Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
File: HitHgD4Tf9WetFz67ZNixDAxjt4.cer (raw, json)
Hash identifier: Jly7cMVFirdijiL9bWWO7zmX+533in9zhl2zz8l6aL0=
Subject key identifier: 1E:2B:47:80:3E:13:7F:D5:9E:B4:5C:FA:ED:93:62:C4:30:31:8E:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE2EFB688FCE04F2D71F7A0091BDC4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.0.234.0/24
IP: 2a13:9600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:2e:fb:68:8f:ce:04:f2:d7:1f:7a:00:91:bd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e2b47803e137fd59eb45cfaed9362c430318ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:2d:48:c1:75:03:bd:d9:26:47:0c:34:08:
14:cd:e9:ef:59:46:d8:2b:56:0c:b7:d6:a6:2e:03:
dd:88:6a:d9:75:67:87:a9:fb:ae:d9:4b:84:bc:5d:
ea:a1:bf:39:80:ea:a8:b0:a2:72:95:b7:25:fd:e9:
83:a1:c0:f8:6c:1d:43:5c:ff:e8:7c:67:92:e5:12:
62:8d:53:4e:d1:be:e0:34:d9:51:c2:2b:a3:70:f7:
a8:5c:c1:c1:eb:18:b7:ef:d3:6d:bb:6e:46:5f:37:
29:a0:e1:b2:2d:d5:b3:2c:bb:f6:46:b5:27:22:72:
90:b0:93:62:70:2e:32:f3:ef:ba:25:6e:a5:bc:b4:
8c:9c:b0:46:92:5b:9b:44:bd:2f:10:1e:3f:f7:d6:
df:3e:a9:96:64:0c:31:92:47:f9:a6:8f:3f:39:f3:
83:20:65:59:e0:bf:13:ee:c7:b1:d3:ef:0b:87:9b:
24:54:7e:bb:e8:b4:7a:4b:65:0b:bd:03:42:ed:76:
2c:e8:5d:18:37:4b:b7:7a:51:2e:62:69:9c:e5:47:
cb:e1:61:7a:eb:f2:dc:71:c5:cc:2d:e6:d2:3f:b3:
69:05:52:3a:ab:85:b8:8c:8f:0b:78:f0:99:25:82:
2c:3c:c0:81:ff:35:3a:12:c1:53:e6:5e:6f:e9:5d:
2b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2B:47:80:3E:13:7F:D5:9E:B4:5C:FA:ED:93:62:C4:30:31:8E:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.234.0/24
IPv6:
2a13:9600::/29
Signature Algorithm: sha256WithRSAEncryption
39:bd:a8:52:79:01:98:4f:84:89:3a:3d:f4:85:b3:21:48:f6:
8a:3f:a4:2d:62:49:da:12:03:05:92:d8:f8:19:83:c4:18:fe:
3f:ea:3f:5b:e8:3b:bd:33:ca:10:4d:fe:66:eb:b8:51:b7:41:
84:4e:91:35:7e:60:e3:6e:c8:07:a5:0b:5d:76:a8:62:85:80:
b5:d5:f3:fe:ce:80:fc:b4:1e:8f:65:88:ba:97:a7:c6:4a:86:
99:b6:af:83:3d:e5:c9:b3:2f:7b:72:ff:5b:38:c2:b5:92:37:
9f:dd:fd:b6:72:f4:18:15:f8:59:0e:ec:be:43:76:26:e0:7c:
2d:c0:aa:d0:4d:eb:58:31:29:a6:96:91:77:6a:39:d3:76:4b:
6d:93:94:f6:59:16:20:74:78:24:fb:3a:9e:53:60:97:d0:3b:
c5:98:ab:ab:72:70:06:63:97:79:f3:35:5e:f8:55:ad:a8:e7:
f7:7d:c3:70:ce:e4:5b:d0:d0:b9:8b:11:b5:f0:c9:72:47:14:
ac:dc:db:23:9a:78:55:ee:11:50:f0:a8:dd:5b:e8:ce:36:07:
45:9c:34:b6:16:81:b4:41:90:0e:f0:ba:07:5c:2c:79:7c:bc:
b5:7c:ef:dd:91:6f:3f:8e:bd:fc:82:0a:e0:0c:8b:02:cb:46:
67:f6:2a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:40 2026 by rpki-client