Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h-GynEd57d28D6KliBB7iU669t0.cer
File: h-GynEd57d28D6KliBB7iU669t0.cer (raw, json)
Hash identifier: VD0SbXTFEcgMGDnWoXVGaGaSKUJIJbFtsw91hnS+AYw=
Subject key identifier: 87:E1:B2:9C:47:79:ED:DD:BC:0F:A2:A5:88:10:7B:89:4E:BA:F6:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E16DE208AE011A940280E1549A8230BD7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/h-GynEd57d28D6KliBB7iU669t0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 11 May 2026 11:48:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209532
AS: 212207
IP: 147.78.172.0/22
IP: 194.156.149.0/24
IP: 194.156.160.0/24
IP: 194.156.164.0/24
IP: 194.156.173.0/24
IP: 2a0e:6e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:de:20:8a:e0:11:a9:40:28:0e:15:49:a8:23:0b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 11 11:48:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87e1b29c4779edddbc0fa2a588107b894ebaf6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:39:fd:a5:0c:4f:d1:6c:d1:70:54:bc:62:f4:
83:aa:9f:25:33:36:a3:91:a2:57:da:df:9e:85:59:
2a:87:6f:8b:f0:33:9e:10:47:54:2a:b1:b4:1c:7d:
97:52:6f:eb:97:88:db:ee:91:9b:88:97:56:1c:fd:
b0:0b:cb:14:d5:b5:1d:0b:eb:9d:3d:af:e6:54:7f:
f8:98:84:19:57:3c:0c:21:4b:b3:0e:28:a4:a7:27:
7b:9b:91:d5:13:bc:e7:73:bb:fc:34:3c:36:c2:de:
b1:99:4e:1a:83:57:b5:c1:ae:49:62:8f:c5:d7:37:
49:55:5a:f2:0c:43:71:f9:31:40:d7:15:50:5b:88:
22:12:d2:9d:05:4f:7c:d0:dd:aa:dd:82:fa:24:32:
1f:ac:27:22:16:39:40:b2:f1:b7:ee:80:f6:d4:36:
9c:4a:0d:5b:14:7e:4b:91:b4:f8:84:15:73:0e:f0:
d1:85:b6:41:1c:09:01:74:25:3a:20:0d:18:b4:74:
84:16:ea:6b:b5:b9:e1:fc:ac:b4:69:01:1d:43:b7:
3d:84:90:69:e7:09:6b:49:78:5f:21:65:56:8e:c7:
34:f0:d0:80:c5:46:f0:04:79:e5:79:5e:a5:ff:fc:
2b:17:fd:4a:72:5e:4b:4d:6f:f6:29:e8:75:10:5e:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E1:B2:9C:47:79:ED:DD:BC:0F:A2:A5:88:10:7B:89:4E:BA:F6:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/h-GynEd57d28D6KliBB7iU669t0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.172.0/22
194.156.149.0/24
194.156.160.0/24
194.156.164.0/24
194.156.173.0/24
IPv6:
2a0e:6e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209532
212207
Signature Algorithm: sha256WithRSAEncryption
65:54:1b:15:4e:bb:b2:7b:5d:4e:4e:9b:fb:5c:9e:00:3b:46:
83:dc:5a:5c:c3:0f:c2:8c:23:1e:4c:70:7a:3f:54:6e:42:ae:
c1:0d:3a:55:ec:8d:6d:d1:20:85:c2:13:4f:24:f2:a4:3b:6c:
dc:08:72:09:06:f7:04:12:f8:2e:3c:75:e6:3a:b2:53:ab:bc:
01:1f:c8:7c:86:79:fd:72:19:3c:bb:0d:cf:d9:bf:df:89:bc:
45:de:b6:71:4b:2a:84:db:e7:23:72:6e:b1:52:0f:d7:e5:98:
71:1d:ce:5e:5f:16:7c:4d:d5:e0:b8:6e:95:f3:6e:08:83:7a:
1f:a0:3f:6c:8b:fb:46:b4:a0:ac:73:c3:aa:1c:d2:e1:66:9d:
3e:43:d9:94:9e:06:5b:af:79:90:d0:44:f6:a5:75:dc:df:3a:
74:1b:13:fd:6b:8f:81:a3:c5:d2:0b:3a:b9:b0:b2:0a:ca:d5:
79:58:d8:45:c9:1a:a3:ca:96:6b:ca:cd:90:13:11:65:b6:10:
c8:6c:58:4c:05:9e:99:20:e7:e6:86:66:24:8f:a8:84:5f:d0:
2b:7d:26:13:7a:d0:3a:23:5a:d4:01:5b:ad:7f:a2:0a:e5:10:
81:2c:c7:37:64:c3:99:c9:6a:cf:5d:0c:02:a3:d8:a9:9f:08:
12:bb:f0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:15 2026 by rpki-client