Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.cer
File: Wjpmf2pS9UDdxwy5GCD9RAIiRT8.cer (raw, json)
Hash identifier: etYgq9IS/FHlzcxP8ZIRjk6lytewQWhqyvAY+uAFS7I=
Subject key identifier: 5A:3A:66:7F:6A:52:F5:40:DD:C7:0C:B9:18:20:FD:44:02:22:45:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A130A66A869967F58E7689B7388F242C1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 12 Oct 2026 15:06:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218429
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a6:6a:86:99:67:f5:8e:76:89:b7:38:8f:24:2c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 12 15:06:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a3a667f6a52f540ddc70cb91820fd440222453f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:9f:f0:ec:a8:1a:ec:2c:96:b3:ed:d8:31:
6a:38:74:7d:08:51:39:2f:b1:c2:91:09:a5:c4:b8:
64:56:98:92:81:ce:4d:2b:d9:45:73:2e:44:c7:3d:
a6:56:e6:79:93:1d:1d:7b:2e:40:16:b1:03:10:eb:
8d:ac:1e:15:e9:36:c8:34:fd:17:a9:8e:b9:2d:7e:
8d:e0:ec:c8:0d:97:10:ab:11:4d:43:b0:0f:d2:1f:
2d:c0:b1:05:dd:10:a8:7f:db:e7:b5:50:81:8d:3e:
e0:e0:d0:2e:6d:d8:dd:08:8d:3c:bd:9b:c5:9a:32:
ff:76:e7:62:8d:0c:67:85:99:47:99:ea:e7:f0:ab:
81:5e:c9:96:6c:eb:c3:ab:51:45:5d:67:3e:8b:89:
7d:58:12:cb:b6:30:1f:8e:a0:d5:5b:ab:e5:44:f8:
79:e1:7f:0a:45:47:d7:36:93:69:43:aa:82:9f:30:
cd:48:7d:50:22:cb:83:20:67:b0:c3:0f:22:6c:d3:
42:0c:e5:26:54:e3:9d:da:de:51:af:b2:9f:b2:d4:
66:32:b4:46:53:9c:d5:59:fc:86:9a:78:2b:c1:d9:
72:dd:7c:01:dc:d7:2e:fd:13:0c:89:c6:51:44:4d:
79:e0:99:75:48:68:b4:b2:1d:c0:b6:61:da:85:e2:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3A:66:7F:6A:52:F5:40:DD:C7:0C:B9:18:20:FD:44:02:22:45:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1389de-d29e-431c-8aa2-d945a6bd842d/1/Wjpmf2pS9UDdxwy5GCD9RAIiRT8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218429
Signature Algorithm: sha256WithRSAEncryption
20:1a:b5:81:e6:b9:17:3f:48:6f:e4:9f:be:19:1c:b9:e4:8e:
c0:5e:8b:03:da:fe:37:02:c2:b6:ec:1a:f9:8f:c2:84:f8:8a:
1a:18:5e:b7:6e:74:c6:5a:85:e3:94:88:d0:3d:aa:91:28:18:
44:19:15:00:23:65:01:b8:5d:f9:74:d1:8c:b4:f4:78:ad:58:
9d:4b:3c:0b:2c:44:4e:02:03:05:25:d0:91:a2:7d:3d:3e:72:
3c:07:c9:cf:62:fb:2d:bb:e5:1c:47:f2:bc:cc:ca:2d:40:11:
1b:c7:6f:63:d1:f7:61:cc:fd:3f:ba:bf:9d:19:c8:1f:f0:4a:
4f:05:bf:19:56:2f:40:22:38:47:5b:8c:34:69:37:83:4e:bb:
ca:a6:ea:d7:b6:87:8a:d3:67:c8:03:2b:a1:5f:cc:d8:a2:a9:
66:56:e4:d9:56:46:06:a6:cf:fd:45:a5:49:e8:02:ff:fd:54:
ad:65:38:42:2a:b8:68:70:30:3a:66:5d:bb:2a:da:41:32:fb:
a4:ac:1e:a0:fe:9e:13:6b:66:0c:fe:61:bc:99:65:ee:90:2d:
be:d1:34:58:09:65:c1:bd:73:9b:57:92:72:88:c2:01:6c:9b:
0f:ee:f0:80:85:00:64:e8:5c:65:5d:51:ab:e8:dd:5e:fc:28:
bf:7b:7c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 04:01:02 2026 by rpki-client