Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
File: HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer (raw, json)
Hash identifier: k/Vl2qZ0MvpdsoQ17Y0Qq/yG+mYjPN8YUqwEf1P9CjU=
Subject key identifier: 1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F1472BFF21DD5E07EC4D3CEAA377D6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:20:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62138
IP: 185.45.20.0/22
IP: 2a01:79a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:72:bf:f2:1d:d5:e0:7e:c4:d3:ce:aa:37:7d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:20:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cfb6df93375a06c5682c057c0fd2a7306218a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:85:a0:ce:c3:18:99:25:16:02:2b:48:90:
f3:80:1e:ec:65:69:33:f5:e3:02:82:fe:a5:e2:01:
9f:4b:ba:bc:dc:07:8b:12:d0:b4:d6:f7:53:c1:75:
d0:ea:df:e8:1c:9d:cf:2a:a5:e0:8e:8b:ee:65:de:
a5:e3:00:cc:60:8b:37:9a:3b:bc:79:69:01:36:3a:
1a:ea:be:b5:57:cd:89:3e:6d:6d:cd:60:cc:1b:00:
d7:de:88:2f:43:ee:c6:e9:cd:9e:37:89:4d:f8:0a:
2b:11:39:c0:da:28:57:ef:32:f7:3e:00:c9:bb:0b:
c2:67:30:18:b9:0a:58:43:64:8f:23:f4:43:7d:0d:
ed:28:5d:d5:c9:9e:ac:3c:6d:14:2b:c3:67:e7:ce:
65:d1:1e:60:2d:fd:65:2d:bc:ff:15:91:f6:f2:3a:
73:c9:3f:c3:05:05:a7:99:dd:c9:c4:c1:40:5d:a1:
83:db:98:b9:2b:00:35:03:c3:9b:b0:61:0c:48:e5:
de:7d:bc:42:9b:53:8e:02:34:e7:55:75:11:d9:c2:
30:6c:d6:14:8b:9a:d6:1b:c7:86:44:ae:9c:c9:ad:
0d:82:4a:b3:76:73:1b:d9:4a:7f:ef:83:de:52:07:
7a:b5:72:cd:82:2d:61:61:b5:af:a3:c6:98:89:bf:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.20.0/22
IPv6:
2a01:79a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62138
Signature Algorithm: sha256WithRSAEncryption
99:14:74:ca:e7:f8:e8:e4:41:e9:18:86:d9:9c:e1:7d:3f:ac:
2c:55:c6:56:80:4b:5b:ed:80:19:9b:ca:9a:93:c3:c4:3d:02:
c9:66:6a:0e:50:67:f7:0b:c7:56:8c:b1:44:d5:f0:49:8f:1b:
da:03:d0:23:46:d8:e2:5a:ef:e5:6c:a4:92:b6:1b:e8:68:61:
b2:d0:4b:43:6a:3c:35:79:f7:d4:0c:b9:05:22:34:ae:44:d9:
36:d9:e7:1d:d8:f6:1d:00:70:81:df:bb:70:8e:ab:76:ff:25:
f5:53:cf:5c:15:34:1b:d8:6c:bc:2e:82:bc:6d:78:24:ea:76:
55:58:f8:4f:e5:71:cc:5f:ab:ff:82:4c:50:07:b6:8a:f6:c6:
93:90:e7:d3:57:71:45:87:71:00:a7:0e:79:4f:eb:86:59:50:
bc:ba:87:67:52:8d:28:85:8e:75:e9:72:53:24:da:78:28:80:
1e:5c:b0:0f:1f:09:fc:89:29:28:d8:1d:29:f0:e7:4a:a9:a7:
fa:22:2b:5e:d3:9e:61:5d:01:cf:f0:87:2c:15:89:90:a3:16:
01:ec:27:1f:91:85:a8:cc:35:62:cd:c8:11:f2:1a:4f:85:b8:
04:f8:8d:e4:d3:16:6c:e5:34:ca:ad:53:fc:5a:e0:ef:37:bb:
b0:ec:e2:32
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt/FHK/8h3V4H7E086qN31rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTQyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2ZiNmRmOTMzNzVhMDZjNTY4MmMwNTdjMGZkMmE3MzA2MjE4YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaqFoM7DGJklFgIrSJDzgB7sZWkz
9eMCgv6l4gGfS7q83AeLEtC01vdTwXXQ6t/oHJ3PKqXgjovuZd6l4wDMYIs3mju8
eWkBNjoa6r61V82JPm1tzWDMGwDX3ogvQ+7G6c2eN4lN+AorETnA2ihX7zL3PgDJ
uwvCZzAYuQpYQ2SPI/RDfQ3tKF3VyZ6sPG0UK8Nn585l0R5gLf1lLbz/FZH28jpz
yT/DBQWnmd3JxMFAXaGD25i5KwA1A8ObsGEMSOXefbxCm1OOAjTnVXUR2cIwbNYU
i5rWG8eGRK6cya0NgkqzdnMb2Up/74PeUgd6tXLNgi1hYbWvo8aYib8cVQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFBz7bfkzdaBsVoLAV8D9KnMGIYpUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2ZiYWRm
Zi03NWQ3LTRjYmEtOTczNS02NmVjMmVhZjY0NmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvZmJhZGZm
LTc1ZDctNGNiYS05NzM1LTY2ZWMyZWFmNjQ2Zi8xL0hQdHQtVE4xb0d4V2dzQlh3
UDBxY3dZaGlsUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuS0UMA0EAgACMAcDBQAqAXmgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDyujANBgkqhkiG9w0BAQsFAAOCAQEAmRR0yuf46ORB
6RiG2ZzhfT+sLFXGVoBLW+2AGZvKmpPDxD0CyWZqDlBn9wvHVoyxRNXwSY8b2gPQ
I0bY4lrv5WykkrYb6GhhstBLQ2o8NXn31Ay5BSI0rkTZNtnnHdj2HQBwgd+7cI6r
dv8l9VPPXBU0G9hsvC6CvG14JOp2VVj4T+VxzF+r/4JMUAe2ivbGk5Dn01dxRYdx
AKcOeU/rhllQvLqHZ1KNKIWOdelyUyTaeCiAHlywDx8J/IkpKNgdKfDnSqmn+iIr
XtOeYV0Bz/CHLBWJkKMWAewnH5GFqMw1Ys3IEfIaT4W4BPiN5NMWbOU0yq1T/Frg
7ze7sOziMg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:05:52 2026 by rpki-client