Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
File: THkVQTlO1-dpwf2JlVwfKBi0RbI.cer (raw, json)
Hash identifier: fRFnwlRntwdFiwq0qBol2ofJz4EYu/RtHeXpoQ/ALOc=
Subject key identifier: 4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAD05AF34309E81FFAD849E058FD60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.153.84.0/22
IP: 2a05:b000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:d0:5a:f3:43:09:e8:1f:fa:d8:49:e0:58:fd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c791541394ed7e769c1fd89955c1f2818b445b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:1d:fe:4f:0e:28:44:04:c8:92:eb:c9:35:
61:b8:04:67:5d:6e:11:7e:55:f3:2f:d1:75:71:10:
cb:2d:de:fb:b0:20:cb:39:e6:d0:4b:49:7d:6f:28:
0a:d5:64:5b:0e:62:13:ab:21:81:d4:1f:25:b9:c9:
fa:bd:d6:54:67:02:ca:ba:a2:b5:e2:df:69:0c:fc:
3f:ab:fd:2f:ac:01:da:7f:bb:3d:c5:10:4b:2b:32:
a6:4f:1b:36:7b:cc:3d:96:df:cc:27:e7:ec:df:9d:
5e:df:67:09:37:6b:b4:51:a8:c5:84:21:6e:cc:bd:
e1:1e:c8:f7:87:2a:4d:ac:0f:10:f9:b3:07:73:ee:
48:fb:38:a7:cf:8e:42:ee:51:d1:7e:cc:7b:a3:62:
b3:57:eb:72:0d:9d:7d:97:38:8d:fd:38:79:78:19:
b2:20:d2:20:1a:1a:bf:e2:9b:54:89:a3:04:bc:71:
e6:a3:e6:3e:4d:3b:85:42:8f:2d:9c:c0:9a:49:26:
a8:5b:96:ff:15:96:08:53:5d:3a:c0:20:df:a0:eb:
fa:a5:fe:57:33:fc:48:d0:55:a2:4c:a1:f9:ca:8f:
75:82:76:fa:e1:99:2a:0e:ae:35:b8:75:d2:41:4c:
37:a6:2a:6b:0c:29:9c:e3:63:46:bb:87:28:5f:aa:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.84.0/22
IPv6:
2a05:b000::/29
Signature Algorithm: sha256WithRSAEncryption
52:c2:e6:a8:25:96:e1:b4:f8:71:2a:99:37:39:a3:27:5d:49:
51:ac:89:c9:b7:dc:b0:26:cb:16:d0:2a:de:42:97:ef:bd:54:
3e:42:69:44:a8:63:32:ca:22:a4:7b:61:1b:91:97:0e:df:fd:
fc:31:6d:a0:a4:a1:26:86:ed:54:18:cd:c0:0f:09:f7:a1:9e:
9c:5a:90:b0:95:e4:76:d8:96:d5:23:f6:b9:4a:7e:e9:5f:9a:
0f:1f:be:05:59:00:8e:1d:eb:a4:20:18:75:71:d6:9d:27:7f:
0d:83:70:a6:53:f0:9b:02:e4:e9:3b:a0:0a:2f:44:a5:59:07:
c4:da:d3:dd:cb:e7:a6:d3:38:88:d6:10:a1:8b:de:62:61:a2:
bf:bc:da:7a:f9:e3:1e:a9:28:7d:41:7c:a3:3b:7a:49:f9:3e:
0c:16:87:a9:45:92:13:ae:6a:0d:d3:db:e7:09:0a:df:81:d4:
2d:a7:f9:27:23:a3:54:0e:cb:e9:af:8e:18:11:90:c7:da:51:
99:30:bf:25:6d:7e:b2:a7:ad:d3:04:20:a9:52:e8:6c:78:e9:
fb:13:c8:4f:57:b9:25:3a:b1:70:bb:1c:35:14:be:9d:83:fc:
44:af:ad:d8:ba:39:fb:2c:a9:5e:80:8d:f7:a3:ac:f3:0a:75:
40:f8:bf:7b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZ8Y+tBa80MJ6B/62EngWP1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yzc5MTU0MTM5NGVkN2U3NjljMWZkODk5NTVjMWYyODE4YjQ0NWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrQd/k8OKEQEyJLryTVhuARnXW4R
flXzL9F1cRDLLd77sCDLOebQS0l9bygK1WRbDmITqyGB1B8lucn6vdZUZwLKuqK1
4t9pDPw/q/0vrAHaf7s9xRBLKzKmTxs2e8w9lt/MJ+fs351e32cJN2u0UajFhCFu
zL3hHsj3hypNrA8Q+bMHc+5I+zinz45C7lHRfsx7o2KzV+tyDZ19lziN/Th5eBmy
INIgGhq/4ptUiaMEvHHmo+Y+TTuFQo8tnMCaSSaoW5b/FZYIU106wCDfoOv6pf5X
M/xI0FWiTKH5yo91gnb64ZkqDq41uHXSQUw3piprDCmc42NGu4coX6r/HQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFEx5FUE5TtfnacH9iZVcHygYtEWyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiLzQ2NjEx
OS04NzNmLTRjZmQtOTFhNi1iMWUzMTNkNzk4OTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvNDY2MTE5
LTg3M2YtNGNmZC05MWE2LWIxZTMxM2Q3OTg5My8xL1RIa1ZRVGxPMS1kcHdmMkps
VndmS0JpMFJiSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLZlUMA0EAgACMAcDBQMqBbAAMA0GCSqGSIb3
DQEBCwUAA4IBAQBSwuaoJZbhtPhxKpk3OaMnXUlRrInJt9ywJssW0CreQpfvvVQ+
QmlEqGMyyiKke2EbkZcO3/38MW2gpKEmhu1UGM3ADwn3oZ6cWpCwleR22JbVI/a5
Sn7pX5oPH74FWQCOHeukIBh1cdadJ38Ng3CmU/CbAuTpO6AKL0SlWQfE2tPdy+em
0ziI1hChi95iYaK/vNp6+eMeqSh9QXyjO3pJ+T4MFoepRZITrmoN09vnCQrfgdQt
p/knI6NUDsvpr44YEZDH2lGZML8lbX6yp63TBCCpUuhseOn7E8hPV7klOrFwuxw1
FL6dg/xEr63Yujn7LKlegI33o6zzCnVA+L97
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:49:46 2026 by rpki-client