Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
File: HbvT4bzmclG1jybP0l_UAVZBZgM.cer (raw, json)
Hash identifier: HdZRRQG5TKZF0IFtG2HD23tCCFQS2OUyUkVR11lz23I=
Subject key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A2F03402B4D5154585A04EA0913126
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 41215
AS: 42028
AS: 42684
IP: 77.73.192.0/21
IP: 185.100.152.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:f0:34:02:b4:d5:15:45:85:a0:4e:a0:91:31:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:8f:bc:af:c0:15:8c:03:5f:b8:b9:9f:24:
78:e3:20:98:13:09:39:0a:c9:53:64:fe:ee:fe:02:
c8:7c:12:08:32:d9:f3:23:16:03:e0:ec:61:ea:dd:
27:c8:f9:92:d6:39:35:61:24:bc:37:9e:44:6a:a5:
ae:71:47:6b:25:4f:68:65:22:f9:00:48:de:d7:38:
3a:9e:ea:40:90:05:da:8b:5f:f6:65:86:f7:ba:8e:
74:d3:24:17:35:cf:25:39:a9:ca:b4:f7:89:a2:c7:
e8:1e:34:b1:ec:10:59:13:69:28:a1:58:b4:1e:fb:
41:ae:c6:34:be:fc:a2:c9:08:87:aa:7c:a3:aa:c5:
dd:f7:65:21:bd:c4:a3:d0:d2:67:0a:76:9f:a5:b1:
d1:fe:f9:a9:4d:62:c1:93:29:4e:59:da:3c:fa:dc:
9d:e6:0f:08:19:af:9e:8f:f1:af:f0:d7:7c:49:a0:
99:c5:3c:9c:dd:59:e1:d7:11:83:41:5b:7b:b0:3c:
da:d0:b8:fb:d1:b6:82:55:92:c0:30:2c:b7:5a:a3:
bd:6a:d7:a4:a6:1a:2b:a5:e6:8d:e7:a1:ef:34:dc:
25:ab:f6:21:f9:0a:bf:33:33:eb:0d:73:8e:7c:53:
d7:62:03:ec:03:3e:d2:2d:38:b3:fb:ed:39:30:b8:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.192.0/21
185.100.152.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41215
42028
42684
Signature Algorithm: sha256WithRSAEncryption
86:ff:88:49:fd:d7:e3:83:f3:18:ea:f4:93:3a:50:77:05:1d:
5b:5f:04:cf:30:e5:69:8c:e2:2d:85:28:49:4f:33:f8:aa:5b:
3e:b9:86:bf:58:58:4c:b9:b8:63:ca:22:67:c7:1f:2b:74:83:
bc:6e:c3:0a:59:19:c7:c1:7f:15:58:4a:cd:c9:4d:ed:f9:25:
de:e2:c3:9e:02:e2:ed:4b:e6:c2:ce:93:4a:83:76:70:20:af:
7a:76:d0:89:3e:9f:8f:d5:a1:02:7a:a1:58:68:23:b6:d7:c3:
8d:81:47:d9:35:10:30:21:fc:a0:4e:29:cf:2c:e7:f3:5a:90:
2a:2a:4b:28:11:bd:72:64:da:b3:48:93:e8:c6:d7:44:df:17:
87:bd:34:22:a3:c9:ff:1c:f6:70:9d:19:b1:a3:30:d1:0f:a3:
71:63:6f:b1:84:31:f5:ba:78:b5:e1:05:20:08:d8:9d:01:b6:
86:fc:62:15:85:23:b3:49:03:88:55:55:db:76:59:7e:eb:4a:
89:60:01:74:ad:46:85:24:b1:39:cb:75:9d:4e:16:9a:6d:bb:
c1:70:d6:8f:ff:4c:e1:23:ff:06:14:ab:55:78:24:79:35:97:
84:01:8f:ca:27:94:28:d5:80:c0:47:06:61:cb:09:61:37:d5:
0f:e7:88:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:00:21 2026 by rpki-client