Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
File: HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer (raw, json)
Hash identifier: y0e2sn4/iPmkkV543lijAfybHHaLZwIK65gOzc2IFFw=
Subject key identifier: 1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F8405CF869F5797165D57506B668A0474
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Jul 2026 09:33:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.254.224.0/22
IP: 2a05:1180::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:05:cf:86:9f:57:97:16:5d:57:50:6b:66:8a:04:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 21 09:33:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:f4:4e:10:19:7a:3f:39:7d:d4:de:62:35:
85:8d:74:c2:bd:4e:28:f6:8c:14:d1:a3:42:9b:19:
32:06:f2:51:a7:dc:47:4c:38:c7:2d:60:65:97:98:
84:d1:fe:11:eb:97:52:5d:c4:5e:32:d7:c1:4b:42:
68:a9:e6:af:d2:66:ff:d6:df:85:af:32:b1:c2:f5:
be:43:60:04:25:19:da:18:5c:c8:67:27:b6:c5:ba:
81:44:a9:0a:45:e1:51:93:0e:31:6d:68:09:6e:bd:
e8:e7:93:3b:73:e0:a3:95:2f:81:13:7b:14:3a:41:
19:18:88:da:ee:79:12:b7:14:7d:38:4b:99:8e:b5:
b3:3f:fa:1f:7d:bd:38:9f:7b:a8:77:61:da:58:44:
0f:ab:61:02:53:1c:24:7d:3d:b2:d8:fb:e1:32:fa:
05:88:88:e9:87:cc:3c:53:13:86:3d:13:b6:ca:cc:
4b:60:65:49:eb:53:4d:85:a9:f1:e5:c6:82:1b:6a:
51:98:05:51:5f:ef:fa:19:0f:8c:fe:cd:c8:d5:76:
5e:c9:bf:77:ad:71:c5:26:00:13:1f:78:4c:a1:0f:
4b:33:f4:e0:f3:33:06:49:e5:17:24:ed:2c:eb:3b:
ca:86:67:ae:e4:bc:7c:be:46:4f:73:0f:cb:e5:28:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.224.0/22
IPv6:
2a05:1180::/32
Signature Algorithm: sha256WithRSAEncryption
28:d1:80:ae:97:a6:7d:d9:71:ca:4c:93:02:19:eb:fe:7b:85:
b2:59:e5:41:9c:21:52:8a:29:d7:69:f6:eb:f2:e8:6c:23:d2:
05:b2:d2:b3:f7:e2:c6:60:f4:e1:39:e6:5c:9a:63:a2:7b:1a:
67:62:81:b6:2f:07:d4:aa:72:d4:24:5d:99:d8:50:c1:0b:d9:
41:45:02:a0:10:3c:97:c9:15:df:ad:51:87:48:96:21:1b:e3:
fb:3e:23:42:07:2d:fc:84:eb:b5:cc:3f:50:81:b3:84:2b:e0:
aa:15:d8:1d:d7:fb:f0:95:e9:a6:20:83:0f:a3:62:a9:14:b2:
aa:af:1f:ff:47:0b:ca:7b:b0:1c:7d:71:6d:e2:7d:ab:f6:38:
d8:9f:9d:6b:9c:22:04:de:ad:de:00:76:da:8b:5d:73:24:5a:
ea:f8:37:49:de:bd:6f:e1:a0:00:f4:78:41:3d:43:a1:ef:3b:
1d:07:d0:16:bb:02:df:eb:40:c7:75:f1:61:be:86:54:e1:88:
3b:12:58:68:d0:6f:d4:03:8d:71:e7:f3:25:34:41:fb:59:47:
41:92:97:4d:35:df:f1:6e:c0:61:e6:91:e4:ef:59:a1:94:60:
b9:8a:c7:98:af:17:2f:7f:33:10:94:96:54:7b:a7:da:dc:7c:
94:31:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:38:37 2026 by rpki-client