe:12:41:91:e7:87:0e:c0:ce:ba:ce:b4:53:ee:
e7:9b:4b:93:a2:a4:cc:ad:fb:bf:43:98:55:83:fb:27:0e:ab:
98:0d:b8:a0:f9:2f:13:be:a1:72:4a:51:35:50:4c:9a:35:d9:
01:e9:56:b0:b6:45:ca:d0:d4:ba:6e:21:b8:bd:4f:de:38:ae:
1c:c9:09:36:c7:8c:14:1a:35:30:39:1c:0e:e9:1b:f7:08:cd:
62:f8:02:bb:49:85:bc:32:87:62:4a:3e:48:3c:cf:e2:e9:13:
e5:92:cf:63:fb:8e:08:35:bd:6b:78:01:70:11:fc:11:d3:15:
8a:16:a8:ca:8a:0a:e1:16:f2:38:18:57:20:ef:38:6c:f9:8d:
b7:b4:d4:64:4f:3c:1f:60:00:ad:75:bc:87:ee:40:5e:35:23:
ff:5e:60:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 21:15:48 2026 by rpki-client