Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
File: hwNNK1ky3RSR3n__McfYOvcyBuI.cer (raw, json)
Hash identifier: Amzo+L/eh42OMAETOTRY+LYEmIu5hnU75wb+/ivcJdg=
Subject key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F137F2F8DEA11CDE4227DC2F587E7DA39
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 29 Jun 2026 13:08:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216471
AS: 219321
IP: 193.36.94.0/24
IP: 2a13:aa40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:7f:2f:8d:ea:11:cd:e4:22:7d:c2:f5:87:e7:da:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 29 13:08:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:a1:28:0f:73:f1:03:16:72:7e:22:68:74:
73:6a:2b:ce:10:6f:c7:8a:3c:7b:b9:b3:91:39:36:
bd:d2:57:a4:b4:24:3c:87:4e:3d:f4:84:30:97:65:
01:c7:bd:05:8e:8b:6c:d0:7c:87:6f:6f:d4:f1:63:
33:67:43:37:f4:5a:a4:c0:4b:16:04:bc:e6:84:fd:
1a:b2:28:14:a3:d8:ff:79:de:ad:a9:a4:74:54:99:
f7:e0:b0:4b:6c:9e:69:91:65:e9:8a:da:24:b6:b1:
b4:21:0f:87:b8:cc:34:e0:19:39:c4:fe:a7:12:22:
df:4c:88:c4:02:53:80:01:27:c7:75:c0:40:fc:38:
01:32:be:c1:b3:dd:99:76:92:f6:7d:7a:4f:f0:39:
5b:5b:8e:30:7b:d0:88:b3:1f:fe:72:88:cb:80:e8:
dc:86:7f:cf:2d:53:dd:e6:2a:63:17:3a:72:f9:3e:
64:b4:df:cc:16:d4:a2:be:be:73:ef:70:9e:04:d4:
67:57:84:a2:ab:84:47:e2:d3:93:ea:ff:e0:68:08:
7c:7a:5f:df:20:ad:41:37:9f:c7:17:ab:05:c2:61:
a4:02:d1:30:a5:a2:c3:6d:d8:66:35:f6:62:06:34:
56:c0:ed:c9:22:dd:fb:3e:c5:64:90:a2:fc:01:fd:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.94.0/24
IPv6:
2a13:aa40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216471
219321
Signature Algorithm: sha256WithRSAEncryption
aa:c5:32:f6:99:d4:1c:b8:e9:f8:cf:14:18:2c:d5:ad:0c:4a:
cc:a6:f8:0f:84:2d:b3:1e:a2:f0:a6:b4:32:33:83:a7:33:af:
70:47:9d:c0:16:dd:b3:04:cb:6c:9d:0f:2a:62:f7:ee:21:f7:
f5:b1:83:47:05:51:53:36:b1:0b:80:1a:08:9d:e0:63:82:38:
ba:51:e0:62:11:78:90:00:79:d9:57:c4:a2:1d:44:4e:b8:a1:
66:9f:91:dd:85:b9:cc:62:14:33:48:f9:2a:b9:df:c2:cb:67:
45:0a:dc:b8:bc:7b:26:aa:f5:91:18:93:63:6d:49:f9:03:52:
72:b1:8b:cb:29:dd:c2:d9:61:e0:e4:78:bd:9f:0f:df:c1:07:
51:3c:bd:3f:fa:dc:7d:82:bf:d5:d0:de:8a:4e:f1:1e:15:86:
69:1f:4f:f3:b0:71:44:40:21:c9:bf:23:21:07:bb:e2:61:d8:
f1:e6:85:d8:3e:66:fa:9d:e2:c2:7a:90:cc:cd:7c:7d:cc:40:
24:35:25:9d:eb:0e:7c:26:95:00:00:30:29:7b:e7:7c:8c:d9:
b7:6b:b1:82:96:c4:dd:ba:c6:1e:64:3d:66:1a:70:73:05:9d:
14:45:19:d3:ce:71:30:7d:e7:7f:c0:33:3a:c4:8e:e1:09:05:
da:fe:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:14 2026 by rpki-client