Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wvrMVfBdPoBsyn52MQzPPdjwKG4.cer
File: wvrMVfBdPoBsyn52MQzPPdjwKG4.cer (raw, json)
Hash identifier: HIuPhujV62HtLZcylE2MJ3kmZ2XYxRxeRUsLujqnLh0=
Subject key identifier: C2:FA:CC:55:F0:5D:3E:80:6C:CA:7E:76:31:0C:CF:3D:D8:F0:28:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F1DFE9C0CB54DC4CF71AAA5AE4ED494EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jul 2026 14:04:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 149.220.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:fe:9c:0c:b5:4d:c4:cf:71:aa:a5:ae:4e:d4:94:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 1 14:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2facc55f05d3e806cca7e76310ccf3dd8f0286e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:38:b2:85:bb:be:39:d2:3c:42:08:5f:c6:
0c:bc:18:5a:61:7d:62:4c:6b:ca:95:23:63:19:4c:
23:b6:a7:1c:b7:9a:f1:f5:97:a1:ef:fb:d0:26:94:
10:ee:46:b7:e7:cd:66:74:56:ab:b5:08:7c:99:35:
81:10:b5:26:7f:1e:58:69:35:36:4a:8a:3e:14:60:
62:d6:b8:b7:45:c9:7b:20:f0:d9:2e:89:ad:0e:1b:
37:f5:d1:80:f5:8f:16:f9:7f:9b:67:b6:23:bb:7c:
5d:35:f4:b3:37:b4:af:5c:34:a8:7c:bb:61:aa:61:
e8:d8:c4:80:64:73:48:db:4b:68:41:63:e1:19:88:
03:5a:61:53:8c:4a:c3:a3:b5:09:c8:28:4a:11:fd:
ee:4e:b7:0d:d6:2e:5a:a6:aa:5b:c3:3c:ad:9a:12:
bb:04:00:8e:1e:87:f3:1e:3d:63:c0:26:39:c1:91:
5d:95:07:9c:3a:0a:2f:8b:9d:b5:29:3a:e1:f8:85:
67:c0:0e:47:d4:5c:8e:b6:2f:68:55:83:06:1b:58:
e2:b8:64:e6:31:e4:58:9d:3e:47:93:f9:ab:51:b0:
dc:c3:e3:c6:9b:9e:f0:0e:44:48:d9:6f:97:67:8a:
fb:a2:7d:77:ad:0b:8a:33:df:1c:8f:33:57:a0:22:
64:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FA:CC:55:F0:5D:3E:80:6C:CA:7E:76:31:0C:CF:3D:D8:F0:28:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ff41c7-d27b-4473-a7dc-0e51e1f5de23/1/wvrMVfBdPoBsyn52MQzPPdjwKG4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.220.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:fe:61:68:3f:7e:f8:7b:68:71:27:5c:75:e6:dd:e9:80:ea:
75:3f:b9:02:08:7f:5a:7f:0a:4a:4a:ce:81:4e:19:00:97:76:
de:f0:e8:9b:4d:27:6e:5c:41:83:81:6a:08:92:2b:c5:c1:11:
24:53:61:df:69:e6:21:3c:da:29:07:0a:69:01:50:08:c8:53:
01:09:dc:0e:b1:ed:ce:f5:85:28:1b:d2:dd:73:41:bc:86:c4:
a5:c8:21:eb:8c:7a:80:54:22:ba:9f:51:2c:ca:bc:d6:45:a4:
9a:5f:bb:c2:ac:3d:75:2c:16:3f:66:c1:43:de:63:34:2a:ed:
b8:a9:74:e6:9a:5f:ad:3a:fe:b9:e0:f3:80:83:ad:f4:a3:cf:
b9:da:b9:03:c4:ce:ee:46:f6:8e:0e:39:f2:23:ae:c9:f4:6f:
c4:33:89:d7:61:07:08:80:e2:0b:35:cd:12:23:07:f6:9a:bf:
a7:6a:a3:5e:4a:3a:ca:f8:4a:19:2a:94:2f:28:b5:bf:39:7a:
f8:5f:da:45:00:70:fd:0a:1a:c9:a7:49:ea:7f:a2:58:08:9b:
01:e5:88:27:1b:d9:30:49:c2:aa:e8:38:23:2d:a4:57:fa:17:
bf:87:a2:fa:da:a6:64:ff:ed:3a:bb:7f:d9:1d:67:67:e6:b9:
e2:88:aa:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:22:00 2026 by rpki-client