Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
File: _H1Kt3YauiTzPVtt-8J8q3OLte4.cer (raw, json)
Hash identifier: IiGzdz8kV9lE2S4tUtPzTZXCVzNCk9Oxy8prdqqjqgc=
Subject key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C80B68E3E1B2B0F9E804524385D8F0D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:19:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.1.109.0/24
IP: 2001:7f8:c3::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:b6:8e:3e:1b:2b:0f:9e:80:45:24:38:5d:8f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:58:ef:02:4a:03:44:42:16:e2:43:00:12:
fa:a2:55:31:cd:86:f4:b8:ec:a3:d8:1b:3e:f4:56:
f2:08:af:f5:98:bb:c9:50:d5:91:a2:12:02:06:45:
31:8c:94:77:bf:c8:21:5e:f0:68:50:55:31:a0:3e:
20:50:f3:17:a8:3c:5d:cf:d7:46:28:24:24:d8:6c:
60:e7:0f:d6:b0:b1:6d:94:14:d7:69:45:27:e0:23:
4c:95:c3:92:7a:bc:65:a3:2f:77:a8:9f:12:fa:d9:
fb:92:cc:28:95:ec:e6:39:68:6a:69:8f:65:dc:eb:
77:eb:47:49:10:3c:b9:ed:22:ec:fb:1d:4c:81:37:
c5:28:0f:75:fe:f9:c3:16:9b:80:32:aa:be:8c:61:
6d:b0:b5:89:0b:7c:e8:33:f4:90:db:80:0b:7e:0c:
d0:bf:fd:f6:e9:f2:02:48:f8:bf:cb:04:e4:78:b1:
73:32:f3:8f:ef:ed:91:b5:e5:6f:5f:c9:ba:c7:06:
6d:1d:c6:f0:6b:c0:88:cc:72:45:dc:a4:00:2a:6e:
c3:45:b3:8c:76:2b:50:b9:d9:fb:2e:67:5e:f3:df:
c9:b2:78:84:87:80:da:8a:21:9f:ad:5b:4f:57:70:
36:11:6a:ce:d2:d6:80:db:80:b6:79:2f:8e:10:91:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.109.0/24
IPv6:
2001:7f8:c3::/48
Signature Algorithm: sha256WithRSAEncryption
38:25:a8:43:d6:ed:11:53:d7:85:81:2e:fa:01:42:c9:ca:3b:
c9:bb:94:c9:9b:61:c7:ad:1b:55:e6:ce:6d:bc:41:4c:bd:bc:
f1:7b:f9:f0:2b:f0:33:ca:ba:71:93:3a:ec:c9:8a:7b:27:da:
24:7d:5a:f5:89:1a:85:cf:15:d0:c6:fb:66:2d:5d:a8:f0:cc:
6a:0e:bd:0a:d7:0f:28:0d:04:24:3c:7d:f6:bf:0f:cb:bc:1a:
56:4b:d7:45:60:6b:57:ae:05:71:52:88:15:59:41:4e:a7:d3:
0b:91:ad:d0:7e:ea:03:73:5c:ec:67:f4:e0:0d:25:36:70:9f:
a0:83:2e:a7:82:ad:0c:cc:83:21:11:2a:af:95:a1:f8:13:e5:
4f:2d:f5:95:20:e5:d0:0e:19:d6:2f:c3:0d:a0:34:07:fa:a6:
08:fb:9d:12:52:51:e8:c4:e9:16:6b:f3:71:5e:40:d9:04:34:
01:d9:3a:5e:7b:bb:c3:ae:07:3a:2f:db:fe:d4:2b:83:46:d5:
2a:22:56:60:32:50:62:1e:45:df:cf:26:cf:77:b7:92:0f:ea:
b0:d2:2e:cc:68:01:1c:fa:12:45:d3:21:75:1c:df:3f:72:8a:
08:1e:7a:d4:9b:14:82:6f:e9:6a:de:d2:27:5c:b5:1b:ec:92:
bc:f2:2e:03
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAZt8gLaOPhsrD56ARSQ4XY8NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzdkNGFiNzc2MWFiYTI0ZjMzZDViNmRmYmMyN2NhYjczOGJiNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFtY7wJKA0RCFuJDABL6olUxzYb0
uOyj2Bs+9FbyCK/1mLvJUNWRohICBkUxjJR3v8ghXvBoUFUxoD4gUPMXqDxdz9dG
KCQk2Gxg5w/WsLFtlBTXaUUn4CNMlcOSerxloy93qJ8S+tn7kswolezmOWhqaY9l
3Ot360dJEDy57SLs+x1MgTfFKA91/vnDFpuAMqq+jGFtsLWJC3zoM/SQ24ALfgzQ
v/326fICSPi/ywTkeLFzMvOP7+2RteVvX8m6xwZtHcbwa8CIzHJF3KQAKm7DRbOM
ditQudn7Lmde89/JsniEh4DaiiGfrVtPV3A2EWrO0taA24C2eS+OEJH9IwIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFPx9Srd2Grok8z1bbfvCfKtzi7XuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzAyODdj
Zi04NTNiLTQ1MTYtOWYwNi00NTJlYzNhOTU4OGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvMDI4N2Nm
LTg1M2ItNDUxNi05ZjA2LTQ1MmVjM2E5NTg4Yi8xL19IMUt0M1lhdWlUelBWdHQt
OEo4cTNPTHRlNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAuQFtMA8EAgACMAkDBwAgAQf4AMMwDQYJKoZI
hvcNAQELBQADggEBADglqEPW7RFT14WBLvoBQsnKO8m7lMmbYcetG1Xmzm28QUy9
vPF7+fAr8DPKunGTOuzJinsn2iR9WvWJGoXPFdDG+2YtXajwzGoOvQrXDygNBCQ8
ffa/D8u8GlZL10Vga1euBXFSiBVZQU6n0wuRrdB+6gNzXOxn9OANJTZwn6CDLqeC
rQzMgyERKq+VofgT5U8t9ZUg5dAOGdYvww2gNAf6pgj7nRJSUejE6RZr83FeQNkE
NAHZOl57u8OuBzov2/7UK4NG1SoiVmAyUGIeRd/PJs93t5IP6rDSLsxoARz6EkXT
IXUc3z9yiggeetSbFIJv6Wre0idctRvskrzyLgM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:58:37 2026 by rpki-client