Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
File: Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer (raw, json)
Hash identifier: 4zxhgisWtQBN4g9jfcNtOKUXUgweKYmOS8PPHF4MRJY=
Subject key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797EE7B96E7F26308334F04B42D9AC03
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.5.178.0/24
IP: 2001:67c:1818::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:e7:b9:6e:7f:26:30:83:34:f0:4b:42:d9:ac:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:61:89:d1:6a:92:66:ed:a5:bb:ab:58:6b:
43:c3:48:4a:a8:fe:47:2c:df:a6:d9:11:26:29:7e:
b0:99:18:5e:af:96:a5:e1:87:b0:3a:21:be:e9:cc:
d8:9b:4e:80:b7:a8:dc:30:8b:7c:4e:12:d6:d6:3e:
00:fc:ca:68:83:a2:0d:14:b5:b4:24:ee:54:89:4e:
05:24:c7:2e:4f:d4:f9:a4:dc:b7:64:8e:3a:83:30:
8b:bd:f3:ec:bd:76:00:6a:0c:41:d2:20:18:de:46:
0b:29:0a:80:e6:58:71:34:35:2d:4f:d5:2b:4e:21:
9a:1f:e1:13:1e:29:7b:02:b6:c9:e0:98:48:17:0b:
44:fc:00:70:83:70:d3:46:45:ea:23:ae:f4:42:9e:
b8:9e:63:bd:88:85:6e:b1:99:5b:b1:66:0a:e6:83:
1e:a0:3b:46:6d:ce:f5:33:cd:07:5b:b7:9e:08:26:
10:74:16:cc:96:6b:e2:a0:48:4d:a3:a0:22:56:e6:
dc:ad:bf:7b:bd:71:76:7c:72:b8:50:54:3c:8b:43:
f0:26:96:45:91:e3:79:41:de:39:15:3d:38:65:ba:
36:a5:27:cf:a2:b4:14:21:fd:85:97:d4:7b:59:f3:
c7:33:66:d7:5e:37:5b:bf:0c:ad:b1:a7:fe:33:61:
2b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.178.0/24
IPv6:
2001:67c:1818::/48
Signature Algorithm: sha256WithRSAEncryption
6f:41:25:95:4c:33:05:22:3a:43:85:59:46:ec:f3:74:a9:0d:
dc:7e:9d:35:5e:a3:4b:12:68:08:18:61:8d:f6:21:d2:5c:9f:
63:5b:45:97:29:57:93:af:ea:45:13:4d:27:8d:ee:39:e0:79:
f2:7e:c8:72:65:8e:ca:2f:be:15:b9:e9:35:e8:58:28:0c:af:
5e:ab:c0:78:a5:b4:7d:7f:ca:b5:ea:cb:3d:a8:cc:db:1d:cc:
5e:73:9b:44:8c:80:64:67:30:95:64:a7:af:43:39:c4:ba:51:
5a:e2:e6:d2:2b:10:ad:26:f3:06:3e:41:05:95:aa:bc:37:33:
37:c6:85:7b:b4:26:55:8d:73:9d:05:ae:4e:f0:16:a5:99:db:
f0:ba:09:fd:c5:49:00:8f:dd:60:68:09:64:2b:a3:a6:6a:65:
e1:f2:c8:54:94:a8:59:b5:de:1b:b5:fd:a0:bc:27:4d:d7:12:
ed:d9:03:18:18:8f:60:47:ab:e2:21:98:d5:8a:57:7b:75:f7:
e2:97:48:db:12:a9:39:26:90:24:79:0e:c5:dc:b4:61:92:9f:
cd:6b:c4:be:78:ce:ce:71:7b:f6:49:90:4f:03:fa:cd:4a:a1:
d4:14:5a:33:88:c8:ab:a0:5b:cf:ea:32:6f:30:dc:d4:79:af:
7d:89:09:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:08:22 2026 by rpki-client