Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/WTEpqk3JOoMG68qWBoxdeeF4L7U.cer
File: WTEpqk3JOoMG68qWBoxdeeF4L7U.cer (raw, json)
Hash identifier: YlOzl8MDLUW0rddkDn0CR27D4zDWuVVHVh+vxzy4bWs=
Subject key identifier: 59:31:29:AA:4D:C9:3A:83:06:EB:CA:96:06:8C:5D:79:E1:78:2F:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1294722902129B8FC514203B13B985EFC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/6/593129AA4DC93A8306EBCA96068C5D79E1782FB5.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/6/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 11 Oct 2026 04:44:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218470
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:47:22:90:21:29:b8:fc:51:42:03:b1:3b:98:5e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 11 04:44:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=593129aa4dc93a8306ebca96068c5d79e1782fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:ac:01:41:ff:c4:d3:f3:d9:1f:49:16:d8:
0c:b5:fa:31:33:65:19:92:5f:89:a6:55:9c:7f:3d:
f5:94:03:5a:e2:51:ae:cd:04:70:dd:c4:65:79:90:
44:30:b5:2e:ca:8c:4a:2c:24:67:cc:07:61:58:aa:
ab:43:e0:d0:80:59:61:b9:0b:28:de:b5:96:6c:3a:
8f:fb:28:0d:df:12:cd:ab:87:5c:19:8b:61:f0:1b:
25:65:5c:ad:31:b2:57:db:52:58:26:c1:7f:aa:1c:
45:87:67:fe:ce:1f:c3:b1:2b:e8:53:85:2a:83:db:
55:f5:bf:5d:f9:38:db:9b:42:29:26:92:aa:3a:c8:
e7:2b:06:8f:3b:4f:67:9b:52:4e:e2:94:cc:0c:27:
62:83:c5:7d:75:b0:d8:2d:72:31:ce:bf:95:2a:15:
90:ae:d2:22:4c:d7:7e:e6:c5:c3:7b:fa:50:bb:f1:
94:d1:e2:8c:57:1c:c7:74:05:f1:d8:8a:e7:00:c8:
49:dc:cb:30:f3:e5:67:00:df:ba:24:e2:63:e0:a0:
1b:5a:db:41:34:dc:f8:e6:03:77:77:29:ad:6f:60:
b4:27:27:af:21:14:35:af:6d:19:63:a0:bc:5b:d6:
9f:78:3f:ab:e2:ad:10:c7:7b:8c:b0:93:0a:1f:11:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:31:29:AA:4D:C9:3A:83:06:EB:CA:96:06:8C:5D:79:E1:78:2F:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/6/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/6/593129AA4DC93A8306EBCA96068C5D79E1782FB5.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218470
Signature Algorithm: sha256WithRSAEncryption
94:fc:dc:08:37:31:62:3e:c1:17:31:c5:2f:a6:92:82:8f:a8:
71:7b:76:71:ce:74:90:2b:86:b1:76:b5:e1:9f:91:bd:46:da:
33:4a:08:3c:99:ff:2e:f0:46:ce:cb:f0:8b:38:a2:75:1c:5d:
ac:30:8d:07:b8:1d:ee:87:ab:da:4b:7c:dc:0b:2a:53:cc:7d:
a7:ee:ca:46:49:0c:12:da:05:4d:b1:47:da:a4:2a:97:03:2f:
41:27:9f:c5:b9:a0:ba:dd:d0:f4:d1:9d:52:4c:2d:6d:ce:b2:
0e:52:9a:28:45:fa:7b:0d:bf:1c:d6:f2:1c:9f:29:77:89:43:
38:b8:6b:6e:ea:75:ee:19:07:f0:33:c5:f0:4c:fc:42:c0:93:
c5:d2:17:4b:d0:9f:61:45:60:85:58:90:6a:08:e0:cc:cd:a9:
55:7c:09:bc:c2:b4:85:ca:18:fa:76:7b:a1:25:1b:f3:10:f1:
e9:42:a7:9c:71:90:ed:4f:89:30:de:b5:39:33:c7:ab:9f:26:
b2:6c:0b:26:1e:24:08:0b:4e:c3:30:0f:0b:36:b5:ef:e0:0a:
72:c8:8e:b0:7b:e7:d9:c6:7b:03:d7:b8:02:eb:59:90:6b:23:
8e:54:5f:69:26:9b:e8:8d:3a:49:d6:cc:37:10:16:1c:20:f0:
f0:e8:28:06
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAaEpRyKQISm4/FFCA7E7mF78MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDExMDQ0NDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTMxMjlhYTRkYzkzYTgzMDZlYmNhOTYwNjhjNWQ3OWUxNzgyZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2GsAUH/xNPz2R9JFtgMtfoxM2UZ
kl+JplWcfz31lANa4lGuzQRw3cRleZBEMLUuyoxKLCRnzAdhWKqrQ+DQgFlhuQso
3rWWbDqP+ygN3xLNq4dcGYth8BslZVytMbJX21JYJsF/qhxFh2f+zh/DsSvoU4Uq
g9tV9b9d+Tjbm0IpJpKqOsjnKwaPO09nm1JO4pTMDCdig8V9dbDYLXIxzr+VKhWQ
rtIiTNd+5sXDe/pQu/GU0eKMVxzHdAXx2IrnAMhJ3Msw8+VnAN+6JOJj4KAbWttB
NNz45gN3dymtb2C0JyevIRQ1r20ZY6C8W9afeD+r4q0Qx3uMsJMKHxHxTQIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFFkxKapNyTqDBuvKlgaMXXnheC+1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNjYmZh
ZDk2LTc5NDctNGU0OS1hY2UxLThiZjg5OTkzYmQ0Mi82LzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2Ni
ZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNiZDQyLzYvNTkzMTI5QUE0REM5
M0E4MzA2RUJDQTk2MDY4QzVENzlFMTc4MkZCNS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDVWYw
DQYJKoZIhvcNAQELBQADggEBAJT83Ag3MWI+wRcxxS+mkoKPqHF7dnHOdJArhrF2
teGfkb1G2jNKCDyZ/y7wRs7L8Is4onUcXawwjQe4He6Hq9pLfNwLKlPMfafuykZJ
DBLaBU2xR9qkKpcDL0Enn8W5oLrd0PTRnVJMLW3Osg5SmihF+nsNvxzW8hyfKXeJ
Qzi4a27qde4ZB/AzxfBM/ELAk8XSF0vQn2FFYIVYkGoI4MzNqVV8CbzCtIXKGPp2
e6ElG/MQ8elCp5xxkO1PiTDetTkzx6ufJrJsCyYeJAgLTsMwDws2te/gCnLIjrB7
59nGewPXuALrWZBrI45UX2kmm+iNOknWzDcQFhwg8PDoKAY=
-----END CERTIFICATE-----
Generated at Sun Oct 25 07:53:01 2026 by rpki-client