Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
File: HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer (raw, json)
Hash identifier: TeBVZ196BFli/yClEw8SWzlfr6nETQSfhZhT1IE14gU=
Subject key identifier: 1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7FF1A06CFECA072E0FE852088F2A77CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 18:21:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.254.224.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:a0:6c:fe:ca:07:2e:0f:e8:52:08:8f:2a:77:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 18:21:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:f4:4e:10:19:7a:3f:39:7d:d4:de:62:35:
85:8d:74:c2:bd:4e:28:f6:8c:14:d1:a3:42:9b:19:
32:06:f2:51:a7:dc:47:4c:38:c7:2d:60:65:97:98:
84:d1:fe:11:eb:97:52:5d:c4:5e:32:d7:c1:4b:42:
68:a9:e6:af:d2:66:ff:d6:df:85:af:32:b1:c2:f5:
be:43:60:04:25:19:da:18:5c:c8:67:27:b6:c5:ba:
81:44:a9:0a:45:e1:51:93:0e:31:6d:68:09:6e:bd:
e8:e7:93:3b:73:e0:a3:95:2f:81:13:7b:14:3a:41:
19:18:88:da:ee:79:12:b7:14:7d:38:4b:99:8e:b5:
b3:3f:fa:1f:7d:bd:38:9f:7b:a8:77:61:da:58:44:
0f:ab:61:02:53:1c:24:7d:3d:b2:d8:fb:e1:32:fa:
05:88:88:e9:87:cc:3c:53:13:86:3d:13:b6:ca:cc:
4b:60:65:49:eb:53:4d:85:a9:f1:e5:c6:82:1b:6a:
51:98:05:51:5f:ef:fa:19:0f:8c:fe:cd:c8:d5:76:
5e:c9:bf:77:ad:71:c5:26:00:13:1f:78:4c:a1:0f:
4b:33:f4:e0:f3:33:06:49:e5:17:24:ed:2c:eb:3b:
ca:86:67:ae:e4:bc:7c:be:46:4f:73:0f:cb:e5:28:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:a4:02:88:a9:64:af:69:31:50:7a:80:04:94:b7:8c:21:d3:
19:c2:17:7c:ec:c5:81:b4:ab:ce:8a:5f:96:3e:5d:00:41:49:
e7:39:c8:ae:d1:51:71:1d:73:c2:dc:93:10:44:84:fb:3b:cb:
ac:1e:49:34:c6:e4:2b:f5:b3:b5:71:4d:97:aa:cf:80:97:0d:
cc:d2:99:6d:02:92:b2:63:f2:9a:74:b5:a2:d6:c8:76:a8:6e:
9f:56:b4:34:be:f1:8a:55:e1:52:b9:91:24:ae:94:67:92:0e:
3f:46:b9:16:0f:79:b5:ec:b7:a2:5a:df:af:f8:b0:86:d9:ab:
bd:22:d5:e5:b9:fe:c4:21:5a:2b:44:c4:b0:24:27:02:f3:ea:
51:32:45:88:a8:fb:6d:1d:f3:2f:ef:ee:b7:f4:0b:8b:bb:58:
f7:38:df:6c:2b:6c:44:3b:f7:e0:23:f1:0c:ee:79:9d:c8:4e:
3b:f0:50:3f:8b:05:12:f1:9c:42:ef:d2:bf:2e:56:e8:f6:2b:
62:96:7f:b3:61:c7:b3:0a:a6:92:46:28:94:2f:f2:82:81:f8:
1f:4a:f9:7b:ca:8e:fb:88:e6:e3:f1:d1:0a:be:20:74:9d:c6:
b5:af:ee:47:26:9c:55:0f:00:96:6a:63:d0:1d:ce:7e:76:a3:
13:8f:65:22
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZt/8aBs/soHLg/oUgiPKnfPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTgyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDljMDcyZjJkYjNlZjFmMjYwNTA1YmJmYTBlZmVhMThjMjk3MGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mP0ThAZej85fdTeYjWFjXTCvU4o
9owU0aNCmxkyBvJRp9xHTDjHLWBll5iE0f4R65dSXcReMtfBS0Joqeav0mb/1t+F
rzKxwvW+Q2AEJRnaGFzIZye2xbqBRKkKReFRkw4xbWgJbr3o55M7c+CjlS+BE3sU
OkEZGIja7nkStxR9OEuZjrWzP/offb04n3uod2HaWEQPq2ECUxwkfT2y2PvhMvoF
iIjph8w8UxOGPRO2ysxLYGVJ61NNhanx5caCG2pRmAVRX+/6GQ+M/s3I1XZeyb93
rXHFJgATH3hMoQ9LM/Tg8zMGSeUXJO0s6zvKhmeu5Lx8vkZPcw/L5ShAVQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFB2cBy8ts+8fJgUFu/oO/qGMKXCxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2M1NTBl
My1mMDI0LTQ2YjgtODdlYy00NTBlMjRlMDg5MWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvYzU1MGUz
LWYwMjQtNDZiOC04N2VjLTQ1MGUyNGUwODkxZC8xL0had0hMeTJ6N3g4bUJRVzct
Zzctb1l3cGNMRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuf7gMA0GCSqGSIb3DQEBCwUAA4IBAQCnpAKI
qWSvaTFQeoAElLeMIdMZwhd87MWBtKvOil+WPl0AQUnnOciu0VFxHXPC3JMQRIT7
O8usHkk0xuQr9bO1cU2Xqs+Alw3M0pltApKyY/KadLWi1sh2qG6fVrQ0vvGKVeFS
uZEkrpRnkg4/RrkWD3m17LeiWt+v+LCG2au9ItXluf7EIVorRMSwJCcC8+pRMkWI
qPttHfMv7+639AuLu1j3ON9sK2xEO/fgI/EM7nmdyE478FA/iwUS8ZxC79K/Llbo
9itiln+zYcezCqaSRiiUL/KCgfgfSvl7yo77iObj8dEKviB0nca1r+5HJpxVDwCW
amPQHc5+dqMTj2Ui
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:50:54 2026 by rpki-client