Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
File: fHcuHibmwj9ArWZoyF_pUNoQY_w.cer (raw, json)
Hash identifier: mVf8mnJ9+ictONkGezCt64W+yszZ3grleVbUxJs2ufA=
Subject key identifier: 7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EDA8CC65583BF554ADDA1D6C4F8E1C85F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 18 Jun 2026 11:45:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.135.188.0/24
IP: 2a10:15c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:8c:c6:55:83:bf:55:4a:dd:a1:d6:c4:f8:e1:c8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 18 11:45:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:41:cb:60:e4:46:25:f8:5c:6a:bd:a3:19:
36:88:bc:bb:26:6e:f2:27:98:78:1d:c8:2c:02:66:
4e:3d:a2:69:f4:c4:f9:1a:e4:63:3a:9d:06:c1:7a:
47:1a:9f:00:65:3e:9a:e5:31:48:5f:83:fe:e3:83:
46:85:c6:e2:cf:7b:b0:5a:d9:81:49:5b:1d:b5:11:
5b:cd:4a:97:b4:ef:89:62:a1:0b:88:50:3e:30:2f:
29:bd:b8:27:34:7b:43:81:41:1e:54:df:98:c8:e9:
fd:85:bf:9f:5c:c6:31:a3:f7:d4:18:27:1f:18:41:
e0:a3:14:4e:72:c8:3a:2d:91:f8:ce:4e:6e:37:e3:
36:c8:62:14:6d:79:df:54:6e:67:84:43:d9:39:4e:
f5:92:a9:7b:da:7b:29:3f:4e:bb:15:24:a2:44:8e:
10:68:41:05:7a:7e:77:0c:5c:17:c8:9d:fa:03:cf:
df:bb:4e:9d:bd:3f:13:64:b0:e8:88:5e:a1:6a:9b:
9b:0d:51:15:e3:f3:d1:86:09:48:6b:af:3f:66:40:
a5:55:2d:e6:ee:65:4e:18:fa:a0:89:47:59:fc:ec:
3f:59:cd:a0:fd:9f:86:89:f5:91:6c:49:fa:5b:c4:
fe:6b:0b:d2:6e:d3:5e:e1:c0:aa:32:26:9c:a1:d2:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.188.0/24
IPv6:
2a10:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
ac:af:42:3a:59:46:6d:17:51:00:17:3e:4c:b3:fa:81:5e:6d:
10:a1:90:fe:7c:6b:89:a8:a4:4d:7d:b7:87:c8:c5:0f:33:30:
1e:1a:80:f4:a3:67:0a:45:95:c9:c4:bd:f0:42:52:eb:1b:fc:
ad:c2:45:91:c9:bc:40:0f:17:3c:69:76:62:c0:dc:a9:81:c8:
93:47:0a:fc:e0:f4:08:d8:49:dc:f4:c7:dc:1e:49:41:34:0a:
09:23:0c:87:91:62:38:c8:45:e1:c7:63:2b:da:e6:8e:26:8b:
2a:fa:c9:66:96:2d:98:cd:5a:d6:72:00:f1:07:62:84:ba:26:
96:2d:3d:13:9d:15:d2:f4:d1:c4:f3:f5:1f:40:7a:d7:01:e7:
c6:a3:4f:b3:8e:fd:ed:00:39:22:fa:2b:96:9c:f4:c1:3f:5a:
88:42:1d:e1:e1:3f:b6:08:07:8d:fe:01:86:65:ca:4d:32:52:
22:f7:39:a8:ac:e5:13:03:e7:f5:6c:9c:fe:e0:c7:2a:31:ee:
d7:c5:f4:68:f7:b3:04:ab:da:21:16:74:8f:c1:ff:65:22:33:
6a:b0:c1:3b:4e:2e:ee:ed:74:dd:2d:8e:60:16:b6:0d:2c:2b:
76:b6:b9:f1:28:fd:b7:d5:d8:74:c2:65:8e:63:7b:ae:be:03:
92:32:2f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:32:46 2026 by rpki-client