Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
File: HISp5A-Qddjq_PaKAkhPUpJAlWo.cer (raw, json)
Hash identifier: 2hP7zHAp7GVsPpCElHeVlYmq80iaZzGEX8AzUsyKiSE=
Subject key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C134DE953A00D06BB2DB56FB954D41F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:19:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39669
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:4d:e9:53:a0:0d:06:bb:2d:b5:6f:b9:54:d4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c84a9e40f9075d8eafcf68a02484f529240956a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6a:3e:38:20:46:33:5e:d6:1b:c2:58:19:10:
ad:a8:1b:d3:88:00:58:52:09:9d:93:8c:e4:1f:30:
13:a3:d4:26:92:1b:63:e5:57:d4:24:f6:55:67:ba:
0f:56:17:63:50:02:df:c3:15:4c:3f:76:b4:85:d6:
49:b9:c6:70:94:86:16:9e:c4:e0:05:77:df:7d:94:
77:cf:9b:2d:54:5e:fd:bd:5a:19:8b:53:7e:45:5b:
b5:e9:45:95:b6:ea:ed:a0:89:18:58:34:ea:de:57:
0d:29:27:d8:b5:02:b9:c9:b7:28:ad:14:f8:12:b8:
e9:d9:5b:2c:5b:4c:4f:87:14:7f:98:24:40:04:2f:
82:12:5d:7d:e7:ff:47:f6:93:0c:c2:fe:f0:6a:bd:
2b:da:87:e1:13:b6:34:ab:b9:37:2e:65:f4:9d:5a:
48:8c:c8:88:f1:17:dc:48:a7:48:cd:15:71:35:9d:
bd:8a:0c:67:de:86:f3:0e:70:41:f8:62:64:b6:1a:
b6:05:39:fb:67:df:b2:4d:c8:65:9f:39:fd:cc:a4:
5b:bc:10:82:3b:20:82:4c:4f:e9:e5:41:bd:2f:62:
fa:92:53:ba:7a:18:ec:3b:7e:66:1b:e0:3e:6b:68:
07:0a:d8:9a:28:24:72:45:c6:6e:24:0e:9f:1c:67:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39669
Signature Algorithm: sha256WithRSAEncryption
12:32:1e:e1:b2:d3:08:a3:2f:93:4b:03:f9:f2:f7:db:e9:bf:
a1:40:4d:59:cd:44:f5:3e:ea:5e:82:87:7f:43:13:69:85:a8:
32:a8:88:b4:7c:20:db:b5:07:ed:7c:3c:e0:27:4b:ae:a3:1e:
8f:41:a2:0b:4f:ec:cd:80:ac:06:e9:10:85:d4:5b:b1:ba:39:
e3:12:eb:15:e6:df:3e:e6:d1:14:99:1a:cd:29:75:ca:41:9e:
47:ef:49:a5:dd:c4:db:32:60:7d:9e:f8:f2:76:8d:e2:5b:db:
9f:1b:c6:f0:c0:3f:11:2e:28:c1:bb:1a:4e:f9:de:65:74:6b:
4c:70:b6:54:25:1d:38:74:d2:a6:c3:12:36:63:25:b7:31:80:
55:4f:18:d7:d5:16:28:27:d2:1f:f1:b0:dd:9e:62:b6:bd:61:
72:5a:0e:0c:08:38:41:95:c0:d5:8b:a2:f1:c1:73:8e:e6:9a:
8b:46:ed:2e:e1:ca:97:b4:d9:2d:82:b1:92:b8:76:52:cd:12:
c8:ee:7b:e9:d6:f3:6d:96:03:00:59:6b:fa:a3:9f:15:09:af:
46:bb:ce:22:d0:04:22:b6:9b:d0:a5:31:8f:47:9b:16:a3:c4:
a7:59:c3:64:ae:38:63:ba:20:91:32:2a:13:ff:49:32:50:78:
8d:7d:6a:03
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZt8E03pU6ANBrsttW+5VNQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzg0YTllNDBmOTA3NWQ4ZWFmY2Y2OGEwMjQ4NGY1MjkyNDA5NTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Wo+OCBGM17WG8JYGRCtqBvTiABY
Ugmdk4zkHzATo9Qmkhtj5VfUJPZVZ7oPVhdjUALfwxVMP3a0hdZJucZwlIYWnsTg
BXfffZR3z5stVF79vVoZi1N+RVu16UWVturtoIkYWDTq3lcNKSfYtQK5ybcorRT4
Erjp2VssW0xPhxR/mCRABC+CEl195/9H9pMMwv7war0r2ofhE7Y0q7k3LmX0nVpI
jMiI8RfcSKdIzRVxNZ29igxn3obzDnBB+GJkthq2BTn7Z9+yTchlnzn9zKRbvBCC
OyCCTE/p5UG9L2L6klO6ehjsO35mG+A+a2gHCtiaKCRyRcZuJA6fHGcrlQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFByEqeQPkHXY6vz2igJIT1KSQJVqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzBkYTFm
Zi05Y2Y5LTRhZDktODgzOS01YzNmYWYzNzM5N2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvMGRhMWZm
LTljZjktNGFkOS04ODM5LTVjM2ZhZjM3Mzk3YS8xL0hJU3A1QS1RZGRqcV9QYUtB
a2hQVXBKQWxXby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCa9TANBgkqhkiG9w0BAQsFAAOCAQEAEjIe4bLTCKMv
k0sD+fL32+m/oUBNWc1E9T7qXoKHf0MTaYWoMqiItHwg27UH7Xw84CdLrqMej0Gi
C0/szYCsBukQhdRbsbo54xLrFebfPubRFJkazSl1ykGeR+9Jpd3E2zJgfZ748naN
4lvbnxvG8MA/ES4owbsaTvneZXRrTHC2VCUdOHTSpsMSNmMltzGAVU8Y19UWKCfS
H/Gw3Z5itr1hcloODAg4QZXA1Yui8cFzjuaai0btLuHKl7TZLYKxkrh2Us0SyO57
6dbzbZYDAFlr+qOfFQmvRrvOItAEIrab0KUxj0ebFqPEp1nDZK44Y7ogkTIqE/9J
MlB4jX1qAw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:45:07 2026 by rpki-client