Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/HCjtVcp4H61yd6i_ghgD-y_DgeM.cer
File: HCjtVcp4H61yd6i_ghgD-y_DgeM.cer (raw, json)
Hash identifier: AB6iXGSkE7Z0hsFuJMsDxmNimKO/v18WN8JYuTBvNSc=
Subject key identifier: 1C:28:ED:55:CA:78:1F:AD:72:77:A8:BF:82:18:03:FB:2F:C3:81:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FF633E92A087412244EC6176F0797537D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/HCjtVcp4H61yd6i_ghgD-y_DgeM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 12 Aug 2026 13:40:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.196.228.0/22
IP: 185.243.252.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:33:e9:2a:08:74:12:24:4e:c6:17:6f:07:97:53:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 12 13:40:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c28ed55ca781fad7277a8bf821803fb2fc381e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:da:fc:65:78:35:77:68:50:4d:34:ef:a0:
1a:26:da:f6:c8:bc:3b:59:b1:5e:fc:4e:51:e9:03:
81:b4:51:35:ac:e4:70:60:c0:c0:f9:d1:b9:ef:f8:
36:3d:b3:15:02:63:8e:60:2f:23:c7:12:32:96:e2:
76:fd:8e:0a:93:fa:e6:04:86:d2:86:ea:51:4d:83:
86:a5:df:0b:56:98:fc:0c:44:38:e6:4c:95:e4:28:
f7:2b:37:21:79:ef:d6:63:61:98:f5:33:88:f2:b3:
c2:60:e4:f5:1c:af:01:7e:9e:94:48:3e:8d:a1:22:
1b:05:1d:53:45:dc:2c:73:9a:e7:6a:c9:cc:14:3a:
c2:6d:29:66:11:a9:92:98:1d:81:b9:87:cf:0e:13:
c2:1f:c9:0a:9a:87:c5:99:01:9e:f4:4d:af:37:ac:
2d:b2:30:1f:d3:17:9b:1e:c1:58:9a:97:ec:d1:36:
c2:08:67:32:75:61:a7:76:70:00:d3:b0:a9:ee:87:
61:c9:73:bb:d2:49:96:48:e5:c4:35:36:d0:1c:0e:
26:3d:db:c0:39:f8:7d:51:26:d5:d5:63:1f:42:af:
23:3f:4f:70:cf:ec:c1:5d:85:3e:85:87:ba:10:cf:
20:36:9c:fa:83:ac:67:6b:3d:54:ea:ad:51:0a:8a:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:28:ED:55:CA:78:1F:AD:72:77:A8:BF:82:18:03:FB:2F:C3:81:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/HCjtVcp4H61yd6i_ghgD-y_DgeM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.228.0/22
185.243.252.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:7d:c2:0b:04:06:60:91:5f:37:59:2e:3b:d9:7a:4d:e3:5e:
13:37:28:97:ac:8e:4d:e4:10:8a:6d:4c:1c:e2:09:68:c3:46:
14:dd:3f:28:9e:1f:98:f9:7e:70:a8:37:81:d1:60:8a:28:63:
e3:0e:82:83:60:ee:c4:14:cf:78:30:1a:e0:d7:00:d3:01:ad:
c1:fb:49:61:cd:6b:29:97:0c:2d:a2:06:ab:cf:3d:68:f0:65:
b8:50:9c:24:d2:c0:63:67:71:f9:e1:72:2e:44:3a:4d:97:73:
0b:5d:70:d9:af:8a:d4:b8:76:51:92:83:59:45:d5:62:98:3d:
bb:0b:aa:d0:f4:ce:3a:0e:0e:bb:d0:20:a8:0e:03:8b:8d:6d:
cd:d1:42:df:d5:ea:75:b4:7e:e2:cd:8f:a9:56:e9:b1:0d:ba:
03:46:0c:22:e8:54:e3:80:38:66:75:b4:bd:24:08:e1:57:34:
51:e8:e7:a1:cd:71:e0:9d:90:95:38:86:6d:37:3b:9c:71:9f:
59:4e:eb:00:a2:a8:68:ab:a6:fb:de:21:61:85:4e:76:0a:93:
da:ed:e4:b0:53:24:2c:2d:ac:e2:ca:15:d2:9c:65:32:02:ea:
33:05:f6:a1:9f:73:0c:59:4a:87:30:1c:1f:20:9f:8f:9c:1e:
ea:c3:c0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:13:37 2026 by rpki-client