Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1fdy0HHFE8Hozluapn9oke71C-8.cer
File: 1fdy0HHFE8Hozluapn9oke71C-8.cer (raw, json)
Hash identifier: ct9zG3YWy4LZJUnOlg4qXoA4JVrK11tI66V4+roLCl8=
Subject key identifier: D5:F7:72:D0:71:C5:13:C1:E8:CE:5B:9A:A6:7F:68:91:EE:F5:0B:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E7396F14F94A3BC6BFC2826FB4282C2ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 29 May 2026 11:55:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 49375
IP: 178.17.241.0 -- 178.17.246.255
IP: 178.17.248.0/21
IP: 188.94.40.0 -- 188.94.42.255
IP: 188.94.44.0 -- 188.94.46.255
IP: 2a02:1648::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:96:f1:4f:94:a3:bc:6b:fc:28:26:fb:42:82:c2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 29 11:55:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5f772d071c513c1e8ce5b9aa67f6891eef50bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:cf:c1:c5:6e:0f:9b:b6:e9:84:b6:e8:f7:
81:3c:56:7d:d0:7b:56:16:53:55:20:c0:5c:39:f4:
48:43:62:26:f8:ad:10:03:6d:d1:65:08:08:8e:37:
e9:68:ff:8b:be:50:19:5f:96:94:89:95:d9:f6:4c:
23:7e:51:f2:65:97:c2:06:7c:b1:1c:16:40:4f:78:
e6:7b:63:44:76:c1:25:6f:1c:51:8b:f5:d0:8d:e0:
b4:51:e7:d9:8e:89:5f:ff:69:35:b4:93:1d:05:82:
de:49:7f:f6:66:15:c3:af:d3:b9:f2:61:a4:e3:94:
24:76:7e:1e:7d:1b:ff:c1:0c:8d:3f:77:8e:85:d5:
e8:53:95:76:c7:04:a4:a6:2a:90:89:6c:5d:7b:41:
cd:eb:17:bd:22:67:bb:d7:9a:16:25:dc:89:e8:62:
c2:a3:45:2e:59:07:08:a3:06:68:a3:a8:bc:45:01:
67:e0:02:27:8a:3b:7e:68:cf:98:b2:ce:da:58:64:
63:15:c8:87:05:a5:2b:ec:6a:1f:f4:d2:2c:22:3a:
9f:d1:d4:a3:66:c6:c8:1f:61:84:a1:39:a9:8a:55:
08:6b:e5:21:71:be:85:86:de:77:7a:1a:ba:09:b0:
94:b4:70:89:04:74:2b:0e:2e:9a:4d:1c:30:44:b4:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F7:72:D0:71:C5:13:C1:E8:CE:5B:9A:A6:7F:68:91:EE:F5:0B:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.241.0-178.17.246.255
178.17.248.0/21
188.94.40.0-188.94.42.255
188.94.44.0-188.94.46.255
IPv6:
2a02:1648::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49375
Signature Algorithm: sha256WithRSAEncryption
a5:1a:00:95:83:d7:65:ae:5a:09:fb:24:9f:7c:a0:f8:fe:54:
ce:b8:6e:8e:86:ad:3f:c8:3f:52:31:38:2f:9f:d8:90:95:93:
e1:58:b9:48:67:79:5d:54:f7:41:1e:a8:12:43:e9:cd:5f:5e:
e4:7c:b8:30:a2:ce:d1:9f:60:ac:a8:a0:7f:6f:0e:16:55:a5:
41:4e:40:7c:65:a2:78:e0:5d:68:69:7d:d7:58:7d:63:38:38:
d0:23:23:ec:0f:9a:13:80:45:82:7c:e6:04:59:fb:1f:d4:9b:
92:5c:98:2d:b7:55:4c:c0:f0:02:18:9c:bc:ee:98:9a:0d:51:
a0:e6:3d:dc:da:0e:b0:1a:19:b9:48:f1:f5:1a:7b:bb:b3:68:
80:b8:16:63:f8:e5:27:0b:96:cd:12:32:ed:80:57:26:be:65:
9b:fb:e1:52:85:5d:88:2c:48:e3:49:88:25:d1:ca:fa:71:52:
ac:fc:07:5b:73:42:06:09:e5:d7:3a:a1:1a:7b:58:44:8a:a6:
68:2a:fc:70:1f:f4:b7:69:a9:6f:cc:ac:e4:4a:32:46:9c:90:
6c:89:8c:6d:4c:7f:93:bd:79:5b:c8:58:8c:ce:17:26:3e:4a:
e7:98:d0:28:3f:53:e5:9f:ef:f3:c5:df:d6:18:4e:88:be:2c:
d5:69:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:11:25 2026 by rpki-client