Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wxbf0sLMCcpD-DytXL0rGzdwV4g.cer
File: Wxbf0sLMCcpD-DytXL0rGzdwV4g.cer (raw, json)
Hash identifier: w8DNUMnPtvcW7K86ghOtNDTUZsr3qEa+icvS6eZFAJ4=
Subject key identifier: 5B:16:DF:D2:C2:CC:09:CA:43:F8:3C:AD:5C:BD:2B:1B:37:70:57:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB4C34C53F1353A0C9BE7361108A34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/Wxbf0sLMCcpD-DytXL0rGzdwV4g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.43.27.0/24
IP: 193.247.163.0/24
IP: 2001:67c:168::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:4c:34:c5:3f:13:53:a0:c9:be:73:61:10:8a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b16dfd2c2cc09ca43f83cad5cbd2b1b37705788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:44:6a:ba:3e:e5:b2:f8:fb:6e:cc:34:b2:
d9:63:4e:45:16:2a:a1:64:95:f3:2d:ce:9c:b8:76:
3a:ec:fb:3c:81:4e:04:86:4e:ac:e6:27:20:8c:f3:
98:61:19:af:c0:49:6d:c7:67:af:2d:c7:07:cc:aa:
68:75:3a:4e:ce:3a:e2:ae:09:53:0f:0c:02:71:bf:
78:06:53:34:29:1c:b6:9d:24:4c:30:70:5a:d4:af:
7e:15:53:1a:81:07:84:b3:06:56:f0:41:04:d0:0e:
62:31:a0:87:cd:4f:3a:06:7c:1f:32:4e:71:83:42:
28:2f:fd:89:b0:dd:42:94:e4:6c:5b:8d:61:f7:4d:
1f:a1:5a:de:c0:54:29:6c:93:f0:f1:0e:5b:0b:71:
55:7a:34:86:52:01:db:08:1a:dd:28:0a:e7:f2:ee:
12:48:28:6d:23:8b:09:2f:a9:48:08:0b:53:aa:40:
5e:14:ec:db:83:82:a5:c2:ff:75:17:7f:7b:f6:f4:
48:31:00:d7:dc:d4:26:55:64:70:4e:68:67:50:35:
f9:19:47:3c:b5:e7:e0:00:f7:9c:9a:b7:bd:f6:6c:
b0:dd:2c:dc:9e:c0:7a:02:bd:59:eb:4b:2c:21:ad:
a7:4a:03:87:ca:7a:1d:51:14:a8:0d:b2:ae:46:e4:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:16:DF:D2:C2:CC:09:CA:43:F8:3C:AD:5C:BD:2B:1B:37:70:57:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/Wxbf0sLMCcpD-DytXL0rGzdwV4g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.27.0/24
193.247.163.0/24
IPv6:
2001:67c:168::/48
Signature Algorithm: sha256WithRSAEncryption
98:2c:0f:ae:70:f3:2f:f3:c5:ca:42:83:26:60:c1:9b:da:17:
a5:28:26:f3:d0:37:3c:db:24:c2:6d:7f:0e:17:bf:19:7c:bd:
a6:12:1c:77:c1:e5:f0:88:e4:50:8e:d3:07:99:a2:9f:ba:2e:
f6:c7:49:55:c2:1c:3e:52:f0:6d:48:f8:0c:a9:0c:ad:fc:bc:
57:ed:5d:d1:f3:91:84:08:da:ae:57:6c:ac:7d:5a:94:c1:5d:
61:7a:96:69:0a:f5:31:88:66:3d:f2:25:82:54:f8:a3:1b:bc:
b9:f7:49:c8:5f:59:7a:0e:d3:43:5a:5f:a1:c0:81:71:24:c8:
0b:d0:a8:86:1e:2d:1c:8a:37:a3:19:a5:76:c6:01:d5:55:94:
a5:c2:13:ed:ef:46:44:9f:6f:5b:3a:40:a5:79:42:84:4a:51:
00:f9:1f:e5:4d:d6:3b:98:08:1f:3b:5a:9f:00:9b:e3:e2:f3:
73:14:d1:ba:a0:65:4d:47:47:89:fc:7b:cb:f5:41:ad:09:bb:
01:bf:79:d9:57:ff:de:1b:83:71:a2:33:79:4c:56:81:94:70:
3b:04:29:5b:b4:10:7f:42:8e:e5:7a:50:6f:34:49:b9:95:b4:
2a:0f:b1:b1:4b:27:05:08:2d:e3:2c:d4:35:b4:ff:ed:c5:d1:
9a:3b:c1:19
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZ8Y+0w0xT8TU6DJvnNhEIo0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjE2ZGZkMmMyY2MwOWNhNDNmODNjYWQ1Y2JkMmIxYjM3NzA1Nzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrVEaro+5bL4+27MNLLZY05FFiqh
ZJXzLc6cuHY67Ps8gU4Ehk6s5icgjPOYYRmvwEltx2evLccHzKpodTpOzjrirglT
DwwCcb94BlM0KRy2nSRMMHBa1K9+FVMagQeEswZW8EEE0A5iMaCHzU86BnwfMk5x
g0IoL/2JsN1ClORsW41h900foVrewFQpbJPw8Q5bC3FVejSGUgHbCBrdKArn8u4S
SChtI4sJL6lICAtTqkBeFOzbg4Klwv91F3979vRIMQDX3NQmVWRwTmhnUDX5GUc8
tefgAPecmre99myw3SzcnsB6Ar1Z60ssIa2nSgOHynodURSoDbKuRuR3GQIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFFsW39LCzAnKQ/g8rVy9Kxs3cFeIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3LzgxNTRl
My0yODZiLTQ2YTMtYjhhNS01MjM1NmNkNWRhOTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvODE1NGUz
LTI4NmItNDZhMy1iOGE1LTUyMzU2Y2Q1ZGE5MC8xL1d4YmYwc0xNQ2NwRC1EeXRY
TDByR3pkd1Y0Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF
BwEHAQH/BCcwJTASBAIAATAMAwQAwSsbAwQAwfejMA8EAgACMAkDBwAgAQZ8AWgw
DQYJKoZIhvcNAQELBQADggEBAJgsD65w8y/zxcpCgyZgwZvaF6UoJvPQNzzbJMJt
fw4Xvxl8vaYSHHfB5fCI5FCO0weZop+6LvbHSVXCHD5S8G1I+AypDK38vFftXdHz
kYQI2q5XbKx9WpTBXWF6lmkK9TGIZj3yJYJU+KMbvLn3SchfWXoO00NaX6HAgXEk
yAvQqIYeLRyKN6MZpXbGAdVVlKXCE+3vRkSfb1s6QKV5QoRKUQD5H+VN1juYCB87
Wp8Am+Pi83MU0bqgZU1HR4n8e8v1Qa0JuwG/edlX/94bg3GiM3lMVoGUcDsEKVu0
EH9CjuV6UG80SbmVtCoPsbFLJwUILeMs1DW0/+3F0Zo7wRk=
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:21:42 2026 by rpki-client