Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/w1WyWMtn8DZZoshnOugZf2iVbjk.cer
File: w1WyWMtn8DZZoshnOugZf2iVbjk.cer (raw, json)
Hash identifier: drSyWvIyE99nk2FwSZQ54XL28DpK18AvQpm4VDuqezU=
Subject key identifier: C3:55:B2:58:CB:67:F0:36:59:A2:C8:67:3A:E8:19:7F:68:95:6E:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0FD14EA670A83F43F776C7DB98758C9B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/w1WyWMtn8DZZoshnOugZf2iVbjk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Oct 2026 14:46:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a0e:6980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:14:ea:67:0a:83:f4:3f:77:6c:7d:b9:87:58:c9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 2 14:46:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c355b258cb67f03659a2c8673ae8197f68956e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:bc:7c:2e:74:73:c6:7b:85:55:00:99:a5:
a9:93:3d:b1:1b:46:9a:79:2e:af:83:a4:58:1d:eb:
53:1f:41:bb:75:6a:ab:8f:13:8a:0e:93:12:67:49:
47:f3:86:be:21:c2:82:c0:70:44:67:2a:10:81:be:
a4:0e:8c:c3:b3:47:85:1d:cc:d6:52:80:78:ac:f5:
b1:8f:da:f9:bc:08:f8:e6:bd:be:86:a7:3d:18:3d:
c7:ce:f0:cd:2e:a1:2e:8e:f5:2c:73:19:a7:1a:ff:
be:41:6b:05:e8:16:b9:eb:d4:88:6e:73:34:5b:ff:
35:ad:cb:79:af:38:d7:e2:71:c0:80:ea:d6:80:16:
67:e9:b2:19:8d:bb:ac:2c:1e:eb:3a:e3:cf:82:d4:
ef:53:91:95:10:ec:a2:5d:e8:91:96:96:41:e1:47:
d2:28:bc:d9:f7:ee:7d:e5:16:41:37:e1:98:c0:a4:
1b:bc:92:96:69:78:93:52:32:d7:c2:a0:a9:43:ec:
21:eb:f3:6e:c4:44:4c:02:4d:2a:52:67:5a:38:ac:
c4:b6:57:51:82:16:39:32:c5:67:ad:4b:ae:40:53:
20:cf:8c:4e:28:56:4e:8a:6a:fe:c9:e6:e2:8a:db:
f7:32:03:75:2f:6b:98:6a:ac:cb:d4:59:45:4d:a0:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:55:B2:58:CB:67:F0:36:59:A2:C8:67:3A:E8:19:7F:68:95:6E:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/w1WyWMtn8DZZoshnOugZf2iVbjk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:6980::/29
Signature Algorithm: sha256WithRSAEncryption
54:21:84:c2:3f:d8:58:6f:55:cf:d7:d5:8d:b7:37:df:44:c4:
83:bb:b3:82:9b:7a:f9:fb:2d:e0:62:27:30:8c:e3:99:91:23:
b0:4f:3c:da:d7:c2:3e:8a:89:60:2e:27:ad:7b:09:8d:26:f1:
22:b9:ca:83:47:73:78:13:c2:57:fe:86:90:70:b7:92:d3:67:
9a:b0:89:65:df:fb:73:53:b1:d8:e0:9a:3c:e8:bf:57:98:6a:
eb:a8:be:eb:fd:ba:73:c3:44:05:d8:e9:f9:97:07:43:9a:3f:
1a:d1:ec:25:2b:ac:f3:8f:e2:54:91:a8:53:f4:ce:6b:e4:1e:
8e:5f:89:b3:48:fc:f7:df:a4:73:81:18:94:56:da:40:94:94:
f1:7c:3b:3c:84:18:88:9e:64:3c:97:5b:b4:3a:59:76:d5:f3:
86:a8:fb:79:e1:45:79:c4:73:51:3a:2c:94:48:96:fa:35:11:
74:ab:73:5d:44:58:8c:79:25:f2:9c:64:80:97:18:b6:b7:e3:
62:93:4a:62:b7:78:f3:6f:43:75:5c:bd:5d:ba:53:fa:7d:d0:
f2:92:0c:a6:18:dd:e6:c8:9d:4d:b0:e9:43:f3:59:f6:4e:e2:
4a:08:53:73:a6:b7:f8:bf:83:79:94:ce:99:8d:36:e4:eb:07:
7a:26:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:34:38 2026 by rpki-client