Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
File: HgKySJ9HE5YtEFESslJ264HxrJA.cer (raw, json)
Hash identifier: yWGujfdbTud0OGWJ1rltySKi0ptH4NesC6CknHlOYas=
Subject key identifier: 1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5BF99FA7E6CE1FDFAB891F6F297AD1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:18:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 85.208.64.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:f9:9f:a7:e6:ce:1f:df:ab:89:1f:6f:29:7a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e02b2489f4713962d105112b25276eb81f1ac90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:7e:cb:b2:1b:4e:fc:72:0b:43:8f:f4:53:
c9:a5:4a:b2:7c:e5:cd:4a:50:cd:e6:48:e5:2e:de:
df:cf:2a:58:be:0b:f9:ce:b0:11:a1:ba:f5:62:6f:
69:66:4a:1a:27:1a:6c:df:2b:d5:f2:a4:2a:2f:bc:
d8:f3:01:44:27:a7:c0:96:af:8c:46:5d:43:66:a6:
43:5b:73:0a:8f:bc:08:4d:d2:5f:a8:08:12:22:6e:
b4:4e:0a:26:ed:33:49:c1:19:84:c0:62:13:e4:03:
d5:55:63:98:7b:84:c9:0f:fe:5a:65:ce:60:17:53:
cf:1c:6e:48:b5:5c:8e:0a:c2:e1:cc:6a:ac:72:bb:
ac:9a:23:0a:b0:34:c1:22:44:ae:61:37:3c:f4:c3:
66:58:2d:8a:a4:73:28:b5:b6:5d:17:cb:0d:30:42:
9d:dc:51:ea:c5:2c:e4:5f:13:c9:15:9a:cf:1c:2c:
7d:7f:4d:33:8a:ca:11:c0:67:d3:b9:27:ad:7c:e3:
ca:8b:7b:cc:3c:33:52:a9:f4:8a:38:7e:26:3c:5e:
8d:1c:83:a1:21:fd:d9:b6:1c:6e:00:3f:69:64:65:
82:1e:e5:5f:95:64:9d:5e:dc:8c:eb:85:fc:0e:74:
39:43:23:21:df:41:b0:3e:f3:3a:4b:fc:3c:98:67:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.64.0/22
Signature Algorithm: sha256WithRSAEncryption
72:79:cd:a7:d4:ee:8f:6a:c6:4c:c3:21:e5:66:79:2f:8e:8f:
3e:6a:42:63:0b:25:33:d9:c2:74:a1:c5:e3:55:50:0d:b1:8f:
e5:64:bf:09:94:57:08:d2:27:ef:3c:c3:a5:4b:8b:31:c3:2e:
34:3a:df:74:91:0e:25:9e:56:16:ac:7d:00:17:21:42:23:1c:
72:cd:27:f7:14:2b:47:4e:33:db:c5:b8:74:ba:a5:90:fe:3f:
86:66:b4:cc:d0:62:e1:a3:53:bd:66:05:ce:6a:6c:59:13:a0:
65:6b:3d:7a:0d:f2:d6:e9:5d:f4:45:2a:3a:7f:0a:2a:fe:59:
00:1b:c2:2c:e2:ba:ed:b0:e9:6b:b9:c7:c1:3e:30:dc:19:7d:
99:d2:13:6c:8b:bb:4a:df:60:9d:bf:59:73:8e:36:63:f7:0e:
1e:17:47:5f:0a:14:0e:3b:9c:a1:6e:c3:d3:e7:74:2d:e7:6b:
c4:48:cf:14:3a:df:33:3e:2c:95:dc:d8:65:d5:77:1f:46:f8:
6a:fc:16:e2:cb:29:e5:ff:8c:b7:4c:43:ed:aa:07:8c:84:f4:
0e:7c:17:1d:81:f9:94:22:cc:47:02:c4:74:e9:2f:1e:9c:b9:
99:54:b1:26:f1:0a:96:39:3d:4f:d6:55:58:76:14:b3:41:9e:
9d:e1:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:25:31 2026 by rpki-client