Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
File: HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer (raw, json)
Hash identifier: doyue9BYijrqB4tCQ9UnTNqz3A/kOJJaSQkUaTpPbvg=
Subject key identifier: 1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA66722C5FA14D23731DF3D32A0BD1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 109.205.136.0/22
IP: 185.128.60.0/22
IP: 185.237.136.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:66:72:2c:5f:a1:4d:23:73:1d:f3:d3:2a:0b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c30f78f69c4feda757bcf4255df05b315a17034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ee:af:f4:ee:c9:28:51:cf:2d:cd:c7:65:ac:
56:4f:b0:7c:c3:6a:49:8a:06:2b:dd:aa:33:66:2a:
ee:f9:a9:a3:b1:04:fb:c6:cd:e7:8a:0d:4e:9a:2d:
e7:14:da:49:0b:7f:0c:44:2f:80:e0:e9:79:2b:34:
69:0c:40:16:48:45:a5:9a:12:29:25:a4:9b:45:f1:
3b:d4:9b:ea:fc:29:55:69:00:6f:21:38:3e:ec:30:
dd:ac:1d:b9:cf:5a:ae:5f:50:ea:39:a4:8f:35:a6:
6a:63:d5:97:f4:a5:81:6f:92:a8:c4:9f:76:99:24:
19:86:fe:7c:26:6c:fa:46:aa:ed:5b:f0:be:a7:e2:
80:75:e4:21:bf:2c:7f:39:ff:ed:1b:03:dc:b5:c2:
89:0f:2b:fc:c2:0a:8b:11:5a:fa:63:1f:e0:bc:d9:
0e:1a:e1:0a:3d:c4:d2:a5:c6:69:64:cf:64:36:b4:
60:c3:b3:a9:60:ce:4d:5d:33:d2:2b:1b:63:dd:1e:
fb:05:be:5e:7c:de:9b:b2:9d:28:3b:5a:17:e0:26:
22:a7:b7:3a:b2:72:e7:8b:18:ad:18:96:f9:44:29:
11:5c:b3:ac:e1:7b:f9:70:d1:9b:fb:ba:eb:83:81:
e8:f8:dd:94:46:7d:73:9c:3f:c3:a8:26:81:5f:bf:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.136.0/22
185.128.60.0/22
185.237.136.0/22
Signature Algorithm: sha256WithRSAEncryption
21:b4:6f:b9:15:d8:f2:00:ea:cf:1c:52:8c:c4:89:2c:6e:04:
a4:75:23:12:5c:7d:cc:dc:4a:a0:03:2a:42:47:4d:50:09:9b:
e9:0e:e4:21:c9:80:63:34:48:54:1f:1a:ae:fb:31:81:dc:00:
8b:cb:8c:1c:eb:c3:b1:bd:97:3c:4c:4a:6b:f8:f1:1a:1c:d4:
d3:55:c9:82:5c:3c:41:33:1d:e5:33:c8:0f:7f:84:c6:00:f8:
9f:19:0b:c6:c4:73:9c:8b:52:b5:34:45:b1:91:c7:7a:35:d3:
21:b1:c5:8e:dd:85:08:3e:9c:81:7f:4b:28:b1:90:ca:7e:8d:
4f:d4:54:25:70:48:05:dc:2e:30:88:05:e6:e0:a8:94:85:c1:
7e:e0:23:b4:00:7a:72:aa:65:a2:b6:27:15:08:63:df:12:1c:
97:4a:c9:cd:2e:e4:82:35:10:ab:94:25:b5:7c:40:8d:4d:25:
f9:bf:99:79:44:53:e0:78:2c:10:ca:53:d4:f0:c1:ae:96:7d:
ff:74:a8:1b:4d:2f:34:e3:41:cc:e4:e5:b3:f3:67:91:3f:9b:
c1:f2:6e:a4:e1:fd:b3:2d:a0:1e:8a:50:40:fe:6d:79:f2:85:
c8:0b:fd:ff:1a:5d:81:4f:32:46:c4:12:55:a3:1d:ec:60:9d:
78:d9:80:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:16 2026 by rpki-client