Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
File: RHtl-fh6qPdA1aF6cub4vB5diI8.cer (raw, json)
Hash identifier: 0a3/WM3ji6VZrSmGGi+ijf7AxF0aO8v9/EEUFKt18uE=
Subject key identifier: 44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC7B121589D9061B21D1C8099398A90
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:17:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 29238
IP: 79.98.112.0/21
IP: 185.66.128.0/22
IP: 217.21.144.0/20
IP: 2a00:8ba0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:b1:21:58:9d:90:61:b2:1d:1c:80:99:39:8a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:3c:70:3e:46:68:55:0d:9d:23:fe:70:78:
d6:aa:64:ae:6c:89:1d:85:d0:6d:34:a9:91:d0:17:
67:ba:08:54:39:b5:c1:74:99:23:77:f4:c1:4d:25:
74:30:50:16:4a:b1:af:01:18:fe:41:28:05:a1:13:
cb:54:ef:11:fc:00:ad:44:ed:d5:de:10:64:f3:9c:
9f:6e:c3:b4:62:27:17:b9:2f:c9:b2:34:f6:82:d9:
5a:6a:4c:6b:92:60:1c:73:82:ef:76:2e:6c:d9:bd:
e2:76:bb:f2:06:43:97:97:94:35:c3:d4:d4:c4:49:
6b:c6:62:a9:45:99:a6:be:9c:22:79:9e:f9:41:26:
39:4b:7c:0d:4c:58:90:c3:50:a6:0b:b0:16:24:10:
c5:13:73:6d:e8:92:b2:5c:4d:a8:c5:06:14:6d:77:
6a:64:ab:10:49:d4:b2:14:4b:fe:48:e7:39:cb:b6:
f8:b6:68:c0:d2:1e:5c:d2:25:93:b7:2c:d7:37:64:
64:ba:75:e2:2e:96:38:55:d9:b3:0c:74:6d:3c:b9:
b2:99:c5:3b:94:27:bb:17:b3:7e:9c:8c:0f:dd:f3:
63:1d:9d:96:56:f7:a8:2c:77:58:e9:40:4d:2d:fd:
4c:ee:00:af:61:c0:9e:d5:e7:a8:11:11:6a:2e:00:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.112.0/21
185.66.128.0/22
217.21.144.0/20
IPv6:
2a00:8ba0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29238
Signature Algorithm: sha256WithRSAEncryption
29:09:e5:6c:55:da:f9:fd:87:e1:09:d3:12:1e:d1:70:fa:09:
3b:c1:12:a5:94:fc:57:c6:34:70:3c:8f:64:45:5e:b9:dd:f9:
8d:e1:2f:2f:9a:a6:19:ee:7f:bb:20:c3:d4:3c:73:e9:75:5f:
93:22:32:fb:9d:56:a5:e7:94:67:36:89:39:45:7f:3d:8c:a1:
02:5b:ef:01:30:33:a3:e2:41:18:9b:51:e6:57:bc:a5:00:0b:
13:ce:25:82:29:b5:21:e3:e8:4c:fd:72:4a:20:9e:76:42:d4:
48:cf:b3:60:40:15:08:fd:54:53:6e:1e:ba:fc:53:e4:90:62:
8b:ef:32:83:e6:ea:70:c1:e2:bb:67:a0:89:1e:8d:c4:28:af:
2f:76:5d:e1:a7:67:ae:61:75:fa:91:9c:23:cb:8f:ea:a9:bf:
65:1c:40:6e:9d:e7:b4:60:fb:99:e7:d6:f0:e1:5a:15:1f:b2:
62:7e:11:75:ac:b8:8c:1b:15:d9:b1:80:f1:96:8c:a3:49:31:
ea:fb:9b:cd:84:56:11:ce:f5:ae:ea:ce:45:b4:5d:5d:38:59:
9a:ff:e9:61:19:ce:5b:7f:84:bd:b4:15:b0:ef:5e:06:03:1b:
6d:3c:22:b5:45:26:b9:90:8f:ad:73:f5:25:2e:6c:ba:4f:9d:
2e:f3:af:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:48:53 2026 by rpki-client