Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.cer (raw, json)
Hash identifier: dbm57o+EjBm56EYgvv4rum6DxGfbjwHRiHaDtF6mVPU=
Subject key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B35A25B44F3FCBCB6ECFEE8E79F6A0C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:17:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43500
AS: 50651
IP: 185.130.208.0/22
IP: 185.139.218.0/23
IP: 195.189.144.0/24
IP: 212.46.44.0/24
IP: 2a12:b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:a2:5b:44:f3:fc:bc:b6:ec:fe:e8:e7:9f:6a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:a3:06:7d:01:6c:2f:9b:ec:b5:e2:ee:6e:
92:a5:a7:6d:6e:23:dc:79:30:f0:54:f5:77:3d:f5:
33:88:b2:83:0e:1c:7a:ac:fd:ed:02:38:fc:33:ac:
ca:81:24:aa:8b:91:c1:c6:ba:25:58:96:63:18:cc:
f2:81:72:74:b0:25:f8:2e:5c:43:d4:77:72:bd:56:
dc:cc:29:54:e7:71:ed:f8:f8:22:65:55:2f:1f:29:
38:e4:21:14:8b:9c:5d:06:ac:fc:b5:0e:3d:e1:e5:
c1:c8:1d:4e:8a:be:e3:1f:57:56:da:ee:aa:06:87:
99:21:7b:2d:96:6f:b4:e9:bc:f0:e3:23:67:18:07:
15:ec:28:74:98:61:d8:67:5a:4d:d6:ce:5f:f7:29:
86:ac:69:fc:f3:32:d6:9e:c2:77:95:0d:d3:3b:18:
0d:75:75:27:65:b3:70:4a:80:8a:4d:87:bb:ab:72:
ae:71:5a:6a:08:3c:56:d9:aa:d1:d8:44:51:29:28:
ed:36:74:a9:58:ac:de:62:a7:e2:fa:03:e8:1a:d9:
9c:05:9d:81:9d:59:59:95:03:f8:5e:a8:79:8d:c4:
63:02:87:df:46:64:18:21:bb:d9:ce:e8:9b:76:c8:
3e:0c:cb:08:ff:a2:74:2d:93:2b:c3:1d:aa:5c:62:
c1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.208.0/22
185.139.218.0/23
195.189.144.0/24
212.46.44.0/24
IPv6:
2a12:b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43500
50651
Signature Algorithm: sha256WithRSAEncryption
67:21:0a:f5:df:e0:ef:b5:4d:83:91:82:33:99:e0:65:87:99:
52:e7:45:5b:00:f7:85:e9:17:d4:0d:39:75:1b:37:f2:37:c5:
3f:6f:67:8f:4f:14:19:b3:8e:c1:c7:14:82:f9:23:fa:b7:0c:
bf:76:16:4a:1d:11:94:70:a2:f6:eb:1c:fa:e1:33:f2:8d:e7:
d5:7c:cd:55:ef:67:23:3d:50:f2:bd:b1:28:51:54:4c:c2:7b:
5b:d2:4a:48:41:8e:df:c7:2d:4e:42:2d:3c:7c:dd:52:49:b0:
aa:67:7a:c0:74:df:0e:b3:98:16:43:59:46:2f:16:83:88:0c:
07:57:6c:3f:34:34:d2:b7:f0:f2:ae:03:7e:42:71:53:20:9b:
9e:91:be:ae:60:70:01:5e:f7:92:65:f6:1b:7b:36:98:2c:3f:
d7:20:fd:39:14:2e:c7:97:62:29:87:bd:d0:5b:1d:7f:17:a4:
c1:e7:e4:5c:76:a8:cb:30:08:76:d9:17:c1:f6:82:00:96:13:
80:4a:c5:a2:4e:7b:40:91:a8:79:d9:f9:00:81:81:a9:f1:ef:
5c:6b:4f:41:6e:63:5d:15:d0:a6:43:32:e5:09:86:a7:23:95:
c4:f2:cb:e1:80:89:c0:75:a9:ea:5b:a3:44:23:d0:84:15:98:
3a:5f:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:21:38 2026 by rpki-client