Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
File: hp2fc3396q0-lfhm6NMqZsT4oLI.cer (raw, json)
Hash identifier: zS1qPYwIlfGGI0dqLjumEr0QV05Q+opRteADMbruwpI=
Subject key identifier: 86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA81E710526BA632CCBECC70E48D9C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50364
IP: 77.83.76.0/22
IP: 2a09:7d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:81:e7:10:52:6b:a6:32:cc:be:cc:70:e4:8d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=869d9f737dfdeaad3e95f866e8d32a66c4f8a0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:b6:16:9b:12:c3:26:ed:58:73:e6:22:b4:
b5:1e:38:4c:d0:a8:bc:3a:d8:90:a3:1d:9b:43:f3:
a6:64:53:50:7a:92:b0:e6:41:eb:32:f6:d4:cb:6e:
e6:99:6a:56:3c:05:50:e6:b5:46:0e:8a:61:ff:f1:
ba:f7:a4:f3:2c:3c:d9:0e:1b:4b:53:f0:d6:1a:ae:
c9:74:a4:b8:74:dd:b0:7c:10:51:0d:90:55:b3:f5:
1c:c9:fa:21:5e:e7:13:41:1e:81:34:5b:6c:cc:6a:
b0:43:55:6b:04:7a:4c:07:82:44:bc:55:3e:3b:87:
44:c5:55:9f:4f:d3:56:c6:fe:b8:0b:46:d0:12:cc:
aa:d5:ca:16:2e:3f:4b:3c:ee:af:b0:95:4e:f5:63:
35:14:78:e3:de:51:47:8b:2c:1f:a3:6a:78:c2:57:
ab:ae:8d:33:d2:5f:a0:1d:fd:14:07:53:51:7c:40:
a9:3c:eb:82:f3:5a:0e:50:95:de:a8:51:de:8c:a1:
08:74:2a:0c:d5:7f:3b:24:cf:b4:17:6c:b8:7c:6b:
f5:ce:75:79:fb:e7:d3:0e:87:cd:8d:67:9d:6e:08:
6c:04:10:55:66:66:3c:a5:b4:10:97:d3:33:98:9b:
44:16:30:61:86:03:76:54:12:57:a0:5b:44:1e:08:
86:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.76.0/22
IPv6:
2a09:7d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50364
Signature Algorithm: sha256WithRSAEncryption
04:c9:7a:f3:34:0c:c7:08:10:73:a6:4c:16:fe:49:d4:92:9d:
da:eb:e6:f5:ce:9f:d1:f7:c5:d5:8d:18:82:18:9d:5d:d2:2f:
73:9f:a3:3f:cc:35:bb:b3:ff:32:05:10:8a:40:c1:cc:fe:c5:
42:18:f8:a7:aa:2f:fc:a2:6a:ec:54:36:f3:83:04:ec:db:15:
5d:8b:90:39:ff:7f:7b:33:15:7e:5d:40:41:f7:a5:dd:07:bc:
4a:05:04:78:a2:18:32:5b:5c:b1:fc:7a:b3:30:53:a3:ca:71:
e9:aa:4d:80:a5:69:06:25:70:2b:1e:be:7a:60:25:30:6a:db:
3c:3b:87:98:11:46:dd:59:e3:39:0f:dd:d9:c0:2c:16:ca:1b:
ac:03:9e:00:a2:b7:9b:70:e3:54:82:62:7f:79:3e:45:71:d6:
d4:29:f7:71:d3:53:6a:3c:8b:11:4f:27:f1:a4:41:35:27:bb:
e5:86:1e:d3:af:3c:00:88:c4:db:54:8c:c2:9e:ef:9a:47:51:
05:c5:a2:67:ba:2a:ac:16:a2:78:8e:56:a6:b2:a8:31:9c:9d:
1c:98:bf:75:88:03:5c:d0:02:ca:7b:81:a8:9d:9a:41:ff:6a:
1a:ba:9d:58:c2:e6:6b:ad:55:ff:9f:c2:02:a4:33:cc:2b:b4:
ea:aa:8e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:07 2026 by rpki-client