Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
File: WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer (raw, json)
Hash identifier: +STrw6QBBuxWaXptumXXA/LL5NHHRvREf98YXhyRbWU=
Subject key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F911E5F92F34407A2CD407356F98EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39810
AS: 207313
IP: 89.187.0.0/19
IP: 91.205.158.0/24
IP: 2a10:e400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:11:e5:f9:2f:34:40:7a:2c:d4:07:35:6f:98:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:7e:74:bd:91:b2:e1:e2:f4:3f:ba:99:0d:
ee:e7:bf:ef:66:4d:7d:ca:e0:b5:38:d7:f1:85:02:
06:ca:eb:68:f1:29:94:55:7e:fe:6c:e1:67:ef:38:
05:18:c1:60:38:d6:89:d8:17:88:5c:49:81:12:1b:
ec:bd:e2:bb:1b:d9:bc:39:7c:df:3d:ee:29:5f:90:
89:55:87:e4:63:b5:01:da:42:41:43:2d:93:ae:42:
49:b0:90:b8:29:ef:f0:95:94:85:dc:82:92:b0:1d:
2f:4c:d2:29:97:9c:4a:6b:dd:e9:73:e1:90:56:61:
7f:a8:3d:a9:38:cf:c0:2e:32:98:3e:f3:9f:93:01:
ad:9f:20:d3:d8:3c:cb:65:cc:ec:bf:eb:b4:70:80:
ce:fe:64:77:d8:cc:a9:34:ca:70:c2:95:cb:e2:fe:
dd:32:67:e6:38:e7:60:49:98:64:58:f9:7c:f3:a4:
98:d1:4f:5e:18:b6:06:0a:31:df:fa:4e:20:f5:29:
08:2a:ae:32:34:8d:b9:8f:17:69:22:ab:37:89:1e:
ed:e1:0b:73:e9:d2:be:ab:3f:9a:55:f7:90:78:45:
e3:08:44:5b:4b:a1:66:f4:6d:ab:7e:5d:21:d6:d7:
fa:19:93:c3:46:fe:41:8b:38:17:6d:0d:aa:7e:ba:
71:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.0.0/19
91.205.158.0/24
IPv6:
2a10:e400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39810
207313
Signature Algorithm: sha256WithRSAEncryption
49:fa:bd:28:47:3f:01:3c:e9:0f:9d:1c:ea:b3:83:ee:42:be:
5a:d8:a1:47:1d:22:e0:f2:d4:98:b0:d5:9b:4b:38:42:4f:ce:
bb:91:e5:ba:06:77:71:7a:d0:5b:17:d9:e6:cb:5f:79:d7:90:
ed:b5:92:c3:f9:26:cb:e1:ad:2c:53:0e:a2:a7:26:e6:da:62:
7a:47:6c:32:9e:d0:91:79:23:6a:12:44:0b:ab:23:8a:a8:17:
4f:2b:dc:42:90:5f:67:b6:92:1c:39:7c:d0:4c:9e:a8:f3:38:
0b:2e:25:43:45:d5:5a:ba:2e:32:1e:fd:85:7b:46:ad:8e:38:
39:2e:bd:fc:78:5e:4a:f2:c3:96:a4:5b:71:98:e9:62:02:75:
5a:fd:67:a2:3d:17:8a:32:62:0f:6d:cf:e6:de:fc:6f:09:19:
bb:02:f1:62:7e:84:0b:2d:da:91:d5:b7:3a:b9:c2:ac:61:00:
d1:fc:e4:cb:fe:d4:2e:c4:53:19:d1:d8:69:fe:35:06:46:b8:
8b:76:9d:a2:51:ed:90:cc:12:97:72:77:e2:a5:78:03:b4:4b:
3d:8f:fc:2d:c9:92:5a:40:9d:ed:48:ca:ac:24:ab:25:3e:ca:
fe:e2:2e:ef:2f:17:b7:49:f7:36:c7:c7:2c:7a:4e:9d:57:3b:
f7:1d:08:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 23:07:50 2026 by rpki-client