Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wkv82nYeTylp9jQ3IYeeygGert4.cer
File: Wkv82nYeTylp9jQ3IYeeygGert4.cer (raw, json)
Hash identifier: Ns9mg0fJJx7LzbGe5oz8PI79/yq0Ecl9wYB1mfViZBA=
Subject key identifier: 5A:4B:FC:DA:76:1E:4F:29:69:F6:34:37:21:87:9E:CA:01:9E:AE:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9F72AE7F8B7F8793F529C5BFF3C88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 130.149.0.0/16
IP: 141.23.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:f7:2a:e7:f8:b7:f8:79:3f:52:9c:5b:ff:3c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a4bfcda761e4f2969f6343721879eca019eaede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:c3:07:67:e7:61:c9:bb:ed:29:c7:19:21:
3e:40:82:fc:c7:a1:16:7c:4c:cc:9a:77:fc:8a:68:
e8:ed:da:cb:98:a1:b2:49:f1:8a:b5:89:56:17:e9:
bd:48:5d:1a:fd:1b:70:c4:7e:40:15:f9:57:31:02:
22:03:88:b3:ef:8f:87:5b:24:cb:d2:de:6b:59:ad:
f1:d6:20:1f:4f:c7:1f:2e:78:4b:65:09:f4:0e:ec:
de:99:53:68:69:be:ed:87:79:5d:67:8f:83:5b:c0:
a3:04:38:15:dc:ff:9a:1f:cc:c3:6e:4b:d7:83:05:
d9:5b:70:83:4a:a4:68:b6:47:90:a0:4f:21:aa:5b:
b4:10:89:0e:d8:ef:10:18:ea:a3:15:64:84:05:49:
21:32:1f:5b:6e:07:80:1b:c5:e5:cc:0d:b8:bb:b8:
a1:b9:81:c1:70:61:7d:e3:a0:7d:89:ea:eb:21:f3:
17:e3:55:39:c0:ae:47:fe:a3:45:0a:8f:09:3c:f0:
60:d9:d4:31:c4:c9:b3:0a:ef:35:5d:0b:2b:e0:d9:
c4:22:b5:ba:15:27:d8:6a:3c:24:6a:7f:fa:9c:19:
4a:af:9b:7d:27:78:2a:92:e6:32:52:c1:8b:d0:6d:
a3:c2:aa:ff:53:80:71:da:77:62:1e:53:9c:6e:60:
7a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4B:FC:DA:76:1E:4F:29:69:F6:34:37:21:87:9E:CA:01:9E:AE:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/Wkv82nYeTylp9jQ3IYeeygGert4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.149.0.0/16
141.23.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:88:90:1b:3b:d5:bf:95:8b:4d:87:27:e6:5d:c3:cb:4e:2d:
31:76:8a:a9:5b:35:d5:88:d8:75:a2:dd:45:16:04:d6:b4:1b:
f6:7b:47:24:1e:03:36:e2:11:44:43:03:1a:98:4a:fb:99:70:
88:c8:1c:48:9e:d6:65:77:3d:ae:81:c6:dd:48:b6:da:85:d9:
80:26:29:76:3a:15:71:96:1e:5d:fb:d3:90:73:b1:64:0f:fc:
28:da:ac:f7:39:7f:ad:b0:63:98:1b:17:38:f7:27:2e:a4:f6:
7f:f6:4e:e4:d5:c4:d2:8d:3c:a7:87:88:d2:0e:d7:de:2a:e5:
2c:87:7a:09:1e:12:ad:cc:9a:e2:6b:8e:95:f0:53:f0:e6:1b:
bc:22:4a:6a:a5:35:86:0c:08:16:59:54:a8:fe:fb:30:97:68:
b9:3c:3a:3f:f1:98:e8:2c:84:7f:f7:86:03:e3:87:a6:02:25:
82:01:89:02:15:57:4a:76:85:e2:19:7d:5b:28:24:52:2e:76:
b1:c6:64:9d:6b:6c:d8:2d:7e:1d:81:6e:0d:f9:01:6c:cb:af:
e4:79:e9:78:51:1c:72:12:97:ff:51:97:71:62:66:df:dc:27:
b3:c6:fe:02:47:94:bb:13:69:fe:27:d1:e6:50:53:6b:fc:64:
9d:31:b6:f2
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAZ8Y+fcq5/i3+Hk/Upxb/zyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTRiZmNkYTc2MWU0ZjI5NjlmNjM0MzcyMTg3OWVjYTAxOWVhZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4fDB2fnYcm77SnHGSE+QIL8x6EW
fEzMmnf8imjo7drLmKGySfGKtYlWF+m9SF0a/RtwxH5AFflXMQIiA4iz74+HWyTL
0t5rWa3x1iAfT8cfLnhLZQn0DuzemVNoab7th3ldZ4+DW8CjBDgV3P+aH8zDbkvX
gwXZW3CDSqRotkeQoE8hqlu0EIkO2O8QGOqjFWSEBUkhMh9bbgeAG8XlzA24u7ih
uYHBcGF946B9ierrIfMX41U5wK5H/qNFCo8JPPBg2dQxxMmzCu81XQsr4NnEIrW6
FSfYajwkan/6nBlKr5t9J3gqkuYyUsGL0G2jwqr/U4Bx2ndiHlOcbmB69wIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFFpL/Np2Hk8pafY0NyGHnsoBnq7eMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzY1NDFi
NC03NDI0LTQ3NTgtYmQzMi01ZTQwNDFkOTMwMDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvNjU0MWI0
LTc0MjQtNDc1OC1iZDMyLTVlNDA0MWQ5MzAwOC8xL1drdjgyblllVHlscDlqUTNJ
WWVleWdHZXJ0NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCMGCCsGAQUF
BwEHAQH/BBQwEjAQBAIAATAKAwMAgpUDAwCNFzANBgkqhkiG9w0BAQsFAAOCAQEA
a4iQGzvVv5WLTYcn5l3Dy04tMXaKqVs11YjYdaLdRRYE1rQb9ntHJB4DNuIRREMD
GphK+5lwiMgcSJ7WZXc9roHG3Ui22oXZgCYpdjoVcZYeXfvTkHOxZA/8KNqs9zl/
rbBjmBsXOPcnLqT2f/ZO5NXE0o08p4eI0g7X3irlLId6CR4Srcya4muOlfBT8OYb
vCJKaqU1hgwIFllUqP77MJdouTw6P/GY6CyEf/eGA+OHpgIlggGJAhVXSnaF4hl9
WygkUi52scZknWts2C1+HYFuDfkBbMuv5HnpeFEcchKX/1GXcWJm39wns8b+AkeU
uxNp/ifR5lBTa/xknTG28g==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:21:59 2026 by rpki-client